Netapp, Inc.

Network Appliance, Inc.

Microsoft Technology Licensing, LLC

Candera, Inc.

Chandra Prasad

Kumar Gajjar

Dipam Patel

Richard Meyer

Jim Collins

Dharma Kiritkumar Shukla

Girish Mittur Venkataramanappa

Rahim Ibrahim

Yann Christensen

Amol Kulkarni

Nghiep Tran

Rush C Manbert

Andreas Ulbrich

Mandyam Kishore

Aditya G Bhandarkar

Sumit Mohanty

Vinod Shanbhag

Richard Meyers

Aarthi Rajmohan Saravanakumar

Systems and methods according to various embodiments disclose a worker process manager adapted to spawn one or more worker processes on a server and to load an application on each of the worker processes. The worker process manager is adapted to isolate the one or more worker processes from each other and to control resource usage by the worker processes. A resource manager is adapted to detect applications that overuse system resources. The worker process manager is adapted to isolate worker processes and to control resource usage using one or more of the following techniques: least-privilege execution, messaging isolation, credentials isolation, data isolation, network isolation, fair share resource usage, and managed runtime security. Heuristic algorithms are used to detect applications that frequently overuse system resources that are unchargeable and that cause system unresponsiveness.

Sandboxing for multi-tenancy

An automated, policy-based system and method provides information security at various levels in the network, including at the baseline inventory, device, network frame, and command level. This approach improves over the conventional distributed security model by centralizing security in one multi-level management structure. Embodiments of the present invention may also provide a scheme for mapping vendor-unique opcodes to access rights.

Method for device security in a heterogeneous storage network environment

A container service is capable of hosting large numbers of middleware components for multiple tenants. A central container manager controls a plurality of compute nodes. The central container manager receives middleware components from external devices or services and assigns the components to containers on one or more designated compute nodes. Each compute node has a container management agent and one or more containers. The container management agents activate and manage the appropriate number of containers to run the assigned middleware components. The container management agent assigns each container on its compute node a limited set of privileges to control access to shared resources. The central container manager and each node's container management agent monitor container load levels and dynamically adjust the placement of the middleware components to maintain balanced operation. The compute nodes are grouped into clusters based upon the type of middleware components hosted on each compute node.

Multi-tenant, high-density container service for hosting stateful and stateless middleware components

In a storage server on a storage area network, a media unit manager manages disk space in a manner transparent to the host computers. The media unit manager uses media units corresponding to the physical storage devices on the storage area network to build higher-level media units. The higher level media units can have the attributes of being sliced, concatenated, mirrored, striped, etc. Thus, the host computers need not be aware of the specific physical storage devices themselves, reducing the management and reconfiguration burden on the host computers when storage devices are added to or removed from the storage area network.

Storage virtualization and storage management to provide higher level storage services

A method and system for provisioning storage from a storage area network is provided. The provisioning includes receiving a request for a storage size and storage configuration from a storage area network according to a storage profile, identifying a storage device pool of storage devices according to a storage device candidate strategy, selecting a media unit provisioning strategy based upon the type of storage configuration specified in the storage request, generating media unit solutions using the media unit provisioning strategy and sequence of storage devices in the storage pool, determining if the media unit provisioning strategy produced a solution for the requested storage configuration and provisioning a media unit solution in response to the determination.

Method and system for strategy driven provisioning of storage in a storage area network

A storage provisioning policy is created by specifying storage heuristics for storage attributes using storage heuristic metadata. Storage attributes characterize a storage device and storage heuristic metadata describe how to specify a storage heuristic. Using the storage heuristic metadata, storage heuristics are defined to express a rule or constraint as a function of a storage attribute. In addition, the storage provisioning policy may also specify mapping rules for exporting the storage to a consumer of the storage, such as the server or server cluster.

System and method for policy based storage provisioning and management

Growing community of inventors

Los Altos, CA, United States of America

Chandra Prasad