Abstract: An aspect of the present invention provides a corresponding exclusive communication stack (e.g., TCP/IP stack) for each zone entity of a server system. In an embodiment, multiple server systems together implement a zone cluster containing such zone entities provided on corresponding server systems. As a result, when an application executing on a first zone entity of a first server is moved to a second zone entity of a zone cluster on a second server, the application continues to communicate using exclusive communication stack provided for the second zone entity. In view of the dedicated resources for network communication, applications executing in any zone entity of such a zone cluster, may have a desired level of predictable throughput performance and security for the communicated data packets.

Abstract: Some embodiments may include multiple computers comprising a multi-level security system. The security system includes a first set of zones and a second set of zones, each having access to resources of a computer, a first security container having a first security label containing the first set of zones, and a second security container with a second security label containing the second set of zones. The resources and data of each of the first and second set of zones inherit the security label of their corresponding security container.

Abstract: An aspect of the present invention provides a corresponding exclusive communication stack (e.g., TCP/IP stack) for each zone entity of a server system. In an embodiment, multiple server systems together implement a zone cluster containing such zone entities provided on corresponding server systems. As a result, when an application executing on a first zone entity of a first server is moved to a second zone entity of a zone cluster on a second server, the application continues to communicate using exclusive communication stack provided for the second zone entity. In view of the dedicated resources for network communication, applications executing in any zone entity of such a zone cluster, may have a desired level of predictable throughput performance and security for the communicated data packets.

Abstract: Some embodiments may include multiple computers comprising a multi-level security system. The security system includes a first set of zones and a second set of zones, each having access to resources of a computer, a first security container having a first security label containing the first set of zones, and a second security container with a second security label containing the second set of zones. The resources and data of each of the first and second set of zones inherit the security label of their corresponding security container.

Abstract: A device, system, and method are directed towards upgrading software on a cluster. A cluster of nodes is divided into two partitions. The first partition is brought offline, and the software on each of its nodes is updated. The nodes are partially initialized and form an offline cluster, leaving uninitialized subsystems that share external resources or external communication. The second partition is brought offline. The nodes of the first partition complete their initialization and the first partition cluster is brought online. The nodes of the second partition are updated and join the first partition cluster. Quorum mechanisms are adjusted to allow each partition to operate as a cluster. The system thereby updates each node of the cluster with minimal time offline and without requiring software of different versions to intercommunicate.