Abstract: An aspect of the present invention provides a corresponding exclusive communication stack (e.g., TCP/IP stack) for each zone entity of a server system. In an embodiment, multiple server systems together implement a zone cluster containing such zone entities provided on corresponding server systems. As a result, when an application executing on a first zone entity of a first server is moved to a second zone entity of a zone cluster on a second server, the application continues to communicate using exclusive communication stack provided for the second zone entity. In view of the dedicated resources for network communication, applications executing in any zone entity of such a zone cluster, may have a desired level of predictable throughput performance and security for the communicated data packets.

Abstract: Some embodiments may include multiple computers comprising a multi-level security system. The security system includes a first set of zones and a second set of zones, each having access to resources of a computer, a first security container having a first security label containing the first set of zones, and a second security container with a second security label containing the second set of zones. The resources and data of each of the first and second set of zones inherit the security label of their corresponding security container.

Abstract: An aspect of the present invention provides a corresponding exclusive communication stack (e.g., TCP/IP stack) for each zone entity of a server system. In an embodiment, multiple server systems together implement a zone cluster containing such zone entities provided on corresponding server systems. As a result, when an application executing on a first zone entity of a first server is moved to a second zone entity of a zone cluster on a second server, the application continues to communicate using exclusive communication stack provided for the second zone entity. In view of the dedicated resources for network communication, applications executing in any zone entity of such a zone cluster, may have a desired level of predictable throughput performance and security for the communicated data packets.

Abstract: Some embodiments may include multiple computers comprising a multi-level security system. The security system includes a first set of zones and a second set of zones, each having access to resources of a computer, a first security container having a first security label containing the first set of zones, and a second security container with a second security label containing the second set of zones. The resources and data of each of the first and second set of zones inherit the security label of their corresponding security container.