Abstract: A first set of storage accesses of a storage system are identified. The first set of storage accesses are associated with a first user. A first plurality of storage access notifications is sent to a first message queue associated with the first user based on the first set of storage accesses. A first message queue timeout value of the first message queue is set based on at least one characteristic associated with the first set of storage accesses.

Abstract: A system includes a hypervisor, a memory, and boot firmware stored in the memory. The boot firmware is configured to execute on a processor to load a trusted code that includes a condition checker from the hypervisor, check a signature of the trusted code, and verify the signature is trusted by a guest. The boot firmware is also configured to load the trusted code into an encrypted memory at a known guest address. The hypervisor is configured to protect the known guest address. The trusted code includes a first instruction, one or more intermediate instructions, and a final instruction. The first instruction and the final instruction are exits to the hypervisor. The hypervisor is also configured to execute the condition checker and detect an inconsistency in guest memory.

Abstract: Events to be executed by one or more serverless functions are received from an events queue. A determination that a first set of the events are to be executed by one or more serverless functions at a local host system and a second set of the events are to be executed at one or more serverless functions at a remote host system is made. The first set of the events are directed to the one or more serverless functions at the local host system and the second set of the events are directed to the one or more serverless functions at the remote host system.

Abstract: A server device that is configured to provide service to client devices in a second geographic zone determines that a client device is transitioning from a first geographic zone to the second geographic zone. The server device receives a client device manifest that identifies a configuration of the client device. Based on the client device manifest, the server device determines that the configuration of the client device does not match a policy of the second geographic zone. The server device sends to the client device instructions that, if performed by the client device, will cause the configuration of the client device to match the policy of the second geographic zone.

Abstract: A system includes a host with a memory, a processor, a supervisor, and a device with access to DMAs. The system also includes a guest with access to GMAs and configured to initialize a first driver for the device. The supervisor is configured to map GMAs to a first subset of DMAs, map SMAs to a second subset of DMAs, which are located in a reserved range of addresses, and to initialize a second driver for the device with access to the SMAs. The device is configured to communicate with the guest and the supervisor via the first subset of DMAs and the SMAs respectively. The supervisor is configured to intercept a request from the first driver and validate that memory addresses associated with the request are outside of the reserved range. The supervisor is also configured to send the request to the device via the second driver.

Abstract: A software-development tool can present telemetry data with associated source code. For example, a computing device can identify, by a text editor, source code of a software application that is associated with telemetry data of performance metrics associated with running the source code. The computing device can display, by the text editor, an icon with the source code. The icon can indicate the source code is associated with the telemetry data. The computing device can receive an interaction with the icon. In response to receiving the interaction, the computing device can retrieve, by the text editor, the telemetry data from a telemetry-data repository for display in the text editor.

Abstract: Systems and methods providing a parallel booting operating system. In one implementation, a primary operating system is booted using a primary operating system image residing in a first disk partition. The primary operating system includes a base operating system and provides a first service. A secondary operating system is booted in parallel to the primary operating system. The secondary operating system is booted using a secondary operating system image residing in a second disk partition. The secondary operating system can include a copy of the base operating system, and can provide the first service and a second service. Responsive to a triggering event, the primary operating system is switched to the secondary operating system.

Abstract: A system and method of dynamically mapping a network topology of a mesh network of nodes. The method including maintaining, by a processing device of a control node of the mesh network, a network topology map indicating groups of neighboring nodes. The method including determining that a first node of the mesh network discovered a neighbor change event associated with a second node. The method including identifying, based on the network topology map, a group of neighboring nodes of a target node of the mesh network responsive to determining that the first node detected the neighbor change event. The method including transmitting a targeted message to a first neighboring node of the group of neighboring nodes to cause the first neighboring node to notify the group of neighboring nodes of the neighbor change event.

Abstract: An example method may include determining whether a preemption flag associated with a first input/output (I/O) handling thread is equal to a first value indicating that preemption of the first I/O queue handling thread is forthcoming, wherein the first I/O queue handling thread is executing on a first processor, the first I/O queue handling thread is associated with a first set of one or more queue identifiers, and each queue identifier identifies a queue being handled by the first I/O queue handling thread, and, responsive to determining that the preemption flag is equal to the first value, transferring the first set of one or more queue identifiers to a second I/O queue handling thread executing on a second processor. Transferring the first set of queue identifiers may include removing the one or more queue identifiers from the first set.

Abstract: A continuous optimizer detects a code promotion of a candidate release of an application. In response to the code promotion, the continuous optimizer instantiates a JVM and profiles the application to obtain a JVM profile. The continuous optimizer benchmarks the candidate release against the JVM and JVM profile. The continuous optimizer further compares the benchmark results with previous benchmark results. Based upon the comparison and a set of rules, the continuous optimizer causes the candidate release to be promoted.

Abstract: The technology disclosed herein enables a computing device to use a trusted execution environment to retrieve protected content from mutually-untrusted devices. An example method may include: establishing, by a processor, a trusted execution environment in a computing device, wherein the trusted execution environment uses memory encryption and comprises executable code; providing, by the processor, attestation data to a set of computing devices, the attestation data representing the executable code in the trusted execution environment; receiving, by the processor, cryptographic key data from the set of computing devices; and causing, by the processor, the executable code to execute in the trusted execution environment and to initiate an operation using the cryptographic key data.

Abstract: A method includes receiving a system call from an application within a container executing on an operating system, the system call comprising a synchronization operation to synchronize memory of the application to storage. The method further includes determining, by the kernel, whether a system call filtering policy associated with the container indicates that the system call is to be prevented. preventing, by the kernel, performance of the synchronization operation in view of the system call filtering policy.

Abstract: A system includes a memory including a ring buffer having a plurality of slots, a processor in communication with the memory, a guest operating system, and a hypervisor. The hypervisor is configured to detect a request associated with a memory entry, retrieve up to a predetermined quantity of memory entries in the ring buffer from an original slot to an end slot, and test a respective descriptor of each successive slot from the original slot through the end slot while the respective descriptor of each successive slot in the ring buffer remains unchanged. Additionally, the hypervisor is configured to execute the request associated with the memory entries and respective valid descriptors. The hypervisor is also configured to walk the ring buffer backwards from the end slot to the original slot while clearing the valid descriptors.

Abstract: System calls can be used to troubleshoot problems with software services. For example, a system can receive tracing data indicating system calls executed by a group of software services. The system can analyze parameters of the system calls described in the tracing data to identify relationships between the system calls. The system can determine a sequence of system calls between a predefined starting event and a predefined ending event based on the relationships between the system calls. The system can then generate an output to a user indicating the sequence of system calls. The output can be used by the user to troubleshoot a problem associated with executing the plurality of software services.

Abstract: Migration rules for a migration engine can be automatically generated using an automated pipeline. In one example, a system can receive first information indicating first characteristics of first software and can receive second information indicating second characteristics of second software. The system can determine a difference between the first characteristics and the second characteristics. The system can then generate a rule for a migration engine based on the difference, the rule including a conditional statement configured for use by the migration engine to detect the difference in relation to a migration process for migrating the first software to the second software. The system can provide the rule for use by the migration engine, to enable the migration engine to detect the difference and responsively generate a notification associated with the difference.

Abstract: Systems and methods for direct memory control operations on memory data structures. In one implementation, a processing device receives, from a component of an application runtime environment, a request to perform a memory access operation on a portion of a memory space; determines a data structure address for a portion of a memory data structure, wherein the portion of the data structure is associated with the portion of the memory space; and performs, in view of the data structure address, the memory access operation directly on the portion of the memory data structure.

Abstract: A virtual machine's (VM's) usage of a resource over a first time period may be monitored to determine a load pattern for the VM. A time series analysis of the load pattern may be performed to generate a predictive resource usage model, the predictive resource usage model indicating one or more predicted variations in the usage of the resource by the VM over a second time period. A predicted resource usage of the VM at a future time that is within the second time period may be determined based, at least in part, on the predictive resource usage model. An amount of the resource to allocate to the VM at a current time may be determined based, at least in part, on the predicted resource usage of the VM at the future time and the actual resource usage of the VM at the current time.

Abstract: A method and system for debugging SQL statements by computing and saving to memory metadata for each component part of the statement. The system includes a user interface, memory, and a processor, the processor configured to compute and save to memory metadata of SQL statements. The stored metadata may be used for later computation of modified SQL statements. The metadata may also be displayed through a user interface to assist a user in the process of debugging component portions of an SQL statement.

Abstract: A method includes receiving, by a producer thread of a plurality of producer threads, an offer request associated with an item. The producer thread increases a sequence and determines (i) a chunk identifier of a memory chunk from a pool of memory chunks and (ii) a first slot position in the memory chunk to offer the item. The producer thread also writes the item into the memory chunk at the first slot position. Then, a first consumer thread of a plurality of consumer threads determines the first slot position of the item and consumes the item at the first slot position. A second consumer thread consumes another item at a second slot position in the memory chunk and recycles the memory chunk.

Abstract: The technology disclosed herein enables a processor that processes instructions synchronously in accordance with a processor clock to identify a first instruction specifying an asynchronous operation to be processed independently of the processor clock. The asynchronous operation is performed by an asynchronous execution unit that executes the asynchronous operation independently of the processor clock and generates at least one result of the asynchronous operation. A synchronous execution unit executes, in parallel with the execution of the asynchronous operation by the asynchronous execution unit, one or more second instructions specifying respective synchronous operations. Responsive to determining that the asynchronous execution unit has generated the at least one result of the asynchronous operation, the processor receives the at least one result of the asynchronous operation.