Abstract: Methods, systems, and computer program products for direct assignment of physical devices to confidential virtual machines (VMs). At a first guest privilege context of a guest partition, a direct assignment of a physical device associated with a host computer system to the guest partition is identified. The guest partition includes the first guest privilege context and a second guest privilege context, which is restricted from accessing memory associated with the first guest privilege context. The guest partition corresponds to a confidential VM, such that a memory region associated with the guest partition is inaccessible to a host operating system. It is determined, based on a policy, that the physical device is allowed to be directly assigned to the guest partition. Communication between the physical device and the second guest privilege context is permitted, such as by exposing the physical device on a virtual bus and/or forwarding an interrupt.

Abstract: A high capacity broadband service is provided from an Earth orbiting satellite having a payload that includes multiple large antennas, the satellite having an inverted configuration when deployed on orbit. The satellite has an aft surface proximate to a launch vehicle structural interface, a forward surface opposite to said aft surface, and a structure disposed therebetween. In a launch configuration, two or more deployable antennas are disposed, undeployed, on or proximate to and forward of the forward surface; on-orbit, the payload is operable when the satellite is disposed with the aft surface substantially Earth facing while the forward surface is substantially facing in an anti-Earth direction. Each deployable antenna is disposed, so as to be Earth facing, when deployed, in a position substantially forward and outboard of the forward surface.

Abstract: A high capacity broadband service is provided from an Earth orbiting satellite having a payload that includes multiple large antennas, the satellite having an inverted configuration when deployed on orbit. The satellite has an aft surface proximate to a launch vehicle structural interface, a forward surface opposite to said aft surface, and a structure disposed therebetween. In a launch configuration, two or more deployable antennas are disposed, undeployed, on or proximate to and forward of the forward surface; on-orbit, the payload is operable when the satellite is disposed with the aft surface substantially Earth facing while the forward surface is substantially facing in an anti-Earth direction. Each deployable antenna is disposed, so as to be Earth facing, when deployed, in a position substantially forward and outboard of the forward surface.