Abstract: A source virtual machine (VM) hosted on a source server is migrated to a destination VM on a destination server without first powering down the source VM. After optional pre-copying of the source VM's memory to the destination VM, the source VM is suspended and its non-memory state is transferred to the destination VM; the destination VM is then resumed from the transferred state. In one embodiment, the source VM memory is either paged into the destination VM on demand, or is transferred asynchronously by pre-copying and write-protecting the source VM memory, and then later transferring only the modified pages after the destination VM is resumed. In one embodiment, the source and destination servers share common storage, in which the source VM's virtual disk is stored; this avoids the need to transfer the virtual disk contents.

Abstract: Systems and methods described herein facilitate the transmission of data in real time by using TCP connections such that the latency issues incurred from packet loss is prevented. A server is in communication with a client, wherein the server is configured to facilitate forming a plurality of TCP connections with the client. The server is also configured to receive one or more requests from the client via the TCP connections, wherein at least one of the requests corresponds to a request to receive data in real time. The server is configured to separate the real-time data into a succession of data sets and associate the data sets to the TCP connections such that each of the succession of data sets is associated with a separate TCP connection. Each of the succession of data sets is transmitted to the client via the associated separate TCP connections.

Abstract: Examples perform monitoring of multiple-step, concurrently executed workflows across distributed nodes. Requests from an intermediate node are classified by a load balancer as monitoring or non-monitoring. Non-monitoring requests are handled by any node; however, monitoring requests are distributed to all nodes via a plurality of queues but handled only by nodes executing the subject workflow. The load balancer receives reports from any node executing the subject workflow, and passes the first report to the intermediate node.

Abstract: Some embodiments provide a method for managing policies for a set of computing resources. The method imports several sets of resource management policy rules from several heterogeneous sources. The method stores each set of imported policy rules as a primitive policy. The primitive policies are (i) applicable to resources in the set of computing resources and (ii) combinable into composite policies that are applicable to resources in the set of computing resources. Composite policies are combinable into additional composite policies with primitive policies and other composite policies.

Abstract: An example method to grant authorization to a user for accessing a cloud computing resource involves receiving a first message from a user via a social media interface. The first message includes a request to access a cloud computing resource. The example method involves determining whether the user is authorized to access the cloud computing resource. When the user is not authorized to access the cloud computing resource, the example method involves determining whether the authorization can be automatically granted without human intervention. When the authorization can be automatically granted without human intervention, the authorization is granted to the user. When the authorization cannot be automatically granted, a second message is sent to an administrator to request the human intervention to grant the user the authorization to access the cloud computing resource.

Abstract: Techniques for security scanning of containers executing within VMs. A virtualization system maintains container disk files that store data for containers. The container disk files are stored separate from, and not included within, virtual machine disk files that store data for the virtual machines. To scan data for any particular container, a scanning module scans the container disk file associated with the container. If a threat is found, a container scan catalog is updated to indicate this fact. A container may be disconnected from the network if identified security threats cannot be removed from the container. An entire VM may be disconnected from the network if all containers within the VM have threats that cannot be cleaned. The use of container disk files for security threat scanning allows for data for individual containers to be scanned.

Abstract: Files, e.g., disk-image files can be teleported from a source node of a network to a target node in that a copy of file can be assembled at least in part using file parts found on the target node. Source hashes can be generated based on segments of the source file. The source hashes can be sent by the source node and received by the target node. The target node compares each source hash with target hashes of segments of files on the target node. When a comparison results in a match, the file copy can include a copy of the matching target segment or include a reference to the matching segment. For higher performance, fingerprints of the source hash and the target hashes can be compared, with hash comparisons being performed in the event of a fingerprint match. The target fingerprints can be arranged in a cuckoo filter or other probabilistic filter.

Abstract: Techniques for dynamically allocating keys in an instance of a tree data structure are provided. In one embodiment, a computer system can, at a time of instantiating each non-root node in the instance, determine a key space to be addressed by the non-root node, where the key space is based on a key subinterval in a parent node of the non-root node that is associated with a pointer to the non-root node. The computer system can further calculate a number of bits to allocate to each key of the non-root node in view of the determined key space. The computer system can then allocate the keys of the non-root node in accordance with the calculated number of bits.

Abstract: In a method of software item testing, an automated test of a software item is initiated in a cloud-based computing environment in exchange for a fee. The test is part of a testing framework in the cloud-based computing environment. In response to occurrence of an error condition during the test, the test is paused within the cloud-based computing environment. An alteration to the test is accepted while the test is paused. The alteration is accepted via a user interface to the cloud-based computing environment. Testing is continued within the cloud-based computing environment, using altered test.

Abstract: Techniques for sharing a peripheral device connected to a first host computing system in a cluster are disclosed. In one embodiment, a request to access the peripheral device connected to the first host computing system is received from a virtual machine running on a second host computing system. Further, a bandwidth requirement associated with the peripheral device is determined. Furthermore, one of enabling the virtual machine to remotely access the peripheral device over a network and recommending migration of the virtual machine to the first host computing system to locally access the peripheral device is performed based on the bandwidth requirement of the peripheral device.

Abstract: A method of providing a backdoor interface between software executing in a virtual machine and a hypervisor executing on a computing system that supports the virtual machine includes trapping, at the hypervisor, an exception generated in response to execution of a debug instruction on a central processing unit (CPU) by the software; identifying, by an exception handler of the hypervisor handling the exception, an equivalence between an immediate operand of the debug instruction and a predefined value; and invoking, in response to the equivalence, a backdoor service of the hypervisor using state of at least one register of the CPU as parametric input, the state being set by the software prior to executing the debug instruction.

Abstract: A system and method for performing remote resource allocation analyses on distributed computer systems utilizes a snapshot of a target distributed computer system obtained at a distributed computer system, which is transmitted to a remote resource allocation module so that a remote resource allocation analysis can be performed on the snapshot of the target distributed computer system. The snapshot includes configurations and resource usage information of at least some components of the target distributed computer system.

Abstract: Systems and techniques are described for defining test bed requirements. A described technique includes receiving data specifying a first test to be performed for a software application. The data identifies test bed requirements for the first test. Data identifying characteristics of each of available test beds are obtained. Each available test bed includes one or more computing resources on which software tests are performed. The characteristics of each available test bed specify characteristics of the one or more computing resources included in the available test bed. A determination is made that the characteristics of a particular test bed of the available test beds satisfy the test bed requirements for the first test. In response to determining that the characteristics of the particular test bed satisfy the test bed requirements, the first test is performed using the particular test bed.

Abstract: Remote desktop servers include a display encoder that maintains a secondary framebuffer that contains display data to be encoded and transmitted to a remote client display and a list of display primitives effectuating updated display data in the secondary framebuffer. The display encoder submits requests to receive the list of drawing primitives to a video adapter driver that receives and tracks drawing primitives that, when executed, update a primary framebuffer.

Abstract: One embodiment of the present invention is a method of interposing operations in a computational system that includes a virtualization system executable on an underlying hardware processor that natively supports one or more instructions that transition between host and guest execution modes.

Abstract: A power management system and method for performing power management operations in a distributed computer system uses predicted resource demands for a specified time in the future to change a power management option of a power management analysis algorithm prior to the specified time so that the power management analysis algorithm can be executed in anticipation of the predicted resource demands at the specified time.

Abstract: Interrupt rate determination can include instructions to determine a quantity of instances of packet processing by an operating system during a first period of time, each instance corresponding to a particular interrupt request sent by a device, determine a quantity of bytes processed during the first period of time by the operating system, determine a speed of the device, determine a first interrupt rate to assign to the device for a second period of time based on the quantity of instances, the quantity of bytes processed, and the speed of the device during the first period of time, and set the interrupt rate to the device.

Abstract: A host computer has one or more physical central processing units (CPUs) that support the execution of a plurality of containers, where the containers each include one or more processes. Each process of a container is assigned to execute exclusively on a corresponding physical CPU when the corresponding container is determined to be latency sensitive. The assignment of a process to execute exclusively on a corresponding physical CPU includes the migration of tasks from the corresponding physical CPU to one or more other physical CPUs of the host system, and the directing of task and interrupt processing to the one or more other physical CPUs. Tasks of of the process corresponding to the container are then executed on the corresponding physical CPU.

Abstract: Methods and systems to identify log write instructions of a source code as potential sources of an event message of interest are described. Methods identify non-parametric tokens, such as text strings and natural language words and phrases, of an event message of interest. Candidate log write instructions and associated line numbers in a source code are identified. Non-parametric tokens of each event message of the one or more candidate log write instructions are determined. A confidence score is calculated for each candidate log write instruction based the number of non-parametric tokens the event message of interest and event message of the candidate log write instruction have in common. The candidate log write instructions are rank ordered based on the corresponding one or more confidence scores and the rank ordered candidate log write instructions and associated line numbers of the source code may be displayed in a graphical user interface.

Abstract: Latency reduction for direct memory access operations involving address translation is disclosed. Example methods disclosed herein to perform direct memory access (DMA) operations include initializing a ring of descriptors, the descriptors to index respective buffers for storing received data in a first memory. Such example methods also include causing prefetching of a first address translation associated with a second descriptor in the ring of descriptors to be performed after a first DMA operation is performed to store first received data in a first buffer indexed by a first descriptor in the ring of descriptors and before second received data to be stored in the first memory is received, the first address translation being associated with a second DMA operation for storing the second received data in the first memory.