Abstract: A computer implemented method of converting a serialized virtual machine (VM) for a source virtualized computing environment, the serialized VM being stored in a data file having also metadata for instantiating the serialized VM in the source environment, the method including supplementing the data file with a software adapter including a plurality of executable disk image converters, each disk image converter being suitable for converting the serialized VM between disparate virtualized computing environments; a plurality of metadata mappings, each metadata mapping defining how the metadata is converted between disparate virtual computing environments; and executable code for effecting a conversion by executing an appropriate disk image converter and performing an appropriate metadata conversion to convert the data file for a target virtualized computing environment, such that the supplemented data file is operable to self-convert between the source virtualized computing environment and the target virtualized

Abstract: As part of a compute instance migration, a compute instance which was executing at a first server begins execution at a second server before at least some state information of the compute instance has reached the second server. In response to a determination that a particular page of state information is not present at the second server, a migration manager running at one or more offload cards of the second server causes the particular page to be transferred to the second server via a network channel set up between the offload cards of both servers, and stores the page into main memory of the second server.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for distributing content items. In one aspect, a method includes receiving user interaction data specifying user interactions with a publisher resource. A heat map specifying levels of user interaction with various portions of the publisher resource is created. Content item slot performance information specifying one or more performance measures for content items presented in various candidate content item slot locations are identified. One of the candidate content item slot locations is selected based on the heat map and the one or more performance measures. Data that cause presentation of suggestion information that identify the one candidate content item slot location as a suggested content item slot location are generated and output.

Abstract: Systems and methods for memory management for virtual machines. An example method may comprise running, by a host computer system, a Level 0 hypervisor managing a Level 1 virtual machine running a Level 1 hypervisor which manages a Level 2 virtual machine having encrypted memory pages. The Level 1 hypervisor may generate a shadow page table where each shadow page table entry of the plurality of shadow page table entries maps a Level 2 guest virtual address of a Level 2 address space associated with the Level 2 virtual machine to a corresponding Level 1 guest physical address of a Level 1 address space associated with the Level 1 virtual machine. The Level 0 hypervisor may generate a Level 0 page table comprising a plurality of Level 0 page table entries that maps a Level 1 guest physical address to a corresponding Level 0 host physical address.

Abstract: An illustrative file indexing approach enhances what was previously possible with hypervisor-free live browsing of virtual machine (VM) block-level backup copies. Capabilities are described for indexing files discovered in VM block-level backup copies, including file content. The illustrative file indexing functionality activates a live-browse session to discover files present within VM block-level backup copies and indexes file names and directory structures as created by an original source VM, resulting in an illustrative file index. The illustrative file indexing functionality optionally indexes file contents within VM block-level backup copies, resulting in an illustrative content index. The file index and content index are retained in persistent data structure(s) stored apart from the VM block-level backup copies. The indexes are searchable without mounting or live-browsing the VM block-level backup copies. In some embodiments the file index and the content index are consolidated.

Abstract: A method for performing access management in a memory device, the associated memory device and the controller thereof, and the associated electronic device are provided. The method may include: receiving a host command and a logical address from a host device; performing a checking operation to obtain a checking result, for determining whether to load a logical-to-physical (L2P) table from the NV memory to a random access memory (RAM) of the memory device; reading the target data and associated metadata from the NV memory, wherein a latest version of the L2P table is available in the RAM when reading the target data from the NV memory is performed; and checking whether a recorded logical address within the metadata and the logical address received from the host device are equivalent to each other, to control whether to send the target data to the host device.

Abstract: Systems and methods for free memory hinting by virtual machines. An example method comprises: identifying, by a virtual machine running on a host computer system, a first memory page referenced by a free memory list maintained by the virtual machine; identifying a second memory page residing in a hinting buffer associated with the virtual machine; moving the second memory page to the free memory list; disassociating the first memory page from the free memory list; and notifying the host computer system of an identifier of the first memory page.

Abstract: Methods, systems, and computer program products are included for de-duplicating one or more memory pages. A method includes receiving, by a hypervisor, a list of read-only memory page hints from a guest running on a virtual machine. The list of read-only memory page hints specifies a first memory page marked as writeable. The method also includes determining whether the first memory page matches a second memory page. In response to a determination that the first memory page matches the second memory page, the hypervisor may deduplicate the first and second memory pages.

Abstract: In response to failure of a data storage drive, data previously stored on the failed drive is rebuilt on a replacement data storage drive by executing drive rebuild jobs on a first set of processor cores. While the data previously stored on the failed data storage drive is being rebuilt, a second set of processor cores is used to process host I/O (Input/Output) requests. The host I/O requests processed by the second set of processor cores may be a first set of host I/O requests processed during the data rebuild. When a current total number of outstanding host I/O requests exceeds a threshold maximum number of outstanding host I/O requests, at least one processor core in the first set of processor cores may be used to process a second set of host I/O requests while the data previously stored on the failed data storage drive is being rebuilt.

Abstract: Methods and devices for connecting a mobile device with different data storage devices located either locally or remotely are provided. The device may apply one or more rules to create a hierarchical virtualization of the several data storage devices. The virtualization may then be provided to the user as a single, hierarchical file system. Further, a monitoring system may monitor the file system to determine if any new applications have been installed or if applications are currently being executed. If a connection is made to a secure network, the system may provide the information derived from the monitoring to the secure network. The secure network can then analyze the information to determine if any of the applications should be uninstalled from the device or should be stopped while the device is connected to the network.

Abstract: An arena-based memory management system is disclosed. In response to a call to reclaim memory storing a group of objects allocated in an arena, an object not in use of the group of objects allocated in the arena is collected. A live object of the plurality of objects is copied from the arena to a heap.

Abstract: An external processing system includes a port to exchange signals with a router. The external processing system also includes a processor to receive, from the router via the port, information representing an operating system and a hypervisor in response to the external processing system being connected to the router via the port. The processor instantiates the operating system and the hypervisor based on the received information. The router includes a port allocated to an external processing system and configured to exchange signals with the external processing system. The router also includes a controller to provide, to the external processing system via the port, information representing the operating system and the hypervisor in response to the external processing system being connected to the external processing system via the port.

Abstract: At a virtualization host which includes an instance partitioning controller, a set of resources is allocated to a compute instance by a virtualization manager. The first compute instance does not include another virtualization manager. In response to a communication from the controller, the virtualization manager allocates a subset of the resources to a child compute instance launched at the virtualization host. An application is executed within the child compute instance.

Abstract: Live process migration in response to real-time performance-based metrics is disclosed. At least one performance metric value that quantifies a performance metric of a first computing device is obtained. It is determined that the at least one performance metric value has an undesirable value. The initiation of a live migration of a process executing on the first computing device to a second computing device is caused based on determining that the at least one performance metric value has the undesirable value.

Abstract: Aspects of the disclosure provide for mechanisms for memory protection of virtual machines in a computer system. A first host page table and a second host page table is generated by a processing device running a hypervisor in view of a guest page table associated with a virtual machine. The first host page table includes a first mapping corresponding to a privileged page of a guest memory and a second mapping corresponding to an unprivileged page of the guest memory. The second host page table includes a third mapping corresponding to the unprivileged page of the guest memory. The first host page table is associated with the virtual machine. In response to detecting a transition from a first guest mode to a second guest mode by the virtual machine, the virtual machine is associated with the second page table.

Abstract: A system and methods for alternate user communication routing are described. Unauthorized users are identified and alternate treatments are provided in order to deter unauthorized access and create opportunities for data collection. The use of a varied set of alternate treatments provides an enhanced view of unauthorized user behavior and an increased ability to track future unauthorized user actions by recording various user identity/communication characteristics specific to known unauthorized users. Alternate treatments may be provided randomly based on a set of alternate treatments previously provided to a specific user, or may be varied based on an identified group of unauthorized users presumed to be acting in concert.

Abstract: Systems and methods for supporting asynchronous management of unencrypted memory pages of a virtual machine (VM) are disclosed. In one implementation, a processing device may receive, at a destination hypervisor of a host machine as part of a migration process of a VM, two copies of a memory page of the VM, the two copies comprising: a decrypted copy of the memory page, and an unencrypted copy of the memory page. The processing device may also cause the VM to execute a VM resume code, wherein executing the VM resume code comprises: determining whether the memory page is unencrypted based on a page table of the VM. Responsive to determining that the memory page is unencrypted, the processing device may copy the unencrypted copy of the memory page to a guest memory address.

Abstract: The invention relates to alternate user communication routing for a one-time credential. When a user is determined to be an unauthorized user, the unauthorized user may be provided with an alternative one-time credential (e.g., one-time password, or the like) in response to the user trying to take an action (e.g., to access the organization systems in order to access information). When the unauthorized user tries to utilize the alternative one-time credential, the organization may identify the user as unauthorized and determine how to respond to the unauthorized user. In addition to the alternative one-time credential, one or more additional alternate treatments may be presented to the unauthorized user in order to identify, track, and/or prevent access by the unauthorized user.

Abstract: An aspect includes determining, via a processor, context attributes of a storage. Data address translation (DAT) tables are created, via the processor, to map virtual addresses to real addresses within the storage. When detecting, via the processor, that a context attribute of the storage has changed, and the DAT tables are updated based at least in part on the changed context attributes of the storage.

Abstract: A method for executing a virtualized application on a computing system that includes a user-space and a kernel-space is disclosed. The method includes executing an application in the user-space, executing a user-level virtualization layer in the user-space, the user-level virtualization layer including a set of rules, performing, via the user-level virtualization layer, user-level hooking of events that are generated by the executing application according to the set of rules to identify events of interest, and determining whether to allow or block a function corresponding to an event that is identified as an event of interest based on the set of rules in the user-level virtualization layer.

Abstract: Direct access to host memory for guests is disclosed. For example, a system includes a processor, a host memory, a filesystem daemon, a guest including a storage controller, and a filesystem queue accessible to the filesystem daemon and the storage controller. The storage controller receives a file retrieval request associated with a file stored in the host memory and forwards the file retrieval request to the filesystem daemon by adding the file retrieval request to the filesystem queue. The filesystem daemon retrieves the file retrieval request from the filesystem queue, determines a host memory address (HMA) associated with the file, and causes the HMA to be mapped to a guest memory address (GMA). The guest accesses the file in the host memory with the GMA, and later terminates access to the file, where the filesystem daemon is then configured cause the GMA to be unmapped.

Abstract: Improved techniques for dynamically responding to a fluctuating workload. Resources are reactively scaled for memory-intensive applications and automatically adapted to in response to workload changes without requiring pre-specified thresholds. A miss ratio curve (MRC) is generated for an application based on application runtime statistics. This MRC is then modeled as a hyperbola. An area on the hyperbola is identified as satisfying a flatten threshold. A resource allocation threshold is then established based on the identified area. This resource allocation threshold indicates how many resources are to be provisioned for the application. The resources are scaled using a resource scaling policy that is based on the resource allocation threshold.

Abstract: Various embodiments are generally directed to virtualized systems. A first guest memory page may be identified based at least in part on a number of accesses to a page table entry for the first guest memory page in a page table by an application executing in a virtual machine (VM) on the processor, the first guest memory page corresponding to a first byte-addressable memory. The execution of the VM and the application on the processor may be paused. The first guest memory page may be migrated to a target memory page in a second byte-addressable memory, the target memory page comprising one of a target host memory page and a target guest memory page, the second byte-addressable memory having an access speed faster than an access speed of the first byte-addressable memory.

Abstract: Embodiments disclose a system and method for reducing virtual address translation latency in a wide execution engine that implements virtual memory. One example method describes a method comprising receiving a wavefront, classifying the wavefront into a subset based on classification criteria selected to reduce virtual address translation latency associated with a memory support structure, and scheduling the wavefront for processing based on the classifying.

Abstract: A controller may include a memory configured to store a map update list in which information of map segments whose mapping information is to be updated is registered The controller may also include an unmap module. The unmap module may, in response to receiving an unmap command, generate a list information bitmap indicating map segments which are already registered in the map update list, check, using the generate list information bitmap, whether one or more unmap target map segments corresponding to the unmap command overlap the map segments registered in the map update list, using the generate list information bitmap, and selectively register the one or more unmap target map segments into the map update list according to the check result.

Abstract: Examples provide a method of communication between a client application and a filesystem server in a virtualized computing system. The client application executes in a virtual machine (VM) and the filesystem server executes in a hypervisor.

Abstract: Aspects of the disclosure provide for mechanisms for securing virtual machines in a computer system. A method of the disclosure includes: receiving a first resource request initiated by an application running on a virtual machine during initialization of the application; allocating, by a hypervisor, a resource to the application in view of the first resource; and in response to receiving a message indicating completion of the initialization of the application, blocking, by the hypervisor, at least one hypercall initiated by the virtual machine. The completion of the initialization of the application may correspond to initiation of execution of the application using the allocated resource.

Abstract: A virtual disk file, represented by a virtual disk that is offline, is scanned to obtain a binary signature indicating the virtual disk as being an MBR or GPT partitioned disk type. A disk signature is obtained for the MBR partitioned disk. A volume GUID is obtained for the GPT partitioned disk. Partitions on the virtual disk are identified. A system registry hive file is located. The system registry hive file is read to obtain a drive letter and one or more other values associated with the drive letter. A correlation is performed of the disk signature or volume GUID against the one or more other values associated with the drive letter. Based on the correlation, the drive letter is mapped to an identified partition.

Abstract: A computer system includes a translation lookaside buffer (TLB) data cache and a processor. The TLB data cache includes a hierarchical configuration comprising a first TLB array, a second TLB array, a third TLB array, and a fourth TLB array. The processor is configured to receive a first address for translation to a second address, and determine whether translation should be performed using a hierarchical page table or a hashed page table. The processor also determines (using a first portion of the first address) whether the first array stores a mapping of the first portion of the first address in response to determining that the translation should be performed using the hashed page table, and retrieving the second address from the third TLB array or the fourth TLB array in response to determining that the first TLB array stores the mapping of the first portion of the first address.

Abstract: There is provided a method and system with an improved bitmap access control method of file virtualization for large files in sandbox. The process divides a large file to pieces clusters by fixed byte counts, building a mapping relationship between logical view of sandboxed file and physical shadow file on disk. Thus, there is no need to copy an entire file when a file is modified and waste the user's disk storage.

Abstract: Availability against hardware failure and availability against maintenance are implemented without using dedicated systems. A system is provided, including: a first host computer to execute a first virtual machine for running a first application; and a second host computer to execute a second virtual machine for running a second application, wherein in a redundant operation mode, the second host computer mirrors an executable image of the first virtual machine to an executable image of the second virtual machine while stopping the execution of the second virtual machine, and in a multi-operation mode, the second host computer mirrors an internal state of the first application to an internal state of the second application while executing the second virtual machine in parallel with the first virtual machine.

Abstract: Instead of transferring a large original file, such as a virtual-machine image file, from a source system to a target system, the original file is encoded to define a recipe file that is transferred. The recipe is then decoded to yield a duplicate of the original file on the target system. Encoding involves identifying standard blocks in the original file and including standard-block identifiers for the standard blocks in the recipe in lieu of the original blocks. Decoding involves an exchange with a standard-block identifier server system, which provides standard blocks in response to received standard-block identifiers.

Abstract: Methods and apparatus for memory allocation and reallocation in networking stack infrastructures. Unlike prior art monolithic networking stacks, the exemplary networking stack architecture described hereinafter includes various components that span multiple domains (both in-kernel, and non-kernel). For example, unlike traditional “socket” based communication, disclosed embodiments can transfer data directly between the kernel and user space domains. A user space networking stack is disclosed that enables extensible, cross-platform-capable, user space control of the networking protocol stack functionality. The user space networking stack facilitates tighter integration between the protocol layers (including TLS) and the application or daemon. Exemplary systems can support multiple networking protocol stack instances (including an in-kernel traditional network stack). Due to this disclosed architecture, physical memory allocations (and deallocations) may be more flexibly implemented.

Abstract: Some embodiments provide a method for configuring a DCN migrated from a first host computer at a first site of multiple sites spanned by a logical network to a second host computer at a second site. At the second host, the method receives, from the first host, data for configuring the DCN and implementing the logical network on the second site. The data includes (i) data particular to the first site and (ii) a global identifier for a logical port to which the DCN attaches. The method provides the global identifier to a local logical network manager, which uses the global identifier to retrieve data regarding the logical port from a global network manager that manages the logical network across the sites. Based on data retrieved from the global network manager, the method modifies the data particular to the first site into data particular to the second site.

Abstract: Techniques for ensuring sufficient available storage capacity for data resynchronization or data reconstruction in a cluster of a hyper-converged infrastructure (HCI) deployment are provided. In one set of embodiments, a computer system can receive a request to provision or reconfigure an object on the cluster. The computer system can further calculate one or more storage capacity reservations for one or more host systems in the cluster, where the one or more storage capacity reservations indicate one or more amounts of local storage capacity to reserve on the one or more host systems respectively in order to ensure successful data resynchronization or data reconstruction in the case of a host system failure or maintenance event. If placement of the object on the cluster will result in a conflict with the one or more storage capacity reservations, the computer system can deny the request to provision or reconfigure the object.

Abstract: A management apparatus and management method capable of enhancing reliability and safety of the entire system are proposed. When any one of virtual machine no longer satisfies its performance requirement, a business computer notifies a management apparatus of an alert; a priority representing a priority level when switching a logical path is set to each virtual machine; and when the management apparatus is notified by the business computer of the alert, the management apparatus determines a combination pattern, which satisfies performance requirements for all the virtual machines and satisfies a requirement for the priority that is set to each virtual machine, and issues an instruction to the corresponding business computer and/or a storage apparatus so that a combination pattern of each logical path from each virtual machine to a logical volume allocated to that virtual machine will become the determined combination pattern.

Abstract: An orchestrator process can efficiently distribute images of virtual network functions (“VNFs”) in a telco network. The images can be accompanied by metadata that describes VNF requirements, such as computing requirements and functional characteristics. Based on the image metadata and location of a virtual infrastructure manager (“VIM”), the orchestrator can select a storage location and deploy the image to the storage location. The VIM can instantiate a corresponding VNF by retrieving the image. The orchestrator can track the storage location and cause the VIM to delete the image if the image is not used for a threshold period of time.

Abstract: Techniques are disclosed for providing a distributed file storage system that permits containerized applications running in distinct container hosts to read/write to the same storage volume. In one embodiment, a file sharing volume service is configured to use a container orchestrator to start a respective file server for each shared storage volume mounted for use by user-level containerized application(s). The file sharing volume service further manages the file server by creating and updating a metadata entry that specifies (1) a count of a number of times the shared storage volume has been mounted for use, and (2) a port number exposed for use in mounting path(s) to access the shared storage volume. Upon receiving a request to run a containerized application with the shared storage volume, the file sharing volume service updates the metadata entry to increase the count, and retrieves and uses the port number to mount path(s) for accessing the shared storage volume.

Abstract: Initializing a data structure for use in predicting table of contents (TOC) pointer values. A request to load a module is obtained. Based on the loaded module, a pointer value for a reference data structure is determined. The pointer value is stored in a reference data structure tracking structure, and used to access a variable value for a variable of the module.

Abstract: A Set Table of Contents (TOC) Register instruction. An instruction to provide a pointer to a reference data structure, such as a TOC, is obtained by a processor and executed. The executing includes determining a value for the pointer to the reference data structure, and storing the value in a location (e.g., a register) specified by the instruction.

Abstract: Apparatuses and methods related to managing regions of memory are described. Managing regions can include verifying whether an access command is authorized to access a particular region of a memory array, which may have some regions that have rules or restrictions governing access (e.g., so-called “protected regions”). The authorization can be verified utilizing a key and a memory address corresponding to the access command. If an access command is authorized to access a region, then a row of the memory array corresponding to the access command can be activated. If an access command is not authorized to access the region, then a row of the memory array corresponding to the access command may not be activated.

Abstract: A method, an information handling system (IHS), and a host group generating system for collecting information about host groups in a cluster of IHSs using a management controller. The method includes retrieving, from a controller memory, first target physical hosts that are part of a virtual machine manager (VMM) host group, but not on a VMM host list and retrieving second target physical hosts that are part of the VMM host list, but not part of the VMM host group. The method further includes transmitting, to each of the first target physical hosts, a request to detach from the VMM host group. The method further includes transmitting, to each of the second target physical hosts, a request to attach to the VMM host group.

Abstract: In an example, a method can include determining, at a first inter-partition messenger, a message type for a message generated by a first application. The first inter-partition messenger and the first application can reside on a first virtual machine. The method can include identifying, at the first inter-partition messenger, a second application that is to receive the message based on the message type and message subscription data, generating, at the first inter-partition messenger, message routing data for routing of the message from the first virtual machine to the second virtual machine, causing, at the first inter-partition messenger, the message to be routed from the first virtual machine to the second virtual machine based on the message routing data, and receiving, at the second inter-partition messenger, the message for use thereof by the second application. The second inter-partition messenger and the second application can reside on the second virtual machine.

Abstract: An apparatus and method are provided for performing data processing operations. The apparatus has processing circuitry for performing data processing operations configured to operate in a normal mode and a memory region management mode. A memory is used to store data accessed by the processing circuitry when performing the data processing operations. A memory region table is provided to define accessibility control information for each of a number of memory regions within the memory. An access control mechanism controls access to the memory in response to an access request issued by the processing circuitry, and a memory protection unit providing a bypass indication for one or more memory regions is referenced by the access control mechanism when the processing circuitry is in the memory region management mode.

Abstract: A method includes disabling, by a hypervisor executed by a processing device of a source host system, host system access of a device associated with a virtual machine, wherein disabling the host system access prevents the virtual machine from directly accessing guest memory via the device and prevents the device from causing an interrupt. The method further includes migrating the guest memory associated with the virtual machine from the source host system to a destination host system. Upon migrating the guest memory associated with the virtual machine from the source host system to the destination host system, initiation of the virtual machine is caused on the destination host system.

Abstract: A method, system and computer program product for optimally allocating objects in a virtual machine environment implemented on a NUMA computer system. The method includes: obtaining a node identifier; storing the node identifier in a thread; obtaining an object identifier of a lock-target object from a lock thread; writing a lock node identifier into the lock-target object; traversing an object reference graph where the object reference graph contains an object as a graph node, a reference from the first object to a second object as an edge, and a stack allocated to a thread as the root node; determining whether a move-target object contains the lock node identifier; moving the move-target object to a subarea allocated to a lock node if it contains the lock node identifier, and moving the move-target object to the destination of the current traversal target object if the lock node identifier is not found.

Abstract: Methods, apparatus and articles of manufacture for governance of virtual computing infrastructure resources are disclosed. An example cloud management system includes a plurality of hosts. The hosts are to manage requests and allocate resources through one or more virtual machines. The example system also includes an administrator to configure the plurality of hosts to accommodate resource provisioning requests by assigning a constraint and a skill to the hosts to define a placement of the hosts. The placement of a respective host is to dictate an availability of the host for provisioning.

Abstract: Techniques for providing redundancy between physical and virtual entities in a hyper-converged infrastructure are disclosed. In one example, a management node may include a physical to virtual redundancy module to identify a physical entity with configuration data in a hyper-converged infrastructure as a primary entity, determine an equivalent virtual entity corresponding to the physical entity, and deploy the equivalent virtual entity in a compute node of the hyper-converged infrastructure. Further, the physical to virtual redundancy module may apply the configuration data associated with the physical entity to the deployed equivalent virtual entity and designate the equivalent virtual entity as a fail-over entity to provide redundancy in an event of failure of the physical entity.

Abstract: A data storage method and a physical server are provided. M virtual machines are deployed on a plurality of physical servers. The M virtual machines are respectively deployed as M data nodes in a distributed storage system. A metadata node in the distributed storage system receives a data storage request of a client, and determines identifiers of N virtual machines from the M virtual machines based on stored grouping information. The grouping information records a mapping relationship between a plurality of anti-affinity groups and identifiers of the M virtual machines.

Abstract: One embodiment provides an apparatus. The apparatus includes a linear address space, metadata logic and enhanced address space layout randomization (ASLR) logic. The linear address space includes a metadata data structure. The metadata logic is to generate a metadata value. The enhanced ASLR logic is to combine the metadata value and a linear address into an address pointer and to store the metadata value to the metadata data structure at a location pointed to by a least a portion of the linear address. The address pointer corresponds to an apparent address in an enhanced address space. A size of the enhanced address space is greater than a size of the linear address space.