Netapp, Inc.

Vmware, Inc.

Bracket Computing, Inc.

Dennis Ramdass

Stephanie Zhimao He

Jason Ansel Lango

James J Voll

Marcel Moolenaar

Ramya Olichandran

Glenn Sizemore

Barry Shilmover

Akshay Deodhar

A technique implements network policy deployed in a tag-based policy architecture of a virtualized computing environment. One or more virtual machine instances (VMIs) may be provided by a virtual data center (VDC) of the environment, wherein each VMI includes an intermediary manager of a computing cell that also includes a guest operating system (OS) and associated applications. The tag-based policy architecture may be configured to enforce the network policy in the virtualized computing environment using cryptographically-verifiable metadata to authenticate compute resources, such as the VMIs, coupled to a computer network and to authorize access to protected resources, such as virtualized network resources of the VDC.

Network policy implementation in a tag-based policy architecture

In an approach, an intermediary guest manager operates within a virtual machine hosted by a host machine and managed by a hypervisor. The intermediary guest manager manages one or more guest operating systems operating within the virtual machine and implements one or more security services for the guest operating systems. The security services provided to the guest operating systems may include system call filtering, memory protections, secure memory dumps, and others. In some cases, the intermediary guest manager consults a threat defense policy which contains a number of records, where each record has one or more triggers representing suspicious activity and one or more actions to take in response to being triggered. When the intermediary guest manager identifies a request, such as a system call or memory access, that meets the trigger of a particular record, the intermediary guest manager executes the associated actions to remediate the suspicious activity.

Threat defense techniques

Techniques for virtual machine shifting are described. An apparatus may comprise shifting component operative to shift a virtual machine (VM) between a hypervisor having one type of hypervisor platform and a destination hypervisor having an alternative type of hypervisor platform through use of a clone of the VM. The shifting is bi-directional between the host and the destination hypervisor. The apparatus may comprise a universal application programming interface (API) used for reconfiguring one or more network interfaces and one or more disks of the VM onto the destination hypervisor. Other embodiments are described and claimed.

Techniques for virtual machine shifting

One or more techniques and/or systems are provided for remotely and/or automatically managing a monitoring pool of management servers configured to monitor resources, such as storage devices. For example, a monitoring installer package may be sent from a remote source to a management server for remote installation of a monitoring component capable of monitoring resources. The monitoring installer package may be remotely executed from the remote source to install the monitoring component on the management server. The management server may be assigned to the monitoring pool, and may be configured to monitor, utilizing the monitoring component, a set of resources of a resource pool. In this way, management servers may be remotely added to and/or removed from the monitoring pool. Load balancing may be remotely performed for the management servers assigned to the monitoring pool.

Remote monitoring pool management

One or more techniques and/or systems are provided for detecting misalignment between a virtual data format and an underlying data format. A virtual data object, such as a virtual machine, may be stored within a storage device using an underlying data format. The virtual data object may comprise one or more virtual data structures, such as a virtual partition. The virtual partition may be stored within the virtual data object according to a virtual data format. The virtual data format may be compared with the underlying data format to determine whether the virtual data structure is misaligned within the storage device. Such misalignment may lead to virtual data blocks of the virtual data structure overlapping underlying data blocks, which may degrade (e.g., I/O) performance. Accordingly, one or more misaligned virtual data structures may be realigned within the storage device to address misalignment and/or improve performance.

Detecting misalignment of virtualized data

Data identifying server storage devices and logical storage entities is received. A storage object model based on the received data is generated. A first user type is associated with the server storage devices and logical storage entities. A second user type is associated with the logical storage entities. A first user is allowed to access data associated with the sever storage devices and the logical storage entities in response to determining that the first user is identified as the first user type. A second user is allowed to access data associated with the logical storage entities and not allowed to access data associated with the server storage devices in response to determining that the second user is identified as the second user type.

Growing community of inventors

Mountain View, CA, United States of America

Dennis Ramdass