Microsoft Technology Licensing, LLC

Amazon Technologies, Inc.

Salesforce Com, Inc.

Microsoft Corporation

Ajith Jayamohan

Arun Upadhyaya Kishan

Pedro Miguel Teixeira

Suyash Sinha

Dave Probert

Eric Jason Brandwine

Ian Roger Searle

Aaron Douglas Dokey

Kirk Arlo Petersen

Preetha Chatterjee

Alexey Pakhunov

Eric Wayne Schultze

David Bradley Probert, Jr

Stephen Francis Heil

Hong Tian

Padmini Chandrasekhar Iyer

Chengliang Zhang

Wenbiao Xing

System and methods are described for efficient monitoring of network traffic in a public cloud computing environment. In one implementation, a method comprises: generating flow log records of network traffic in the public cloud computing environment; identifying a data packet that presents a potential security risk; identifying a captured data packet (PCAP) record corresponding to the identified data packet; and transmitting the PCAP record to a computing device for network traffic analysis.

Efficient monitoring of network activity in a cloud computing environment

Systems and method are provided for source-dependent address resolution. Multiple computing devices may be associated with identifiers, such as network names. These computing devices may further be associated with both internally and externally accessible network addresses. A source-dependent address resolution component may resolve a network identifier into an internal or external address based on a network of a requesting device. Specifically, a request for address resolution may be received from a source network, and be resolvable into an address of a target network. If the source network and target network are the same, an internal address of that shared network is returned. If the source network and the target network are different, an external address enabling external communication with the target network is returned. In some embodiments, determination of a source network may be facilitated based on a source port of a request.

Source-dependent address resolution

Approaches are described for collecting and/or utilizing network traffic information, such as network flow data, within a virtualized computing environment. The network traffic information can be collected on one or more host computing devices that host virtual machines. The collected network traffic information can include virtualized computing environment specific information, such as a user account identifier (ID), virtual machine identifier (ID), session termination information and the like. The collected network traffic information can also be presented to the user of the virtualized computing environment.

Network traffic data in virtualized environments

Embodiments for performing cooperative user mode scheduling between user mode schedulable (UMS) threads and primary threads are disclosed. In accordance with one embodiment, privileged hardware states are transferred from a kernel portion of a UMS thread to a kernel portion of a primary thread.

Transparent user mode scheduling on traditional threading systems

Different processor cores in a computing device can support different features. In one or more embodiments, the features supported by each of multiple physical processor cores of a computing device are identified. A set of one or more features of the multiple physical processor cores to make available to virtual processor cores of the virtual machine are determined based at least in part on both the one or more features supported by each of the multiple physical processor cores and a number of virtual processor cores of the virtual machine. In additional embodiments, a multi-level scheduling model is used. An operating system level scheduler of an operating system schedules multiple applications for execution on multiple processor cores, and a user level scheduler of an application schedules application threads of that application for execution on one or more of the multiple processor cores.

Virtual machine and/or multi-level scheduling support on systems with asymmetric processor cores

A subject disclosure is directed towards emulating a data network interface for operating an interconnect controller in accordance with a networking standard. The emulated data network interface provides address resolution data associated with a destination, within a converged interconnect fabric, for application data. The address resolution data identifies a communication path that is compatible with the interconnect controller. The application data conforms to the networking standard. The emulated data network interface instructs the interconnect controller to route the application data to the destination via the compatible communication path.

Providing network capability over a converged interconnect fabric

Embodiments for performing cooperative user mode scheduling between user mode schedulable (UMS) threads and primary threads are disclosed. In accordance with one embodiment, an asynchronous procedure call (APC) is received on a kernel portion of a user mode schedulable (UMS) thread. The status of the UMS thread as it is being processed in a multi-processor environment is determined. Based on the determined status, the APC is processed on the UMS thread.

A request is received to change an association of a network interface record from a first resource instance to a second resource instance. The network interface record may include an IP address associated with the first resource instance. In response to the request, the first resource instance is prevented from receiving data packets addressed to the IP address of the network interface record through a first network interface object attached to the first resource instance. The network interface record is associated with the second resource instance so that the second resource instance is enabled to receive data packets addressed to the IP address of the network interface record through a second network interface object attached to the second resource instance.

Maintaining private connections during network interface reconfiguration

Technologies pertaining to cluster-on-chip computing environments are described herein. More particularly, mechanisms for supporting message passing in such environments are described herein, where cluster-on-chip computing environments do not support hardware cache coherency.

Message passing in a cluster-on-chip computing environment

There is provided a method of providing a template virtual machine. An exemplary method comprises creating a template virtual machine comprising an image of an operating system and software running on the operating system. The template virtual machine does not include machine-specific identifiers. The template virtual machine is booted into a virtual machine environment. Subsequently, machine-specific identifiers for the template virtual machine are updated. The template virtual machine may then be booted with machine-specific identifiers into a service instance to perform a function determined by the software running on the operating system such that uniform code pages representing the operating system and software running on the operating system are shared among virtual machines in the virtual machine environment.

Template virtual machines

Performing directed switches between user mode schedulable (UMS) threads and primary threads enable proper execution of the UMS threads. A primary thread user portion is switched to a UMS thread user portion so that the UMS thread user portion is executed in user mode via the primary thread user portion. The primary thread is then transferred into kernel mode via an implicit switch. A kernel portion of the UMS thread is then executed in kernel mode using the context information of a primary thread kernel portion.

Growing community of inventors

Redmond, WA, United States of America

Ajith Jayamohan