Microsoft Technology Licensing, LLC

Christian Gregory Allred

Neal Robert Christiansen

Sarosh Cyrus Havewala

David Matthew Kruse

Mathew George

Senthil Rajaram

Nandagopal Kirubanandan

Surendra Verma

Jonathan M Cargille

Andrew M Herron

Dana D Groff

William R Tipton

Alexey A Polyakov

Dragos Sambotin

Daniel Edward Lovinger

Shaheed Gulamabbas Chagani

Matthew Stuart Garson

Karthik Thirumalai

Jay Thomas Rixie

A copy-on-write union filesystem. A computer system identifies a first filesystem namespace as a mutable layer, and a second filesystem namespace as an immutable layer. The computer system exposes a merged filesystem namespace as a union filesystem that merges the mutable layer and the immutable layer, and that overlays the first filesystem namespace over the second filesystem namespace. The computer system identifies an operation on the merged filesystem namespace that requests to read from a file within the merged filesystem namespace, the file being stored in the second filesystem namespace and not being stored in the first filesystem namespace. The computer system returns a handle referencing a proxy object stored in a system memory. The proxy object includes a mapping to a file object corresponding to the file as stored in the second filesystem namespace.

Copy-on-write union filesystem

An application running in a container is able to access files stored on disk via normal file system calls, but in a manner that remains isolated from applications and processes in other containers. In one aspect, a namespace virtualization component is coupled with a copy-on-write component. When an isolated application is accessing a file stored on disk in a read-only manner, the namespace virtualization component and copy-on-write component grant access to the file. But, if the application requests to modify the file, the copy-on-write component intercepts the I/O and effectively creates a copy of the file in a different storage location on disk. The namespace virtualization component is then responsible for hiding the true location of the copy of the file, via namespace mapping.

Storage isolation for containers

Improved methods and systems for granular opportunistic locking mechanisms (oplocks) are provided for increasing file caching efficiency. Oplocks can be specified with a combination of three possible granular caching intentions: read, write, and/or handle. An oplock can be specified with an identifier that indicates a client/specific caller to avoid breaking the original oplock due to an incompatibility from other requests of the same client. An atomic oplock flag is added to create operations that allow callers to request an atomic open with an oplock with a given file.

Efficient file management through granular opportunistic locking

Described are embodiments for allowing clients that access a distributed file system to locally cache directory metadata. The client may request a read lease which allows the client to cache the directory metadata locally and service requests received from the same application which originally requested the directory metadata using the cache. In addition, the client may also request a handle lease which allows a client to delay the closing of a directory handle and allow the handle to be reused to service subsequent directory metadata requests from the same or a different application. A client may also request a write lease which allows an application on the client to modify the directory metadata, such as by creating or deleting new files in the directory, or changing their attributes, and cache those changes.

Directory leasing

Current file systems may implement opportunistic locks on files that allow clients to locally cache file data, while promoting data consistency when multiple clients read/write the same file. Unfortunately, when a client locally caches directory content of a directory, the file system may lack a mechanism for notifying the client of changes to the directory that would render the cached directory content 'stale'. Accordingly, one or more systems and/or techniques for managing a directory oplock are disclosed herein. A directory oplock may be generated based upon an oplock request comprising a first target key and a first parent key. Subsequent access requests for access to the directory or objects therein may be compared with the directory oplock to determine whether to break the directory oplock, and notify the client (e.g., directory oplock is broken if the client submitting the access request is different than the client owning the directory oplock).

Directory oplock

A set of application programming interfaces ('APIs') is provided that enables an application to perform operations on multiple system resources as a single logical unit of work through a transaction. The application can then commit or roll back the entire group of changes as a single unit in a coordinated manner. The APIs expose functions and methods that take a reference to a transaction context, such as a handle, name, or pointer, as one of their parameters so that the application can manipulate the resource as a transacted operation. The transaction is bound to all created handles so that all operations on the resource using those handles are also transacted. In an illustrative example, the set of APIs are transacted name-based WIN32 APIs that take a transaction handle. The transacted APIs expose transacted operations to the application for durable system resources in the OS kernel, including the NTFS file system (New Technology File System) and registry.

Application programming interfaces for transacted file and registry operations

Aspects of the subject matter described herein relate to antivirus protection and transactions. In aspects, a filter detects that a file is participating in a transaction and then may cause the file to be scanned together with any changes that have made to the file during the transaction. After a file is scanned, a cache entry may be updated to indicate that the file is clean. The cache entry may be used subsequently for like-type states. For example, if the file was scanned inside a transaction, the cache entry may be used later in the transaction. If the file was scanned outside a transaction, the cache entry may be used later for requests pertaining to files not in a transaction. Cache entries may be discarded when they are invalid or no longer useful.

Growing community of inventors

Snohomish, WA, United States of America

Christian Gregory Allred