Ravello Systems Ltd.

Oracle International Corporation

Alexander Fishman

Izik Eidus

Leonid Shatz

Boris Figovsky

Michael Rapoport

Rami Tamir

Gil Hoffer

Benny Schnaider

A method and apparatus for efficiently executing guest programs in a virtualized computing environment are presented. The method includes executing a virtual machine on a computing hardware; executing a single hypervisor in a first security ring on the virtual machine; executing a single guest program on the virtual machine, wherein the single guest program includes a single kernel being executed in the first security ring and at least one application being executed in a second security ring; and executing at least an instruction issued by the at least one application without trapping the single hypervisor.

Apparatus and method thereof for efficient execution of a guest in a virtualized enviroment

A proxy and method for performing source destination network address translation are presented. The method includes receiving a first message from a node communicatively connected to a first network to access a resource communicatively connected to a second network, wherein the first message contains at least a source address and a destination address used within the first network; translating the destination address designated in the first message to an address of the resource; generating a unique address for the destination address designated in the first message, wherein the unique address is an address not in use on the second network; providing a translated message including the translated destination address and the unique address; and forwarding the translated message to the resource communicatively connected to the second network.

Source-destination network address translation (SDNAT) proxy and method thereof

An independent overlay and a method for creating an independent overlay of a virtualized network for virtualized hosts over a physical network to allow access between a first virtualized guest and a second virtualized guest over the physical network. The independent overlay includes a physical network; a first virtualized host instantiating thereon a first guest; a second virtualized host instantiating thereon a second guest, wherein a first communication port and a second communication port are communicatively connected to constitute a distributed communication element that enables a virtualized network for communication between the first guest and the second guest via the first communication port and the second communication port, respectively; and a media access (MAC) discovery mechanism.

Virtualized network for virtualized guests as an independent overlay over a physical network

A computerized method for efficient handling of a privileged instruction executed by a virtual machine (VM). The method comprises identifying when the privileged instruction causes a VM executed on a computing hardware to perform a VM exit; replacing a first virtual-to-physical address mapping to a second virtual-to-physical address mapping respective of a virtual pointer associated with the privileged instruction; and invalidating at least a cache entry in a cache memory allocated to the VM, thereby causing a new translation for the virtual pointer to the second virtual-to-physical address, wherein the second virtual-to-physical address provides a pointer to a physical address in a physical memory in the computing hardware allocated to the VM.

Method for reducing the overhead associated with a virtual machine exit when handling instructions related to descriptor tables

A method for operating a virtualized network that communicatively connects between a plurality of communication ports, instantiated for a plurality of guest operating systems executed over a plurality of hosts. The method comprises instantiating a communication port for each of the plurality of guests; performing a discovery media access control (MAC) address process of at least one destination guest of the plurality of guests by a source guest; sending a ping request from the source request to the at least one destination guest; and creating the virtualized network to allow communication between the source guest with the at least one destination guest, wherein the virtualized network is created over the physical network.

A method for efficient execution of a guest in a virtualized computing environment is provided. The method comprises causing an execution of at least one virtual machine on a computing hardware, the virtual machine executes a hypervisor in a first security ring; and causing an execution of a single guest program on one of the at least one virtual machines, the single guest program comprises a kernel being executed in the first security ring and at least one application being executed in a second security ring.

Growing community of inventors

Netanya, Israel

Alexander Fishman