Abstract: A technique for executing normally interruptible threads of a process in a non-preemptive manner includes in response to a first entry associated with a first message for a first thread reaching a head of a run queue, receiving, by the first thread, a first wake-up signal. In response to receiving the wake-up signal, the first thread waits for a global lock. In response to the first thread receiving the global lock, the first thread retrieves the first message from an associated message queue and processes the retrieved first message. In response to completing the processing of the first message, the first thread transmits a second wake-up signal to a second thread whose associated entry is next in the run queue. Finally, following the transmitting of the second wake-up signal, the first thread releases the global lock.

Abstract: A technique for securing a virtualized computing environment includes retrieving identification information from a packet received on a physical port of a network switch. Port assignment data (maintained by one of a virtual machine monitor and a virtual machine monitor management station) for a virtual machine identified in the received packet is retrieved. The identification information from the received packet is compared with the port assignment data to determine whether the virtual machine is assigned to the port. In response to determining that the virtual machine is assigned to the port, the packet is forwarded to a destination designated in the packet. In response to determining that the virtual machine is not assigned to the port, the packet is blocked.

Abstract: A technique for securing a virtualized computing environment includes retrieving identification information from a packet received on a physical port of a network switch. Port assignment data (maintained by one of a virtual machine monitor and a virtual machine monitor management station) for a virtual machine identified in the received packet is retrieved. The identification information from the received packet is compared with the port assignment data to determine whether the virtual machine is assigned to the port. In response to determining that the virtual machine is assigned to the port, the packet is forwarded to a destination designated in the packet. In response to determining that the virtual machine is not assigned to the port, the packet is blocked.