CONTEXT-SENSITIVE DEFRAGMENTATION AND AGGREGATION OF CONTAINERIZED WORKLOADS RUNNING ON EDGE DEVICES

    公开(公告)号:US20240048451A1

    公开(公告)日:2024-02-08

    申请号:US18450348

    申请日:2023-08-15

    Applicant: VMware, Inc.

    CPC classification number: H04L41/0897 H04L41/40

    Abstract: Computer-implemented methods, media, and systems for context-sensitive defragmentation and aggregation of containerized workloads running on edge devices are disclosed. One example method includes monitoring telemetry data from multiple software defined wide area network (SD-WAN) edge devices that run multiple workloads, where the telemetry data includes at least one of resource utilization at the multiple SD-WAN edge devices, inter-workload trigger dependency, or inter-workload data dependency among the multiple workloads. It is determined, based on the telemetry data, that at least two of the multiple workloads running on at least two SD-WAN edge devices have the inter-workload trigger dependency or the inter-workload data dependency. In response to the determination that the at least two of the multiple workloads have the inter-workload trigger dependency or the inter-workload data dependency, a first process of migrating the at least two of the multiple workloads to a first SD-WAN edge device of is initiated.

    Network attack identification, defense, and prevention

    公开(公告)号:US11757917B2

    公开(公告)日:2023-09-12

    申请号:US17078203

    申请日:2020-10-23

    Applicant: VMWARE, INC.

    Abstract: The disclosure provides an approach for detecting and preventing attacks in a network. Embodiments include receiving network traffic statistics of a system. Embodiments include determining a set of features of the system based on the network traffic statistics. Embodiments include inputting the set of features to a classification model that has been trained using historical features associated with labels indicating whether the historical features correspond to attacks. Embodiments include receiving, as output from the classification model, an indication of whether the system is a target of an attack. Embodiments include receiving additional statistics related to the system. Embodiments include analyzing, in response to the indication that the system is the target of the attack, the additional statistics to identify a source of the attack. Embodiments include performing an action to prevent the attack based on the source of the attack.

    VIRTUAL PROCESSING UNIT SCHEDULING IN A COMPUTING SYSTEM

    公开(公告)号:US20250039093A1

    公开(公告)日:2025-01-30

    申请号:US18380218

    申请日:2023-10-16

    Applicant: VMWARE, INC.

    Abstract: An example computer system includes a hardware platform including a processing unit and software executing on the hardware platform. The software includes a workload and a scheduler, the workload including a network function chain having network functions, the scheduler configured to schedule the network functions for execution on the processing unit. A downstream network function includes a congestion monitor configured to monitor a first receive queue supplying packets to the downstream network function, the congestion monitor configured to compare occupancy of the first receive queue against a queue threshold. An upstream network function including a rate controller configured to receive a notification from the congestion monitor generated in response to the occupancy of the first receive queue exceeding the queue threshold, the rate controller configured to modify a rate of packet flow between a second receive queue and the upstream network function in response to the notification.

    GRAPHICAL USER INTERFACE FOR WORKLOAD MIGRATION

    公开(公告)号:US20240118800A1

    公开(公告)日:2024-04-11

    申请号:US18076428

    申请日:2022-12-07

    Applicant: VMWARE, INC.

    CPC classification number: G06F3/0486 G06F9/505 G06F9/5088 G06F2209/505

    Abstract: Systems and methods are described for providing a graphical user interface (“GUI”) for migrating workloads in a system. The GUI can display the locations of edge devices in the system and workloads running on the edge devices. A user can drag a workload from one edge device to another in the GUI, and in response the system can schedule the workload to be migrated accordingly. Before the migration is performed, the GUI can calculate a change in computing resource usage at both edge devices. The GUI can display the usage data and prompt the user to confirm the migration. If the user confirms, the workload can be deployed at the target edge device and removed from the source edge device.

    REMOTE DIRECT MEMORY ACCESS (RDMA)-BASED RECOVERY OF DIRTY DATA IN REMOTE MEMORY

    公开(公告)号:US20220365855A1

    公开(公告)日:2022-11-17

    申请号:US17876395

    申请日:2022-07-28

    Applicant: VMware, Inc.

    Abstract: Techniques for implementing RDMA-based recovery of dirty data in remote memory are provided. In one set of embodiments, upon occurrence of a failure at a first (i.e., source) host system, a second (i.e., failover) host system can allocate a new memory region corresponding to a memory region of the source host system and retrieve a baseline copy of the memory region from a storage backend shared by the source and failover host systems. The failover host system can further populate the new memory region with the baseline copy and retrieve one or more dirty page lists for the memory region from the source host system via RDMA, where the one or more dirty page lists identify memory pages in the memory region that include data updates not present in the baseline copy. For each memory page identified in the one or more dirty page lists, the failover host system can then copy the content of that memory page from the memory region of the source host system to the new memory region via RDMA.

    Rate proportional scheduling to reduce packet loss in virtualized network function chains

    公开(公告)号:US12250159B2

    公开(公告)日:2025-03-11

    申请号:US17974575

    申请日:2022-10-27

    Applicant: VMWARE, INC.

    Abstract: Disclosed are various embodiments for rate proportional scheduling to reduce packet loss in virtualized network function chains. A congestion monitor executed by a first virtual machine executed by a host computing device can detect congestion in a receive queue associated with a first virtualized network function implemented by a first virtual machine. The congestion monitor can send a pause signal to a rate controller executed by a second virtual machine executed by the host computing device. The rate controller can receive the pause signal. In response, the rate controller can pause the processing of packets by a second virtualized network function implemented by the second virtual machine to reduce congestion in the receive queue of the first virtualized network function.

    ROUTING BASED ON GEOLOCATION COSTS
    10.
    发明公开

    公开(公告)号:US20230396670A1

    公开(公告)日:2023-12-07

    申请号:US17833566

    申请日:2022-06-06

    Applicant: VMware, Inc.

    CPC classification number: H04L67/1021

    Abstract: Some embodiments provide a method of implementing context-aware routing for a software-defined wide-area network, at an SD-WAN edge forwarding element (FE) located at a branch network connected to the SD-WAN. The method receives, from an SD-WAN controller, geolocation route weights for each of multiple cloud datacenters across which a set of application resources is distributed. The application resources are all reachable at a same virtual network address. For each of the cloud datacenters, the method installs a route for the virtual network address between the branch network and the cloud datacenter. The routes have different total costs based at least in part on the geolocation metrics received from the SD-WAN controller. The SD-WAN edge FE selects between the routes to establish connections to the set of application resources.

Patent Agency Ranking