Abstract: Examples of systems are described herein which may dynamically allocate compute resources to recovery clusters. Accordingly, a recovery site may utilize fewer compute resources in maintaining recovery clusters for multiple associate clusters, while ensuring that, during use, compute resources are allocated to a particular cluster. This may reduce and/or avoid vulnerabilities arising from a use of shared resources in a virtualized and/or cloud environment.

Abstract: A system and method for dynamically adjusting the amount of memory allocated to a virtual machine includes generating, by a memory resizing system, a current memory usage profile for the virtual machine. The memory resizing system and the virtual machine are part of a virtual computing system and the current memory usage profile is generated by mapping, as a function of time, memory usage information from the virtual machine. The system and method also include computing an upper baseline based upon a peak memory usage in the current memory profile, updating an initial memory allocation of the virtual machine based upon the upper baseline and a predetermined threshold for obtaining an initial revised memory allocation, determining a moving average of memory usage from a historical memory usage profile, and updating the initial revised memory allocation based upon the moving average of memory usage for obtaining a final revised memory allocation.

Abstract: An approach for full-path data encryption, where user virtualized computers (e.g., user VMs) are configured to communicate with other virtualized computers or VMs using IPsec protocol encryption standards. The user VMs may send a first encryption or authorization key to the other VMs, which the other VMs may use to authenticate the user VMs and encrypt and decrypt data stored to storage devices using a second encryption key. In some approaches, the other VMs may interpret or decrypt the data sent via IPsec and then perform data optimizations (e.g., compression, deduplication) on the data before decrypting/encrypting with the second key.

Abstract: Systems and methods are disclosed herein for writing data, including storing, by a storage client, a cache copy of the data in a memory of the storage client and receiving, by the storage client, acknowledgement indicating that a single replica of the data is made in a storage node remote to the storage client.

Abstract: Systems and methods for managing access to storage devices in a distributed data storage environment. Embodiments operate to manage communications between a client computing device and storage target devices in a distributed storage system. The distributed storage system comprises one or more computing nodes and at least one storage target device. A client computing device interfaced with the distributed storage system uses an IP address to access a leader virtualized controller. Upon receipt of a storage access protocol message by the leader virtualized controller elected from a set of virtualized controllers, a redirect message comprising a second IP address that identifies a second virtualized controller is sent to the client computing device. The client computing device connects to the second virtualized controller. Messages are sent between the client computing device and the second virtualized controller, which in turn accesses the storage target device to carry out storage I/O protocol messaging.

Abstract: Systems for high-performance computing. A storage control architecture is implemented by a plurality of nodes, where a node comprises combinations of executable containers that execute in cooperation with virtual machines running above a hypervisor. The containers run in a virtual machine above a hypervisor, and/or can be integrated directly into the operating system of a host node. Sensitive information such as credit card information may be isolated from the containers in a separate virtual machine that is configured to be threat resistant, and which can be accessed through a threat resistant interface module. One of the virtual machines of the node may be a node-specific control virtual machine that is configured to operate as a dedicated storage controller for a node. One of the virtual machines of the node may be a node-specific container service machine that is configured to provide storage-related and other support to a hosted executable container.

Abstract: In one embodiment, a system for managing communication connections in a virtualization environment includes (1) a first host machine implementing a virtualization environment based on a first platform, wherein the first host machine includes a first hypervisor, at least one virtual machine, and one or more virtual infrastructure elements and (2) a virtual disk including a plurality of storage devices. A management module for the system may perform steps to convert the first host machine to a second platform by installing (on the first host machine) a second hypervisor associated with the second platform, disabling the first hypervisor, capturing a configuration describing elements of a virtual infrastructure associated with the first hypervisor, registering the captured configuration with the second hypervisor, creating elements of the captured configuration in the context of the second platform and in association with the second hypervisor, and then enabling the second hypervisor.

Abstract: Systems and methods are disclosed herein for writing data, including storing, by a storage client, a cache copy of the data in a memory of the storage client and receiving, by the storage client, acknowledgement indicating that a single replica of the data is made in a storage node remote to the storage client.

Abstract: Systems for high-performance computing. A storage control architecture is implemented by a plurality of nodes, where a node comprises combinations of executable containers that execute in cooperation with virtual machines running above a hypervisor. The containers run in a virtual machine above a hypervisor, and/or can be integrated directly into the operating system of a host node. Sensitive information such as credit card information may be isolated from the containers in a separate virtual machine that is configured to be threat resistant, and which can be accessed through a threat resistant interface module. One of the virtual machines of the node may be a node-specific control virtual machine that is configured to operate as a dedicated storage controller for a node. One of the virtual machines of the node may be a node-specific container service machine that is configured to provide storage-related and other support to a hosted executable container.

Abstract: A system and method include determining underprovisioning of a guest physical memory of a virtual machine running on a computing node. The node includes hardware resources that are mapped the guest physical memory by a hypervisor. The hypervisor receives page fault information from the virtual machine based on page faults in the virtual machine. The hypervisor generates a table that includes virtual memory address-process indicator pair entries and corresponding page fault numbers. The hypervisor removes those entries that have a corresponding page fault number that is less than a first threshold value. The hypervisor determines a size of a revolving memory based on the number of remaining entries and a page size of the guest physical memory. If the revolving memory size is less than a second threshold value in relation to the allocated size of the guest physical memory, the hypervisor indicates underprovisioning of the guest physical memory.

Abstract: A method for providing external access into a secured networked virtualization environment, includes performing a leadership election amongst nodes of the secured networked virtualization environment to elect a leader node, assigning a cluster virtual IP address to the leader node and generating a reverse tunnel, using a processor, by the leader node to allow for an external entity to communicate with the secured networked virtualization environment.

Abstract: An exemplary embodiment disclosed herein is a method including a virtual storage controller receiving an input/output (I/O) command using a native drive communications protocol from a software application on a user virtual machine running on the host machine; determining whether a local service virtual machine is unresponsive to the virtual storage controller; translating the I/O command from the native drive communications protocol to an IP-based storage communications protocol to create a translated I/O command, in response to the local service virtual machine being unresponsive to the virtual storage controller; sending the translated I/O command to a remote service virtual machine, wherein the remote service virtual machine is configured to send the translated I/O command to a local storage and receive a response from the local storage; and receiving the response from the remote service virtual machine.

Abstract: A method and system for managing communication connections in a virtualization environment implemented by a cluster of host machines, each of the host machines comprises a hypervisor, at least one user virtual machine (UVM), a connection manager, and an I/O controller. The system includes a virtual disk accessible by all of the I/O controllers and comprising a plurality of storage devices. The system includes a first host machine of the host machines designated as a leader node, wherein the leader node configured to confirm a second one of the host machines is unreachable; and transmit, in response to the confirmation, an update message to other host machines in the cluster. The update message identifies the unreachable host machine and causes the other host machines to block messages from the unreachable host machine and send an acknowledgement of the update message back to the leader node.

Abstract: A method of efficient message transmission includes a hypervisor receiving a first input/output (I/O) request from a ring buffer; receiving a second I/O request from the ring buffer; receiving an absence of further I/O requests from the ring buffer; comparing an aggregate size of a first message and the second I/O request to a maximum transmission unit, wherein the first message comprises the first I/O request and a first protocol overhead; generating a combined message, in response to the aggregate size of the first message and the second I/O request being less than the maximum transmission unit. The combined message comprises the first I/O request, the second I/O request, and the first protocol overhead; and forwarding the combined message to an I/O target.

Abstract: A system and method for dynamically adjusting the amount of memory allocated to a virtual machine includes generating, by a memory resizing system, a current memory usage profile for the virtual machine. The memory resizing system and the virtual machine are part of a virtual computing system and the current memory usage profile is generated by mapping, as a function of time, memory usage information from the virtual machine. The system and method also include computing an upper baseline based upon a peak memory usage in the current memory profile, updating an initial memory allocation of the virtual machine based upon the upper baseline and a predetermined threshold for obtaining an initial revised memory allocation, determining a moving average of memory usage from a historical memory usage profile, and updating the initial revised memory allocation based upon the moving average of memory usage for obtaining a final revised memory allocation.

Abstract: A system and method include initiating a live migration of a virtual machine from a first host machine to a second host machine. The system and method include copying an initial copy of data stored in a memory of the first host machine to a memory of the second host machine, determining a set of modified data stored in the memory of the first host machine, determining that transferring the set of modified data stored in the memory of the first host machine exceeds a downtime limit, determining that an increased throttling of the virtual machine executing on the first host machine does not exceed a throttling limit, applying the increased throttling to the virtual machine executing on the first host machine, and copying the set of modified data while the increased throttling is applied to the virtual machine executing on the first host machine.

Abstract: Systems and methods for rebalancing storage-oriented workloads across resources of a distributed data storage facility. Communications are initiated between a client computing device and a plurality of storage target devices of a distributed storage system. The distributed storage system comprises one or more computing nodes that can host virtualized controllers. A client computing device interfaced with the distributed storage system uses an IP address to access an initial virtualized controller. Upon detecting a change event, conditions of the computing environment are analyzed to determine rebalancing options. Analysis of the rebalancing options results in identification of an alternative virtualized controller. A redirect message that identifies the alternative virtualized controller is sent to the computing device. The client computing device connects to the alternative virtualized controller.

Abstract: Systems and methods for managing access to storage devices in a distributed data storage environment. Embodiments operate to manage communications between a client computing device and storage target devices in a distributed storage system. The distributed storage system comprises one or more computing nodes and at least one storage target device. A client computing device interfaced with the distributed storage system uses an IP address to access a leader virtualized controller. Upon receipt of a storage access protocol message by the leader virtualized controller elected from a set of virtualized controllers, a redirect message comprising a second IP address that identifies a second virtualized controller is sent to the client computing device. The client computing device connects to the second virtualized controller. Messages are sent between the client computing device and the second virtualized controller, which in turn accesses the storage target device to carry out storage I/O protocol messaging.

Abstract: A method for providing external access into a secured networked virtualization environment, includes performing a leadership election amongst nodes of the secured networked virtualization environment to elect a leader node, assigning a cluster virtual IP address to the leader node and generating a reverse tunnel, using a processor, by the leader node to allow for an external entity to communicate with the secured networked virtualization environment.

Abstract: A system and method for facilitating communication between one or more of a plurality of user virtual machines and external devices is disclosed. The system includes a plurality of uplink bridges configured to facilitate communication between the plurality of user virtual machines and the external devices, a plurality of local bridges, with each of the plurality of user virtual machines being connected to one or more of the plurality of local bridges, and a first multiplexing bridge connected to the plurality of local bridges. The first multiplexing bridge is configured to direct data between the plurality of user virtual machines and the plurality of uplink bridges. The system also includes a second multiplexing bridge connected to the first multiplexing bridge and the plurality of uplink bridges. The second multiplexing bridge is configured to direct the data between the first multiplexing bridge and the plurality of uplink bridges.