Microsoft Technology Licensing, LLC

Andreas Ulbrich

Dharma Kiritkumar Shukla

Georgios Chrysanthakopoulos

Girish Mittur Venkataramanappa

Yann Christensen

Amol Kulkarni

Chandra Prasad

Mandyam Kishore

Aditya G Bhandarkar

Sumit Mohanty

Vinod Shanbhag

Aarthi Rajmohan Saravanakumar

Systems and methods according to various embodiments disclose a worker process manager adapted to spawn one or more worker processes on a server and to load an application on each of the worker processes. The worker process manager is adapted to isolate the one or more worker processes from each other and to control resource usage by the worker processes. A resource manager is adapted to detect applications that overuse system resources. The worker process manager is adapted to isolate worker processes and to control resource usage using one or more of the following techniques: least-privilege execution, messaging isolation, credentials isolation, data isolation, network isolation, fair share resource usage, and managed runtime security. Heuristic algorithms are used to detect applications that frequently overuse system resources that are unchargeable and that cause system unresponsiveness.

Sandboxing for multi-tenancy

A container service is capable of hosting large numbers of middleware components for multiple tenants. A central container manager controls a plurality of compute nodes. The central container manager receives middleware components from external devices or services and assigns the components to containers on one or more designated compute nodes. Each compute node has a container management agent and one or more containers. The container management agents activate and manage the appropriate number of containers to run the assigned middleware components. The container management agent assigns each container on its compute node a limited set of privileges to control access to shared resources. The central container manager and each node's container management agent monitor container load levels and dynamically adjust the placement of the middleware components to maintain balanced operation. The compute nodes are grouped into clusters based upon the type of middleware components hosted on each compute node.

Multi-tenant, high-density container service for hosting stateful and stateless middleware components

Various technologies and techniques are disclosed that improve failure handling and debugging in message driven environments. A diagramming tool allows a user to graphically nest one or more functional components of the data flow diagram to create a fault handler. The fault handler is associated with a failure component to be called when a failure occurs within any one or more of the nested functional components. One or more application executables are synthesized from the data flow diagram. When the nested component is created at runtime, a causality is created for the nested component. The causality has an exception port for receiving fault messages that are unhandled within the nested data flow associated with the nested component. The causality also has a coordination port to allow any messages in the causality context and/or other applications to access the error history and the message coordination history.

Failure handling and debugging with causalities

Growing community of inventors

Kirkland, WA, United States of America

Andreas Ulbrich