In various embodiments, one or more non-transitory computer-readable media storing program instructions that, when executed by one or more processors, cause the one or more processors to perform a method comprising receiving, from an API server, a request to access a service, the request including an API authorization identifier; validating the API authorization identifier to generate a validation result; determining a service tier of the service based on the request; and transmitting, to the API server, a response including the validation result and an indicator of the service tier based on the request.
A database management system may include a control plane comprising a memory having computer-readable instructions stored thereon and processor that executes computer-readable instructions to execute one or more services running on the control plane, the control plane connected to a plurality of database servers, wherein each of the plurality of database servers is connected to the control plane via a communication channel, wherein the control plane comprises a plurality of data streams, each of the plurality of data streams configured to communicate messages of a designated type, and wherein the control plane is configured to communicate with a database server of the plurality of database servers using the plurality of data streams and the communication channel associated with the database server and the control plane.
G06F 16/25 - Integrating or interfacing systems involving database management systems
G06F 16/27 - Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
3.
APPARATUSES AND METHODS FOR ZERO TOUCH COMPUTING NODE INITIALIZATION
Examples described herein includes initialization of a computing node cluster. An example method providing a query request from an initialization application/service of a computing node for a default configuration management server identifier via a network, and receiving, from a network management server, an internet protocol address associated with the default configuration management server identifier. The example method further includes providing a configuration request from the computing node to the internet protocol address requesting configuration information, and receiving the configuration information at the computing node from a configuration management server associated with the internet protocol address.
An illustrative embodiment disclosed herein is a method, by a migration virtual machine, including determining whether a first target network interface card is configured by dynamic host configuration protocol and sending a first address resolution protocol request for a first source Intemet Protocol gateway to the first target network interface card. Sending the first address resolution protocol request is based on determining that the first target network interface card is not configured by dynamic host configuration protocol. The method further includes determining whether the first target network interface card responds to the first address resolution protocol request of the migration virtual machine and applying an Internet Protocol configuration of a first source network interface card to the first target network interface card. Applying the Intemet Protocol configuration is based on receiving a response from the first target network interface card to the first address resolution protocol request of the migration virtual machine.
Systems and methods for migrating a plurality of virtual machines (VMs) from a private cluster to a public cloud include identifying the plurality of VMs currently residing in the private cluster to be migrated to the public cloud. A communication graph indicative of communications involving the plurality of VMs is determined. A migration sequence for the plurality of VMs based on the communication graph is generated. The plurality of VMs is migrated from the private cluster to the public cloud according to the migration sequence.
A system and method include assigning, by an identifier management system of a virtual computing system, a hypervisor agnostic identifier to a virtual machine. The system and method also include creating a mapping of the hypervisor agnostic identifier to a first hypervisor specific identifier of the virtual machine, including storing the mapping in a database, and updating the mapping in response to a second hypervisor specific identifier being associated with the virtual machine. The updated mapping maps the hypervisor agnostic identifier to the second hypervisor specific identifier. The system and method further include making available the hypervisor agnostic identifier for use by other elements of the virtual computing system instead of the first hypervisor specific identifier and the second hypervisor specific identifier. The first hypervisor specific identifier and the second hypervisor specific identifier are hypervisor specific, while the hypervisor agnostic identifier is not hypervisor specific.
A method of determining an optimal host machine to place a virtual machine in a virtualization environment is described. The virtualization environment includes a first rack of host machines and a second rack of host machines, where a first host machine of the first rack of host machines is designated as a leader node. The method includes receiving a request to launch a second virtual machine configured to communicate with a first virtual machine. The method includes identifying, from the first rack of host machines and the second rack of host machines, a cluster of host machines. The method includes computing, for each host machine of the cluster, an aggregate network bandwidth consumed by the host machine. The method includes selecting a host machine from the cluster based on the aggregate network bandwidth computed for the selected host machine. The method includes launching the second virtual machine on the selected host machine.
A plurality of virtual disks are grouped together into one or more consistency sets. Storage I/O commands for the plurality of virtual disks of the consistency sets are captured into multiple levels of backup data, some of which levels comprise lightweight snapshot data structures. On a time schedule, multiple levels of backup data for the virtual disks are cascaded by processing data from one or more higher granularity levels of backup data to one or more lower granularity levels of backup data. Upon receiving a disaster recovery request, the most recent I/Os and the snapshots are processed. In certain situations, the snapshots are used to establish operable portions of a computing entity before the computing entity is fully populated.
In a distributed cloud environment, a collecting agent deployed external to a kernel of a compute host collects network data packets describing various raw events communicated between compute instances of the environment and metadata associated with the events from various sources. The collecting agent communicates the metadata to a cloud application. The collecting agent also communicates the packets to a stream processor that is decoupled from the collecting agent. The stream processor processes the packets in a stateful manner to generate a set of time series data. The time series data is communicated to the cloud application, where a set of enhanced time series data is generated by merging the time series data with the metadata in a distributed manner. A topology map describing the compute instances of the distributed cloud environment is then generated based on the set of enhanced time series data. The topology map is then displayed.
G06F 11/34 - Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation
G06F 15/16 - Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs
G06F 17/30 - Information retrieval; Database structures therefor
H04L 29/08 - Transmission control procedure, e.g. data link level control procedure
10.
SYSTEMS AND METHODS FOR NETWORKED MICROSERVICE MODELING
In a distributed cloud environment, a collecting agent deployed external to a kernel of a compute host collects network data packets describing various raw events communicated between compute instances of the distributed cloud environment and metadata associated with the events from various sources. The collecting agent communicates the metadata to a cloud service where it may be stored. The collecting agent communicates the packets to a stream processor that is decoupled from the collecting agent. The stream processor processes the packets in a stateful manner to generate a set of time series data. The time series data is communicated to the cloud application, where a set of enhanced time series data is generated by merging the time series data with the metadata in a distributed manner. A topology map describing the compute instances of the distributed cloud environment is then generated based on the set of enhanced time series data.
G06F 11/34 - Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation
G06F 15/16 - Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs
G06F 17/30 - Information retrieval; Database structures therefor
H04L 29/08 - Transmission control procedure, e.g. data link level control procedure
11.
MASSIVELY PARALLEL AUTONOMOUS REIMAGING OF NODES IN A COMPUTING CLUSTER
Systems for management of a large computing cluster. A set of computing nodes within the cluster are identified. The identified nodes are to be reimaged with an operating system image and parameters. One or more reimaging algorithms in the form of computer code are stored in a networked storage device within a storage pool that comprises the networked storage device and a plurality of local storage devices that correspond to respective individual ones of the set of computing nodes. An agent that can execute the reimaging algorithm code is configured to run on any one of the set of computing nodes, wherein the agent is further configured to retrieve reimaging data from a storage device that is within the storage pool. An agent running on a leader node initiates reimaging of a second node. The second node initiates reimaging of a third node. The third node reimages the leader node.
Particular embodiments may provide a device capable of autonomous locomotion comprising means for autonomous locomotion, a device controller for navigation of the device by controlling the means for autonomous locomotion, and a host machine running a hypervisor, one or more user virtual machines (UVMs) and a virtual machine controller, wherein the host machine is communicably coupled to the device controller, and wherein at least one of the UVMs provides navigation instructions to the device controller.
In some embodiments, a system for testing performance of a virtualization environment comprises host machines, wherein each of the host machines comprises a hypervisor, one or more user virtual machines (UVMs) and a virtual machine controller, and one or more virtual disks comprising a plurality of storage devices. The one or more virtual disks may be accessible by the virtual machine controllers, and the virtual machine controllers conduct I/O transactions with the one or more virtual disks. The system may receive a specification of a hardware configuration for a host machine and configure the virtualization environment to incorporate the host machine. The system may then select one or more qualification tasks for a test scenario, execute the qualification tasks in the test scenario, and monitor performance of the virtualization environment. The system may then calculate a score assessing how well the hardware configuration may perform in the virtualization environment.
In one embodiment, a method may comprise receiving a query to search for one or more entities of the data center, the query including one or more query tokens. The method may then identify one or more entity -type nodes corresponding to the query, and rank the entity -type nodes based on a score determined for each of the identified entity-type nodes. For at least a portion of the ranked entity-type nodes, the method may generate a structured query associated with each of the entity-type nodes based at least in part of one or more activity-type nodes connected to each of the entity-type nodes. Then, the method may retrieve, based on the structured queries, results from one or more databases.
Systems, methods, and computer readable medium for virtualized computing environments. A method for providing a connection between a guest virtual machine and a service virtual machine uses driver code functions to establish a listening port on the service virtual machine without providing a listening port on the guest virtual machine. The guest virtual machine initiates a remote procedure call socket between itself and the service virtual machine over a secure, hardened port. The service virtual machine presents an authority certificate by encoding into the authority certificate identifying information received from the guest virtual machine. The service virtual machine makes available (e.g., as an ISO image) the authority certificate, which is used to establish new secure connections. Communications continue, where some communications are initiated by the service virtual machine over the hardened port, and some communications are initiated on-demand by the guest virtual machine over newly-established and authenticated secure RPC connections.
Systems and methods for managing contiguous addressing via virtual paging registers in a page table used in a high-performance computing platform. One embodiment commences upon initializing a first paging register with a first virtual address of a first virtual address length to form a first virtual address space, then receiving a request from a process to allocate physical memory corresponding to a second virtual address request. A memory allocator allocates the requested physical memory from a physical memory location determined by the memory allocator. An operating system or other sufficiently privileged access identifies a second paging register that is contiguously adjacent to the first paging register. If the second paging register is already in use, then the method identifies an unused (third) paging register into which the contents of the second paging register can be relocated. The method stores the second virtual address into the now freed-up second paging register.
Disclosed is an improved approach for implementing de-duplication, by selecting data such that the de-duplication efficacy of the storage will be increased without arbitrarily increasing metadata size.
G06F 15/16 - Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs
G06F 17/30 - Information retrieval; Database structures therefor
G06Q 30/02 - Marketing; Price estimation or determination; Fundraising
H04L 9/32 - Arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system
H04L 29/06 - Communication control; Communication processing characterised by a protocol
H04L 29/08 - Transmission control procedure, e.g. data link level control procedure
18.
OPTIMIZABLE FULL-PATH ENCRYPTION IN A VIRTUALIZATION ENVIRONMENT
An approach for full-path data encryption, where user virtualized computers (e.g., user VMs) are configured to communicate with other virtualized computers or VMs using IPsec protocol encryption standards. The user VMs may send a first encryption or authorization key to the other VMs, which the other VMs may use to authenticate the user VMs and encrypt and decrypt data stored to storage devices using a second encryption key. In some approaches, the other VMs may interpret or decrypt the data sent via IPsec and then perform data optimizations (e.g., compression, deduplication) on the data before decrypting/encrypting with the second key.
Systems for high-performance computing. A storage control architecture is implemented by a plurality of nodes, where a node comprises combinations of executable containers that execute in cooperation with virtual machines running above a hypervisor. The containers run in a virtual machine above a hypervisor, and/or can be integrated directly into the operating system of a host node. Sensitive information such as credit card information may be isolated from the containers in a separate virtual machine that is configured to be threat resistant, and which can be accessed through a threat resistant interface module. One of the virtual machines of the node may be a node-specific control virtual machine that is configured to operate as a dedicated storage controller for a node. One of the virtual machines of the node may be a node-specific container service machine that is configured to provide storage-related and other support to a hosted executable container.
G06F 15/16 - Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs
G06F 15/173 - Interprocessor communication using an interconnection network, e.g. matrix, shuffle, pyramid, star or snowflake
Disclosed is an improved approach to implement erasure coding, which can address multiple storage unit failures in an efficient manner. The approach can effectively address multiple failures of storage units by implementing diagonal parity sets.
Described is an approach for implementing stretching datastores/clusters in a virtualization environment. In this approach, data replication can be performed across multiple namespace protocols. In addition, control can be made of the granularity of the data replication such that different combinations of data subsets are replicated from one cluster to another.
A method for providing load balancing to a client node external to a clustered environment for storage management, includes deploying a lightweight load balancing component at the client node, receiving I/O requests issued by virtual machines hosted at the client node by the lightweight load balancing component, performing a hashing algorithm on content of the I/O requests by the lightweight load balancing component to identify one or more controller virtual machines at the clustered environment for handling the I/O requests and dynamically distributing the I/O requests from the lightweight load balancing component to the one or more controller virtual machines at the clustered environment for storage management.
A method for providing external access into a secured networked virtualization environment, includes performing a leadership election amongst nodes of the secured networked virtualization environment to elect a leader node, assigning a cluster virtual IP address to the leader node and generating a reverse tunnel, using a processor, by the leader node to allow for an external entity to communicate with the secured networked virtualization environment.
A method for performing lockless lookups during a rolling upgrade of a column family from an old column family version to a new column family version in a NoSQL database.
A method for providing real time replication status for a networked virtualization environment for storage management, includes scanning metadata to identify replication status for all virtual disks (vDisks) in the networked virtualization environment, generating replication tasks for vDisks that are identified as under replicated based on the scan, performing the replication tasks, monitoring the progress of the replication tasks and determining the real time replication status of the networked virtualization environment based on the scanned metadata and the monitored progress of the replication tasks.
Disclosed is an improved approach to implement virtualization objects in a virtualization system. The virtualization object from a first namespace is cloned as a snapshot that is accessible within a second namespace. To implement this, the virtualization object can be mounted as a target (implemented as a snapshot) that is locally accessible to the host.
A method for leveraging hypervisor functionality for maintaining application consistent snapshots in a virtualization environment deployed by the hypervisor includes utilizing the hypervisor to generate a hypervisor-specific application consistent snapshot of a virtual machine running in the virtualization environment, taking a storage controller specific application consistent snapshot of the hypervisor-specific application consistent snapshot of the virtual machine, and logically deleting the hypervisor-specific application consistent snapshot.
Disclosed is an approach for implementing disaster recovery for virtual machines. Consistency groups are implemented for virtual machines, where the consistency group link together two or more VMs. The consistency group includes any set of VMs which need to be managed on a consistent basis in the event of a disaster recovery scenario.
patents
