Virtual Machine Memory Addressing Patents (Class 711/6)
-
Patent number: 8346997Abstract: In one embodiment, a computer-implemented method for creating redundant system configurations is presented. The computer-implemented method creates a set of virtual function path authorization tables, and receives a request from a requester to provide requested data from a virtual function wherein the virtual function is performed by a single root or a multi-root peripheral component interconnect device. Further a receive buffer is created in a selected address range in a set of addresses ranges as well as a virtual function work queue entry for the virtual function containing an address of the receive buffer in the selected address range. Responsive to a determination that the virtual function is authorized, writing the requested data into the receive buffer of the selected address range in the one or more systems, and responsive to writing the requested data, issuing a notice of completion to the requester.Type: GrantFiled: December 11, 2008Date of Patent: January 1, 2013Assignee: International Business Machines CorporationInventors: Douglas M. Freimuth, Steven M. Thurber
-
Patent number: 8341329Abstract: A method for providing hardware support for memory protection and virtual memory address translation for a virtual machine. The method includes executing a host machine application within a host machine context and executing a virtual machine application within a virtual machine context. A plurality of TLB (translation look aside buffer) entries for the virtual machine context and the host machine context are stored within a TLB. Memory protection bits for the plurality of TLB entries are logically combined to enforce memory protection on the virtual machine application.Type: GrantFiled: September 23, 2011Date of Patent: December 25, 2012Inventor: H. Peter Anvin
-
Patent number: 8341270Abstract: A method for providing access to a computing environment includes the step of receiving, by a broker machine, a request from a client machine for access to a computing environment, the request including an identification of a user of the client machine. One of a plurality of virtual machines is identified, the identified virtual machine providing the requested computing environment. One of a plurality of execution machines is identified, the identified execution machine executing a hypervisor providing access to hardware resources required by the identified virtual machine. A connection is established between the client machine and the identified virtual machine.Type: GrantFiled: November 28, 2006Date of Patent: December 25, 2012Assignee: Citrix Systems, Inc.Inventors: Richard James Mazzaferri, David Neil Robinson
-
Publication number: 20120324144Abstract: Relocating data in a virtualized environment maintained by a hypervisor administering access to memory with a Cache Page Table (‘CPT’) and a Physical Page Table (‘PPT’), the CPT and PPT including virtual to physical mappings. Relocating data includes converting the virtual to physical mappings of the CPT to virtual to logical mappings; establishing a Logical Memory Block (‘LMB’) relocation tracker that includes logical addresses of an LMB, source physical addresses of the LMB, target physical addresses of the LMB, a translation block indicator for each relocation granule, and a pin count associated with each relocation granule; establishing a PPT entry tracker including PPT entries corresponding to the LMB to be relocated; relocating the LMB in a number of relocation granules including blocking translations to the relocation granules during relocation; and removing the logical addresses from the LMB relocation tracker.Type: ApplicationFiled: August 27, 2012Publication date: December 20, 2012Applicant: International Business Machines CorporationInventors: Stuart Z. Jacobs, David A. Larson, Wade B. Ouren, Edward c. Prosser, Kenneth C. Vossen
-
Patent number: 8335854Abstract: Techniques are generally described that relate to a computer-implemented method of using a virtual device operating in a first computer network to perform a service on behalf of a low-power device operating in a second computer network includes receiving, by the virtual device, device data reports and a device descriptor from the low-power device. The virtual device may be adapted to store the device data reports and/or the device descriptor in computer-readable memory coupled to the virtual device. The virtual device may also be adapted to receive a low-power device service request from a requesting device operating in a third computer network and may determine that the device descriptor indicates that the low-power device is unavailable to respond to the low-power device service request. A response to the low-power device service request may be generated by the virtual device based on the device data reports.Type: GrantFiled: July 21, 2009Date of Patent: December 18, 2012Assignee: Empire Technology Development LLCInventor: Charles A. Eldering
-
Patent number: 8336048Abstract: Providing data to an application running on a segmented virtual machine (VM) is disclosed. Providing data includes opening an interface between the segmented VM and an external data source, transferring data from the external data source to an interface buffer, transferring a first selected amount of data from the interface buffer to a shell VM buffer, transferring a second selected amount of data from the shell VM buffer to a core VM buffer, and providing portions of the data from the core VM buffer to the application in response to read requests from the application.Type: GrantFiled: December 5, 2008Date of Patent: December 18, 2012Assignee: Azul Systems, Inc.Inventors: Gil Tene, Michael A. Wolf, Anirban Sengupta, Sivakumar Annamalai, Adrian Sun
-
Patent number: 8336099Abstract: Introspection data comparison is implemented utilizing hypervisor guest introspection data. A hypervisor shim on a hypervisor is used to construct one or more workload management components that are independent from a participating pool member of a pool comprising a guest having a guest memory and a guest operating system. The hypervisor collects a first set of data. The guest sends a second set of data comprising guest memory data from the guest memory. The first set of data is compared with the second set of data to detect at least one of a potential security intrusion or an anomalous deviation between the first set of data and the second set of data. A policy manager takes action based upon a result of the comparison of the first and second sets of data.Type: GrantFiled: May 8, 2008Date of Patent: December 18, 2012Assignee: International Business Machines CorporationInventors: Eli M. Dow, Marie R. Laser, Charulatha Dhuvur, Jessie Yu
-
Publication number: 20120317331Abstract: In one embodiment, a virtual machine manager may use dynamic memory balancing and greedy ballooning to improve guest memory performance. A memory 130 may have a system memory page set with a system memory page set size associated with the virtual machine to support a guest memory page set of the virtual machine with a guest memory page set size. A processor 120 may instruct the virtual machine to execute a reduction of the guest memory page set size. The processor 120 may maintain the system memory page set size during the reduction.Type: ApplicationFiled: June 11, 2011Publication date: December 13, 2012Applicant: Microsoft CorporationInventor: Kevin Broas
-
Patent number: 8332571Abstract: Virtual machine optimization and/or storage reclamation solutions are disclosed that manage virtual machine sprawl and/or growing enterprise storage costs. For instance, certain solutions receive recommendations based on one or more rules, policies and/or user preferences that identify storage and/or alignment criteria for virtual machine disk (VMDK) partition(s). In certain examples, a resize tool that operates within a host operating system of a host server dynamically resizes and/or aligns one or more VMDK partitions of a powered-down virtual machine. For instance, the resize tool can be injected to the host server from a remote management server and can resize and/or align the VMDK partitions without requiring contents of the VMDK to be copied to another VMDK. By reallocating storage and/or aligning the VMDK partitions, embodiments of the invention can increase virtual machine performance and improve storage management.Type: GrantFiled: April 16, 2012Date of Patent: December 11, 2012Assignee: Vizioncore, Inc.Inventor: Thomas Scott Edwards, Sr.
-
Patent number: 8332570Abstract: A computer-implemented method for defragmenting virtual machine prefetch data. The method may include obtaining prefetch information associated with prefetch data of a virtual machine. The method may also include defragmenting, based on the prefetch information, the prefetch data on physical storage. The prefetch information may include a starting location and length of the prefetch data on a virtual disk. The prefetch information may include a geometry specification of the virtual disk. Defragmenting on physical storage may include placing the prefetch data contiguously on physical storage, placing the prefetch data in a fast-access segment of physical storage, and/or ordering the prefetch data according to the order in which it is accessed at system or application startup.Type: GrantFiled: September 30, 2008Date of Patent: December 11, 2012Assignee: Symantec CorporationInventors: Randall R. Cook, Brian Hernacki, Sourabh Satish, William E. Sobel
-
Patent number: 8327059Abstract: In a computer system supporting execution of virtualization software and at least one instance of virtual system hardware, an interface is provided into the virtualization software to allow a program to directly define the access characteristics of its program data stored in physical memory. The technique includes providing data identifying memory pages and their access characteristics to the virtualization software which then derives the memory access characteristics from the specified data. Optionally, the program may also specify a pre-defined function to be performed upon the occurrence of a fault associated with access to an identified memory page. In this manner, programs operating both internal and external to the virtualization software can protect his memory pages, without intermediation by the operating system software.Type: GrantFiled: September 30, 2009Date of Patent: December 4, 2012Assignee: VMware, Inc.Inventors: Xiaoxin Chen, Pratap Subrahmanyam
-
Patent number: 8327355Abstract: Virtual machine guest migration overcommit is supported by providing a virtual machine with an unschedulable resource that is not available for system scheduling. The unschedulable resource may, but need not, be provided in the form of a memory buffer, or one or more network resources, or one or more resources that are accessible from a network. The unschedulable resource is utilized in one or more domains to temporarily conceal one or more user environments that do not fit into a set of currently available resources, such that the one or more temporarily concealed user environments are not terminated or paged out.Type: GrantFiled: July 15, 2008Date of Patent: December 4, 2012Assignee: International Business Machines CorporationInventors: Eli M. Dow, Frank R. LeFevre, Jr., Ray Mansell, Jessie Yu
-
Patent number: 8327060Abstract: A mechanism for live migration of virtual machines (VMs) with memory optimizations is disclosed. A method of embodiments of the invention includes receiving a hash value for each of one or more memory pages of a migrating VM from a source host machine, obtaining a hash value for each of one or more memory pages hosted by a target host machine, and comparing the received hash values with the obtained hash values for matches. The method further comprises for each of the received hash values that do not match any of the obtained hash values, sending a negative acknowledgment to the source host machine for that hash value, and for each of the received hash values that do match any of the obtained hash values, using a memory page associated with the matching hash value at the target host machine for the migrating VM.Type: GrantFiled: November 30, 2009Date of Patent: December 4, 2012Assignee: Red Hat Israel, Ltd.Inventor: Itamar Heim
-
Publication number: 20120303858Abstract: The amount of virtual disk space that is available for use by software executing within a virtual machine (VM) may be dynamically adjusted while the VM is running in a virtual computer system. A method for reservation of disk space from a virtual machine is provided. A request is received at a first VM relating to reserving a portion of a virtual disk used by the first VM. In response, the first VM allocates additional storage in the virtual disk to a guest file stored in the virtual disk, wherein the guest file is not used to store meaningful data and then communicates sectors of the virtual disk corresponding to the additional storage for the guest file to the virtualization layer. The virtualization layer provides to a second VM access to sectors of the physical storage space that correspond to the sectors of the virtual disk that were allocated as additional storage to the guest file.Type: ApplicationFiled: April 30, 2012Publication date: November 29, 2012Applicant: VMWARE, INC.Inventor: Matt GINZTON
-
Patent number: 8321692Abstract: An information processing apparatus includes a plurality of storage units, a mirroring control unit configured to execute mirroring processing, which includes writing processing for writing same data on each of the plurality of storage units and reading processing for reading data from either one of the plurality of storage units, and a power control unit configured to independently control supply of power to the plurality of storage units. If the supply of power to the plurality of storage units is reduced, if the mirroring control unit starts the writing processing, the information processing apparatus resumes the power supply to the plurality of storage units, and if the mirroring control unit starts the reading processing, the information processing apparatus resumes the power supply to a specific storage unit from which the data is read, and configured to execute control not to resume the power supply to the other storage unit(s).Type: GrantFiled: December 18, 2009Date of Patent: November 27, 2012Assignee: Canon Kabushiki KaishaInventors: Fumio Mikami, Shozo Yamasaki
-
Patent number: 8316193Abstract: A mechanism for a binary translator to emit code that will pre-generate information about a memory segment when a segment selector is assigned to a segment register. The binary translator emits code that will be executed when a memory access using that segment register is encountered and the emitted code will access the pre-generated information when evaluating the memory access request. Memory accesses, where a number of bytes being accessed is less than or equal to a predetermined value, are validated with a number of steps in the code emitted by the binary translator.Type: GrantFiled: December 2, 2009Date of Patent: November 20, 2012Assignee: VMware, Inc.Inventors: Ross Charles Knippel, Jeffrey W. Sheldon, Ole Agesen
-
Publication number: 20120290766Abstract: Described techniques increase runtime performance of workloads executing on a hypervisor by executing virtualization-aware code in an otherwise non virtualization-aware guest operating system. In one implementation, the virtualization-aware code allows workloads direct access to physical hardware devices, while allowing the system memory allocated to the workloads to be overcommitted. In one implementation, a DMA filter driver is inserted into an I/O driver stack to ensure that the target virtual memory of a DMA transfer is resident before the transfer begins. The DMA filter driver may utilize a cache to track which pages of memory are resident. The cache may also indicate which pages of memory are in use by one or more transfers, enabling the hypervisor to avoid appropriating pages of memory during a transfer.Type: ApplicationFiled: July 23, 2012Publication date: November 15, 2012Applicant: MICROSOFT CORPORATIONInventor: Jacob Oshins
-
Publication number: 20120290765Abstract: A technique reclaims memory pages in a virtualization platform. The technique involves receiving, by a virtual machine of the virtualization platform, an inflate command which directs a balloon driver of the virtual machine to inflate. The technique further involves issuing, by the virtual machine and in response to the inflate command, a sweep request to a hypervisor. The sweep request directs the hypervisor to (i) perform a scan of memory pages allocated to the virtual machine for a predetermined pattern of characters, (ii) de-allocate memory pages having the predetermined pattern of characters from the virtual machine (e.g., zeroed pages), the de-allocated memory pages including super pages and regular pages, and (iii) update a list of memory page mappings to reflect the de-allocated memory pages. The technique further involves completing balloon driver inflation after the list of memory page mappings is updated.Type: ApplicationFiled: May 11, 2012Publication date: November 15, 2012Applicant: Citrix Systems, Inc.Inventor: Paul Durrant
-
Patent number: 8312212Abstract: Various embodiments of the present invention are directed to systems and methods for “attaching” a virtual hard drive to the physical computer hardware by implementing a specialized disk controller driver for the host operating system that is recognized by the host operating system as a disk controller driver but which in fact also emulates the virtual hard disk it is “attached” to. When the host operating system sends requests to read and write sectors from the virtual hard drive, the specialized driver (the “virtual hard drive controller driver”) directly accesses and manipulates the back-end file mentioned above. Thus the virtual disk is “attached” and recognizable by the host operating system and can be manipulated thereby (and applications executing thereon).Type: GrantFiled: May 26, 2009Date of Patent: November 13, 2012Assignee: Microsoft CorporationInventor: Ahmed M. Tolba
-
Patent number: 8312478Abstract: A method, system and computer program product for providing driver functionality in computing system includes installing an operating system on the computing system; forming a plurality of isolated sandboxes running on the computing system under control of the operating system; during an attempt to install a driver, installing driver stub in the operating system; installing the driver in one of the isolated sandboxes, wherein the driver directly uses at least part of system resources; using a gateway between the driver stub and the installed driver to provide an interface for transmitting requests from the driver stub to driver.Type: GrantFiled: May 1, 2012Date of Patent: November 13, 2012Assignee: Parallels IP Holdings GmbHInventors: Stanislav S. Protassov, Alexander G. Tormasov, Serguei M. Beloussov
-
Patent number: 8312201Abstract: A mechanism for operating a virtual memory is provided in an operating system. The mechanism detects the existence of a central memory loan pool, identifies a segment of memory that is loanable, and transmits an indicator that the segment is available for loaning to the memory loan pool. The operating system contributing memory can monitor its actual memory capacity and reclaim the loaned segment if the amount of memory available to the loaning operating system (OS) gets below a predetermined value.Type: GrantFiled: June 9, 2008Date of Patent: November 13, 2012Assignee: International Business Machines CorporationInventor: Matthew D. Fleming
-
Patent number: 8312202Abstract: A system, method and computer program product for optimizing handling of guest code in a Virtual Machine include means for identifying, in the guest code, a predetermined pattern that includes privileged but unsafe instructions and an instruction that raises an exception; means for executing the guest code in a native mode; means for, upon encountering the instruction that raise the exception, transferring control to a Virtual Machine Monitor; means for emulating the pattern in the Virtual Machine Monitor; and means for rolling back the effects of privileged but unsafe instructions and any intervening instructions to ensure correct Virtual Machine Monitor context. The pattern can include, for example, a privileged but unsafe instruction, followed by safe instructions, followed by an exception raising instruction, followed by safe instructions, followed by a privileged but unsafe instruction.Type: GrantFiled: June 12, 2009Date of Patent: November 13, 2012Assignee: Parallels IP Holdings GmbHInventors: Alexey B. Koryakin, Nikolay N. Dobrovolskiy, Andrey A. Omelyanchuk
-
Patent number: 8307169Abstract: A hypervisor runs on a host computer system and defines at least one virtual machine. An address space of the virtual machine resides on physical memory of the host computer system under control of the hypervisor. A guest operating system runs in the virtual machine. At least one of a host operating system and the hypervisor sets parts of the address space of the host computer system corresponding to parts of the address space of the virtual machine to a locked state in which those parts can be read but not written to.Type: GrantFiled: March 10, 2011Date of Patent: November 6, 2012Assignee: SafeNet, Inc.Inventor: Laszlo Elteto
-
Patent number: 8307405Abstract: A zero-trust policy is implemented in storage reports to provide a preventative measure against potential attack vectors. Introspection of a guest memory having a guest memory layout is performed. An operating system (OS) memory map is accepted. The guest memory layout is compared with the OS memory map. When the guest memory layout matches the OS memory map, the OS memory map is used to obtain one or more interested memory segments, and data processing is performed.Type: GrantFiled: April 28, 2008Date of Patent: November 6, 2012Assignee: International Business Machines CorporationInventors: Eli M. Dow, Marie R. Laser, Charulatha Dhuvar, Jessie Yu
-
Patent number: 8307177Abstract: Described in detail herein is a method of copying data of one or more virtual machines being hosted by one or more non-virtual machines. The method includes receiving an indication that specifies how to perform a copy of data of one or more virtual machines hosted by one or more virtual machine hosts. The method may include determining whether the one or more virtual machines are managed by a virtual machine manager that manages or facilitates management of the virtual machines. If so, the virtual machine manager is dynamically queried to automatically determine the virtual machines that it manages or that it facilitates management of. If not, a virtual machine host is dynamically queried to automatically determine the virtual machines that it hosts. The data of each virtual machine is then copied according to the specifications of the received indication.Type: GrantFiled: September 3, 2009Date of Patent: November 6, 2012Assignee: CommVault Systems, Inc.Inventors: Anand Prahlad, Rahul S. Pawar, Prakash Varadharajan, Pavan Kumar Reddy Bedadala
-
Publication number: 20120278525Abstract: One or more unused bits of a virtual address range are allocated for aliasing so that multiple virtually addressed sub-pages can be mapped to a common memory page. When one bit is allocated for aliasing, dirty bit information can be provided at a granularity that is one-half of a memory page. When M bits are allocated for aliasing, dirty bit information can be provided at a granularity that is 1/(2M)-th of a memory page.Type: ApplicationFiled: April 28, 2011Publication date: November 1, 2012Applicant: VMWARE, INC.Inventors: Benjamin C. SEREBRIN, Bhavesh MEHTA
-
Publication number: 20120271981Abstract: A computer system with a memory containing a first guest operating system, including a first portion of the memory and a second guest operating system, including a second portion of the memory. The memory further contains an address exchange module for exchanging memory address handles, a data mover for moving data between the first and second portions of the memory, and an emulated input output memory management unit for controlling the data mover. Instructions in the memory cause the processor to: register accessible memory with the emulated input output memory management unit, write address handles to the address exchange module, read the address handles from the address exchange module, and move the data into the second portion of the memory.Type: ApplicationFiled: April 10, 2012Publication date: October 25, 2012Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATIONInventors: Gerd BAYER, Marco KRAEMER, Hoang-Nam NGUYEN, Christoph RAISCH, Stefan USENBINZ
-
Publication number: 20120265920Abstract: A system and method deallocates data blocks in virtual environments with high efficiency. A computer system hosting a virtual machine includes an I/O device driver in the guest operating system of the virtual machine. The I/O device driver intercepts an operation performed by the guest operating system that causes a data block to be deallocated in the virtual machine. The I/O device driver informs a hypervisor of the computer system that the data block is to be deallocated. The hypervisor then instructs the data storage to deallocate the data block for reuse.Type: ApplicationFiled: April 12, 2011Publication date: October 18, 2012Applicant: Red Hat Israel, Ltd.Inventor: Ayal Baron
-
Patent number: 8291150Abstract: A table device includes a match cell number output unit 25 for outputting a match cell number showing a cell PE which outputs a matching signal, and an address decoder 26 for specifying a node from among nodes in a search tree which construct a conversion table, the node corresponding to the match cell number. The table device acquires a data conversion value assigned to the above-mentioned node from a configuration memory 21, and, when the data conversion value is data showing a coded result or the like, outputs the data conversion value to outside the table device, whereas when the data conversion value is a branch code of the search tree, updates the cell PE to which a comparison instruction signal is furnished.Type: GrantFiled: May 9, 2007Date of Patent: October 16, 2012Assignee: Mitsubishi Electric CorporationInventors: Tomomi El, Noriyuki Minegishi
-
Publication number: 20120260019Abstract: A multi-layer architecture is provided for elastic provisioning of virtualized computing resources. The multi-layer architecture comprises a physical hardware layer comprising a plurality of physical computing machines, a distributed operating system layer that aggregates and virtualizes the computing resources, and a virtual machine layer that comprises virtual machines provisioned, by the distributed operating system layer, with virtualized computing resources. Elastic provisioning of virtualized computing resources comprising receiving computing resource information of a plurality of physical computing machines, producing virtualized computing resources by aggregating the received computing resource information of the plurality of physical computing machines, and provisioning the virtualized computing resources among a plurality of virtual machines.Type: ApplicationFiled: May 20, 2011Publication date: October 11, 2012Applicant: Infosys Technologies Ltd.Inventors: Ganesan Malaiyandisamy, Rajarshi Bhose, Sudeep Mallick
-
Patent number: 8286164Abstract: A mechanism is provided for performing secure recursive virtualization of a computer system. A portion of memory is allocated by a virtual machine monitor (VMM) or an operating system (OS) to a new domain. An initial program for the new domain is loaded into the portion of memory. Secure recursive virtualization firmware (SVF) in the data processing system is called to request that the new domain be generated. A determination is made as to whether the call is from a privileged domain or a non-privileged domain. Responsive to the request being from a privileged domain, all access to the new domain is removed from any other domain in the data processing system. Responsive to receiving an indication that the new domain has been generated, an execution of the initial program is scheduled.Type: GrantFiled: August 7, 2009Date of Patent: October 9, 2012Assignee: International Business Machines CorporationInventors: William E. Hall, Guerney D. H. Hunt, Paul A. Karger, Suzanne K. McIntosh, Mark F. Mergen, David R. Safford, David C. Toll
-
Patent number: 8285915Abstract: Relocating data in a virtualized environment maintained by a hypervisor administering access to memory with a Cache Page Table (‘CPT’) and a Physical Page Table (‘PPT’), the CPT and PPT including virtual to physical mappings. Relocating data includes converting the virtual to physical mappings of the CPT to virtual to logical mappings; establishing a Logical Memory Block (‘LMB’) relocation tracker that includes logical addresses of an LMB, source physical addresses of the LMB, target physical addresses of the LMB, a translation block indicator for each relocation granule, and a pin count associated with each relocation granule; establishing a PPT entry tracker including PPT entries corresponding to the LMB to be relocated; relocating the LMB in a number of relocation granules including blocking translations to the relocation granules during relocation; and removing the logical addresses from the LMB relocation tracker.Type: GrantFiled: January 13, 2010Date of Patent: October 9, 2012Assignee: International Business Machines CorporationInventors: Stuart Z. Jacobs, David A. Larson, Wade B. Ouren, Edward C. Prosser, Kenneth C. Vossen
-
Publication number: 20120254497Abstract: A method and apparatus to facilitate shared pointers in a heterogeneous platform. In one embodiment of the invention, the heterogeneous or non-homogeneous platform includes, but is not limited to, a central processing core or unit, a graphics processing core or unit, a digital signal processor, an interface module, and any other form of processing cores. The heterogeneous platform has logic to facilitate sharing of pointers to a location of a memory shared by the CPU and the GPU. By sharing pointers in the heterogeneous platform, the data or information sharing between different cores in the heterogeneous platform can be simplified.Type: ApplicationFiled: March 29, 2011Publication date: October 4, 2012Inventors: YANG NI, Rajkishore Barik, Ali-Reza Adl-Tabatabai, Tatiana Shpeisman, Jayanth N. Rao, Ben J. Ashbaugh, Tomasz Janczak
-
Patent number: 8281093Abstract: A computer-implemented method for creating consolidated backups of snapshot hierarchies may include identifying a hierarchy of snapshots. The computer-implemented method may also include copying data in a root snapshot of the hierarchy to a backup. The computer-implemented method may further include, for each child snapshot in the hierarchy, copying valid data in the child snapshot to the backup. The computer-implemented method may additionally include copying information that identifies a parent of the child snapshot to the backup. Various other methods, systems, and computer-readable media are also disclosed.Type: GrantFiled: November 30, 2009Date of Patent: October 2, 2012Assignee: Symantec CorporationInventors: Sasidharan Krishnan, Suhas Urkude
-
Publication number: 20120246381Abstract: Embodiments of the present invention provide methods, systems, and computer readable media for input output memory management unit (IOMMU) two-layer addressing in the context of memory address translations for I/O devices. According to an embodiment, a method includes translating a guest virtual address (GVA) to a corresponding guest physical address (GPA) using a guest address translation table according to a process address space identifier associated with an address translation transaction associated with an I/O device, and translating the GPA to a corresponding system physical address (SPA) using a system address translation table according to a device identifier associated with the address translation transaction.Type: ApplicationFiled: December 2, 2011Publication date: September 27, 2012Inventors: Andy Kegel, Mark Hummel, Steve Glaser, Tony Asaro, Philip NG, Jeffrey Cheng
-
Publication number: 20120246382Abstract: Embodiments disclosed herein provide systems and method for storing metadata to unused portions of a virtual disk file. In a particular embodiment, a method provides selecting a virtual disk file stored on a data storage volume and identifying unused portions of the virtual disk file. The method further provides writing metadata for the virtual disk file in the unused portions of the virtual disk file.Type: ApplicationFiled: January 19, 2012Publication date: September 27, 2012Inventors: Gregory L. Wade, J. Mitchell Haile, Bill Kan, Barry Herman
-
Patent number: 8276138Abstract: Providing data to an application running on a segmented virtual machine (VM) is disclosed. Providing data includes opening an interface between the segmented VM and an external data source, transferring data from the external data source to an interface buffer, transferring a first selected amount of data from the interface buffer to a shell VM buffer, transferring a second selected amount of data from the shell VM buffer to a core VM buffer, and providing portions of the data from the core VM buffer to the application in response to read requests from the application.Type: GrantFiled: December 5, 2008Date of Patent: September 25, 2012Assignee: Azul Systems, Inc.Inventors: Gil Tene, Michael A. Wolf, Anirban Sengupta, Sivakumar Annamalai, Adrian Sun
-
Patent number: 8276201Abstract: A method for protecting the integrity of a set of memory pages to be accessed by an operating system of a data processing system, includes running the operating system in a virtual machine (VM) of the data processing system; verifying the integrity of the set of memory pages on loading of pages in the set to a memory of the data processing system for access by the operating system; in response to verification of the integrity, designating the set of memory pages as trusted pages and, in a page table to be used by the operating system during the access, marking non-trusted pages as paged; and in response to a subsequent page fault interrupt for a non-trusted page, remapping the set of pages to a region of the data processing system memory which is inaccessible to the virtual machine.Type: GrantFiled: January 28, 2008Date of Patent: September 25, 2012Assignee: International Business Machines CorporationInventors: Matthias Schunter, Axel Tanner, Bernhard Jansen
-
Publication number: 20120239850Abstract: A method for creating virtual machine, a virtual machine monitor and a virtual machine system are provided in the embodiments of this application. The method comprises: mapping guest frame number (GFN) corresponding to a pseudo-physical memory of a virtual machine to a shared zero page, the shared zero page being a page having content of all zeros in physical memory; when the GFN is written by the virtual machine and if a page exception occurs, allocating a physical memory page to relieve the mapping relation between the guest frame number (GFN) and the shared zero page, and establishing a mapping relation between the guest frame number (GFN) and a machine frame number (MFN) of the physical memory page. The method can reduce the amount of memory used in virtual machine startup, improve virtual machine density, and support the concurrent startup of a memory overcommitted number of virtual machine.Type: ApplicationFiled: December 29, 2011Publication date: September 20, 2012Applicant: Huawei Technologies Co., Ltd.Inventors: Jun Qiu, Chuan Ye
-
Patent number: 8271743Abstract: Automated paging device management is provided for a shared memory partition data processing system. The automated approach includes managing a paging storage pool defined within one or more storage devices for holding logical memory pages external to physical memory managed by a hypervisor of the processing system. The managing includes: responsive to creation of a logical partition within the processing system, automatically defining a logical volume in the paging storage pool for use as a paging device for the new logical partition, the automatically defining occurring absent use of a filesystem, with the resultant paging device being other than a file in a filesystem; and automatically specifying the logical volume as a paging space device for the new logical partition and binding the paging space device to the new logical partition, wherein the logical volume is sized to accommodate a defined maximum memory size of the new logical partition.Type: GrantFiled: February 9, 2012Date of Patent: September 18, 2012Assignee: International Business Machines CorporationInventors: Bryan M. Logan, James A. Pafumi, Steven E. Royer
-
Patent number: 8271717Abstract: According to one embodiment, a computing machine includes a virtual machine operated on a virtual machine monitor, the computing machine includes a first memory device, and a second memory device. The virtual machine monitor is configured to assign a part of a region of the first memory device as a third memory device to the virtual machine and to assign a part of a region of the second memory device as a fourth memory device to the virtual machine. The virtual machine comprises a first cache control module configured to use the fourth memory device as a read cache of the third memory device.Type: GrantFiled: May 5, 2011Date of Patent: September 18, 2012Assignee: Kabushiki Kaisha ToshibaInventor: Takehiko Kurashige
-
Patent number: 8271450Abstract: A method for monitoring a data structure maintained by guest software within a virtual machine is disclosed. Changes to the contents of the data structure are determined, such as by placing write traces on the memory pages containing the data structure. Also, the method involves determining when memory pages containing the data structure are swapped into and/or out of guest physical memory by the guest software, such as by placing write traces on the memory pages containing the guest page table and detecting changes to the present bit of page table entries involved in mapping virtual addresses for the data structure. Information about the contents of the data structure is retained while memory pages containing the data structure are swapped out of guest physical memory.Type: GrantFiled: October 1, 2009Date of Patent: September 18, 2012Assignee: VMware, Inc.Inventors: Oded Horovitz, Ophir Rachman, Wei Xu, Adrian Drzewiecki, Xiaoxin Chen
-
Publication number: 20120233378Abstract: A hypervisor runs on a host computer system and defines at least one virtual machine. An address space of the virtual machine resides on physical memory of the host computer system under control of the hypervisor. A guest operating system runs in the virtual machine. At least one of a host operating system and the hypervisor sets parts of the address space of the host computer system corresponding to parts of the address space of the virtual machine to a locked state in which those parts can be read but not written to.Type: ApplicationFiled: March 10, 2011Publication date: September 13, 2012Applicant: SafeNet, Inc.Inventor: Laszlo Elteto
-
Patent number: 8266238Abstract: The present disclosure relates to memory access, and specifically to memory access utilizing internet protocol (IP) addressing semantics. Various embodiments, methods, apparatus and systems are provided that allow a system to detect that a memory access has been attempted involving a region of memory that is mapped to a network device; and to perform the memory access utilizing, at least in part, the networked device and a network interface. Other embodiments may be described and claimed.Type: GrantFiled: December 27, 2006Date of Patent: September 11, 2012Assignee: Intel CorporationInventors: Vincent J. Zimmer, Michael A. Rothman
-
Publication number: 20120226849Abstract: A virtual computer system having a plurality of virtual computers, the virtual computer system including: an area assignment unit operable to, when a virtual computer attempts to perform writing to a basic area which is assigned to and shared by the plurality of virtual computers, change an assignment to the virtual computer from the basic area to a copy area to which the basic area is copied and the writing is performed; and an area freeing unit operable to, when a content of the basic area matches a content of at least one copy area, change area assignment to one or more virtual computers, to which have been assigned one or more other areas than one area among the areas whose contents match each other, to the one area, and free the one or more other areas.Type: ApplicationFiled: December 13, 2010Publication date: September 6, 2012Inventor: Masahiko Saito
-
Patent number: 8261320Abstract: A computer-implemented method for securely managing access to data may comprise identifying a request to access data that is encrypted, the request being made within an insecure platform. The method may: determine that a requestor has a right to access the data, decrypt the data to provide decrypted data, and permit a secure platform to access the decrypted data. A computer-implemented method for securely managing access to data may comprise identifying a request to access data that is encrypted, the request being made within an insecure platform. They method may: submit the request to a policy server, receive permission from the policy server to access the data, decrypt the data to provide decrypted data, and permit a secure platform to access the decrypted data. A system for securely managing access to data may comprise: an authorization platform, an authentication module, a policy-enforcement module, and a cryptography module.Type: GrantFiled: June 30, 2008Date of Patent: September 4, 2012Assignee: Symantec CorporationInventors: Denis Serenyi, Brian Witten
-
Publication number: 20120221765Abstract: A virtualization apparatus is provided. The virtualization apparatus includes a plurality of virtual machines configured to have priority levels, a memory pool configured to be shared between the plurality of virtual machines and store part of data stored in a system memory of each of the plurality of virtual machines, and a memory pool manager configured to process a memory allocation request or a data storage request regarding the memory pool in consideration of the priority levels of the plurality of virtual machines, a guaranteed memory size for each of the plurality of virtual machines, and a size of memory that can be allocated to each of the plurality of virtual machines.Type: ApplicationFiled: September 23, 2011Publication date: August 30, 2012Inventors: Jung-Hyun YOO, Sung-Min LEE, Sang-Bum SUH
-
Patent number: 8253735Abstract: A multi-user animation process receives input from multiple remote clients to manipulate avatars through a modeled 3-D environment. Each user is represented by an avatar. The 3-D environment and avatar position/location data is provided to client workstations, which display a simulated environment visible to all participants. A text or speech-based bulletin board application is coupled to the animation process. The bulletin board application receives text or speech input from the multiple remote users and publishes the input in a public forum. The bulletin board application maintains multiple forums organized by topic. Access or participation to particular forums is coordinated with the animation process, such that each user may be permitted access to a forum only when the user's avatar is located within a designated room or region of the modeled 3-D environment.Type: GrantFiled: September 12, 2011Date of Patent: August 28, 2012Assignee: Bourgham Investments L.L.C.Inventor: Brian Mark Shuster
-
Patent number: 8250281Abstract: Data communications through a host Fiber Channel adapter (‘HFCA’) implemented with a computer that includes two or more logical partitions, each logical partition including a separate instance of an operating system, each instance of an operating system including an instance of a low-level, switched fabric input/output (‘I/O’) library, including establishing, in the HFCA by instances of the I/O library in two or more logical partitions and by the hypervisor, separate logical Fiber Channel adapters (‘LFCAs’) for at least two of the logical partitions, each LFCA including an association of an LFCA identifier with at least one range of I/O memory addresses in the address space of a logical partition and transferring, at the behest of application programs in the two or more logical partitions, data between the RAM of the logical partitions and the data storage devices through the LFCAs, the HFCA, and the Fiber Channel fabric.Type: GrantFiled: October 15, 2008Date of Patent: August 21, 2012Assignee: International Business Machines CorporationInventors: Ellen M. Bauman, Timothy J. Schimke, Lee A. Sendelbach, Joseph T. Writz
-
Publication number: 20120210042Abstract: Remote memory can be used for a number idle pages located on a virtual machine. A number of idle pages can be sent to the remote memory according to a placement policy, where the placement policy can include a number of weighting factors. A hypervisor on a computing device can record a local size and a remote page fault frequency of the number of virtual machines. The hypervisor can scan local memory to determine the number of idle pages and a number of idle virtual machines. The number of idle pages, including a page map and a remote address destination for each idle page, can be sent to the remote memory by the hypervisor. The number of virtual machines can be analyzed to determine a per-virtual machine local memory allocation.Type: ApplicationFiled: February 10, 2011Publication date: August 16, 2012Inventors: Kevin T. Lim, Jichuan Chang, Jose Renato G. Santos, Yoshio Turner, Parthasarathy Ranganathan