Microsoft Technology Licensing, LLC

Bin Du

Steven M Lasker

Eric Ray Hotinger

Sajay Antony

Yu Wang

Michael Milirud

Samarth Harish Shah

Zaki Maksyutov

Dongjiang You

Bradley Thomas Haverstein

Nagalakshmi Duggaraju

Tao Wu

Yi Jun Liu

Shiwei Zhang

Brian Timothy Goff

Iuliia Safarova

Siva Garudayagari

Xiangyue Hua

Ruoying Liang

Computing system enhancements make container instantiation faster, reduce layer content storage demands, and make more container image formats available. A container instantiation location sends a container image pull request to a container registry, receives an image manifest, sends a layer mount request to the registry instead of a layer content download request, receives a layer mount, optionally repeats for additional layers, creates a union file system spanning the layers, and launches a container process based on the union file system without first downloading all the layer content. Inefficiencies and technical limitations of some other approaches are avoided, such as loopback mounts for snapshot expansion, creation or transmission of extra snapshots or extra container image clones, cluttering layer content with virtual machine settings, container system vendor lock-in, lack of container instantiation at a local system due to insufficient local storage, and lack of syscall optimization due to storage driver plugin usage.

Container instantiation with union file system layer mounts

A cloud-based fleet of sandboxes is scalable along two tiers. Additional sandboxes may be added to a particular sandbox network in a particular sandbox stack, or additional sandbox stacks may be added. Isolation of individual sandboxes within a sandbox network is provided by virtual switches or routers, and subnetting. Isolation of sandbox networks is provided by network or port address translation, and by running hypervisors in respective infrastructure-as-a-service virtual machines. Provisioning efficiency can be provided by the two-tiered architecture, by use of differencing disks, by use of virtual machine scale sets, and by hybrid core-count sandboxes. Sandboxes may be secured but still have outgoing internet connectivity. Workloads run in the sandbox may include builds, tests of development code, investigations of possible malware, and other tasks.

Tiered scalability sandbox fleet with internet access

A system includes presentation of a first visualization of a first set of the plurality of samples on the display device, each sample of the first set associated with a time within a first time period, and the first visualization plotting a time against a metric value for each sample of the first set, presentation of a first histogram of the first set on the display device, the first histogram indicating, for each of a first plurality of metric categorizations, a number of samples of the first set associated with the metric categorization. Changing of the first period to a second time period results in cross-synchronization of the visualizations with a second set of data samples associated with the second time period. A first sample of the first set and associated with a first metric categorization may be identified as associated with a first stored event trace, where the first visualization presents a first indicator in association with the first metric categorization and which indicates the first stored event trace.

Synchronized temporal and frequency-based visualizations of operational data

Growing community of inventors

Redmond, WA, United States of America

Bin Du