Sun Microsystems, Inc.

Oracle America, Inc.

Andrew D Gabriel

Andrew G Tucker

Ozgur C Leonard

Daniel B Price

John T Beck

David S Comay

In one embodiment of the present invention, there is provided a mechanism for implementing multi-level network administration in operating system partitions. With this mechanism, it is possible to control how network messages are routed and how network resources are used at multiple levels of an operating system environment. In one embodiment, a global administrator can control (or at least affect) routing at the partition level by setting the partition message processing rules. Similarly, a partition administrator can control (or at least affect) routing at the process group level by setting the process group message processing rules. Further, the global administrator can control the amount of a network resource that can be allocated to a non-global partition as a whole, and the partition administrator can control how that amount of the particular network resource can be allocated to the various projects within that non-global partition.

Multi-level administration of shared network resources

In accordance with one embodiment of the present invention, there is provided a mechanism for managing and controlling global visibility of resources in zones within an operating system controlled by a single kernel instance. Embodiments enable isolation and virtualization of processes within a single image of an operating system, without requiring implementation of hardware support (such as the introduction of an additional privilege level) to isolate privileged programs, and without multiple instances of an operating system or operating system kernel for some applications.

Global visibility controls for operating system partitions

Growing community of inventors

Fleet, United Kingdom

Andrew D Gabriel