Abstract: This application discloses a cluster and a communication method, to present various resources in a pooled manner and decouple resource pools, so as to improve resource utilization. The cluster in this application includes: a data processing unit pool and a plurality of compute resource pools of different types. The data processing unit pool includes a plurality of data processing units, and any one of the plurality of compute resource pools includes a plurality of compute resources. The data processing unit pool is connected to the plurality of compute resource pools through a high-speed interconnect bus. The data processing unit pool is configured to manage communication between the plurality of compute resource pools and the exterior of the cluster, communication between the plurality of compute resource pools, and communication inside any one of the compute resource pools.

Abstract: A cloud service providing system is described. The cloud service providing system includes a first host that runs an active virtual instance, where the active virtual instance is used for providing a cloud service for a user. The cloud service providing system also include a second host that runs a first standby virtual instance. The first host stores, in a first shared memory during running of the active virtual instance, memory data needed for running the active virtual instance, and the second host runs, when the first host fails, the first standby virtual instance based on the memory data obtained from the first shared memory, to cause the first standby virtual instance to provide a cloud service for the user. This application improves timeliness and efficiency of hot standby of memory data, provides a real-time redundancy backup capability, and helps ensure performance of services provided based on backed-up memory data.

Abstract: A cloud service system includes a first server and a physical device. The first server and the physical device are coupled through a physical channel. The first server includes a cloud instance. The physical device includes a trusted execution environment corresponding to the cloud instance. The physical device is configured to perform confidential calculation on data from the cloud instance through the trusted execution environment, and send a calculation result to the cloud instance.

Abstract: A computing node management system includes a central offload node and a plurality of computing nodes. A riser card is inserted into each computing node. Each riser card is connected to the central offload node. Each riser card establishes a communication channel between the central offload node and the computing node into which the riser card is inserted. The central offload node is configured to provide resources for the plurality of computing nodes through the communication channels.

Abstract: A cloud service providing method including: providing a configuration interface; obtaining attribute information of a target cloud service from the configuration interface; creating, based on the attribute information, a target elastic memory accelerator EMA super instance in a target resource node included in a plurality of resource nodes; and setting a management interface of the target EMA super instance based on a providing manner of the target cloud service, and providing the management interface for a tenant.

Abstract: A method for migrating a virtual machine including: receiving, at a target device, status information of a source virtual machine from a source device. The method further includes: obtaining an address mapping corresponding to the source virtual machine. The address mapping includes a mapping between a virtual address of the source virtual machine and a physical address of the source virtual machine. The method further includes: implementing, based on the status information and the address mapping, virtual machine migration by running, at the target device, a target virtual machine that accesses the physical address.

Abstract: A server includes at least one first processor core, at least one second processor core, and a storage. The at least one first processor core is configured to execute code of an operating system configured to communicate with a cloud management platform, to start and run a first operating system, where a cloud management platform client runs in the first operating system, and the cloud management platform client is configured to obtain, from the cloud management platform, first configuration information of a first virtual machine to be created. The at least one second processor core is configured to execute code of an operating system configured to manage a virtual machine, to start and run a second operating system.

Abstract: This application provides a computing node management system and a method for managing a plurality of computing nodes, to reduce costs to be paid by a cloud vendor. The computing node management system in this application includes a central offload node and a plurality of computing nodes. A riser card is inserted into each computing node. Each riser card is connected to the central offload node. Each riser card establishes a communication channel between the central offload node and the computing node into which the riser card is inserted. The central offload node is configured to provide resources for the plurality of computing nodes through the communication channels.

Abstract: A cloud service system includes a first server and a physical device. The first server and the physical device are coupled through a physical channel. The first server includes a cloud instance. The physical device includes a trusted execution environment corresponding to the cloud instance. The physical device is configured to perform confidential calculation on data from the cloud instance through the trusted execution environment, and send a calculation result to the cloud instance.

Abstract: An identity authenticator receives a first authentication credential from a first application at a first computing device. The identity authenticator then determines that the first authentication credential is associated with a second authentication credential for the first application at a second computing device based on a stored authentication identity. The identity authenticator then provides a stored execution state for the first application to the first computing device, wherein the stored execution state is associated, based on the stored authentication identity, with at least one of the first authentication credential or the second authentication credential.

Abstract: An identity authenticator receives a first authentication credential from a first application at a first computing device. The identity authenticator then determines that the first authentication credential is associated with a second authentication credential for the first application at a second computing device based on a stored authentication identity. The identity authenticator then provides a stored execution state for the first application to the first computing device, wherein the stored execution state is associated, based on the stored authentication identity, with at least one of the first authentication credential or the second authentication credential.

Abstract: An identity authenticator receives a first authentication credential from a first application at a first computing device. The identity authenticator then determines that the first authentication credential is associated with a second authentication credential for the first application at a second computing device based on a stored authentication identity. The identity authenticator then provides a stored execution state for the first application to the first computing device, wherein the stored execution state is associated, based on the stored authentication identity, with at least one of the first authentication credential or the second authentication credential.

Abstract: An identity authenticator receives a first authentication credential from a first application at a first computing device. The identity authenticator then determines that the first authentication credential is associated with a second authentication credential for the first application at a second computing device based on a stored authentication identity. The identity authenticator then provides a stored execution state for the first application to the first computing device, wherein the stored execution state is associated, based on the stored authentication identity, with at least one of the first authentication credential or the second authentication credential.

Abstract: An identity authenticator receives a first authentication credential from a first application at a first computing device. The identity authenticator then determines that the first authentication credential is associated with a second authentication credential for the first application at a second computing device based on a stored authentication identity. The identity authenticator then provides a stored execution state for the first application to the first computing device, wherein the stored execution state is associated, based on the stored authentication identity, with at least one of the first authentication credential or the second authentication credential.

Abstract: Resource access driven distributed transaction coordination system is described. A method may include receiving a request to perform a migration of user data from a first user account to a second user account and restricting access to a distributed resource as a result of receiving the request. When a distributed process requests access to a distributed resource, and that distributed process doesn't have any pending tasks, account migration may be performed.

Abstract: The present disclosure provides a method for authorization code verification and a server. The method may include receiving by a server, an authorization code to be verified of a service and receiving identity information of the service, sent from the terminal; determining, whether the identity information satisfies the setting condition. When the identity information satisfies the setting condition, and the authorization code to be verified is determined that the authorization code to be verified is the first authorization code preset by the service or the second authorization code preset by the service, the authorization code to be verified may be passed; or when the identity information does not satisfy the setting condition, and the authorization code to be verified is determined that the authorization code to be verified is only the first authorization code preset by the service, the authorization code to be verified may be passed.

Abstract: An identity authenticator receives a first authentication credential from a first application at a first computing device. The identity authenticator then determines that the first authentication credential is associated with a second authentication credential for the first application at a second computing device based on a stored authentication identity. The identity authenticator then provides a stored execution state for the first application to the first computing device, wherein the stored execution state is associated, based on the stored authentication identity, with at least one of the first authentication credential or the second authentication credential.

Abstract: A method for generating and recovering a memory snapshot of a virtual machine is provided. The method includes: obtaining a current Sth memory page of the virtual machine; identifying a page type of the current Sth memory page, where the page type includes an invalid data page and a valid data page; and recording the page type of the current Sth memory page in a memory snapshot file when the page is an invalid data page; and recording the page type and page data of the current Sth memory page in the memory snapshot file when the page is a valid data page, so that only valid data is stored according to the embodiments of the present invention, thereby reducing backup of invalid data, greatly shortening the generation time of the memory snapshot, reducing the size of the memory snapshot file, and saving storage resources.

Abstract: Resource access driven distributed transaction coordination system is described. A method may include receiving a request to perform a migration of user data from a first user account to a second user account and restricting access to a distributed resource as a result of receiving the request. When a distributed process requests access to a distributed resource, and that distributed process doesn't have any pending tasks, account migration may be performed.

Abstract: A method for creating virtual machine, a virtual machine monitor and a virtual machine system are provided in the embodiments of this application. The method comprises: mapping guest frame number (GFN) corresponding to a pseudo-physical memory of a virtual machine to a shared zero page, the shared zero page being a page having content of all zeros in physical memory; when the GFN is written by the virtual machine and if a page exception occurs, allocating a physical memory page to relieve the mapping relation between the guest frame number (GFN) and the shared zero page, and establishing a mapping relation between the guest frame number (GFN) and a machine frame number (MFN) of the physical memory page. The method can reduce the amount of memory used in virtual machine startup, improve virtual machine density, and support the concurrent startup of a memory overcommitted number of virtual machine.