Microsoft Technology Licensing, LLC

Keith Edgar Horton

Alan Thomas Gavin Jowett

Randy Joseph Miller

Andrew Mario Beltrano

Catalin-Emil Fetoiu

Guillaume Philippe Adrien Hetier

Matthew Yutaka Ige

Mitchell James Schmidt

Osman Nuri Ertugay

Gerardo Diaz-Cuellar

Harish Srinivasan

Omar Cardona

Joseph Nievelt

Shankar Seal

Dinesh Kumar Govindasamy

Nicholas David Wood

Poornananda Gaddehosur Ramachandra

Anirban Paul

A network firewall is disclosed that operates between a virtualized environment and the processing system that provides the virtualized environment. The network firewall filters network traffic generated by and destined for program components executing in the virtualized environment. The network firewall can be located in a hypervisor, a flow steering engine, or at another location between the virtualized environment and the processing system. The network firewall utilizes a firewall policy that can be shared with a network firewall on the processing system that filters network traffic originating at or destined for the processing system. The network firewall can filter network traffic based upon a unique identifier assigned to a virtualized environment, upon port numbers assigned to program components in a virtualized environment, or upon profiles assigned to network interfaces. The network firewall can also filter loopback traffic between a guest operating system (OS) and a host OS.

Providing a network firewall between a virtualized environment and a host processing system

Technologies are disclosed for providing compatible network resources to program components executing in a virtualized environment. Virtual network adapters are created in a virtualized environment that correspond to network interfaces present on a host processing system. A virtual network interface is created in the virtualized environment and exposed to program components executing in the virtualized environment. Network packets are routed between the program components executing in the virtualized environment, the virtual network interface, the active virtual network adapter, and the network interface on the host processing system corresponding to the active virtual network adapter. Network control messages generated by program components executing in a virtualized environment are intercepted and forwarded to a host processing system for processing.

Providing compatible network resources to program components executing in a virtualized environment

Technologies are disclosed for enabling virtual private network (VPN) support in a virtualized environment. The presence or creation of a host VPN adapter on a host processing system providing a virtualized environment is detected and, in response thereto, a virtual network adapter is created in the virtualized environment. A guest operating system (OS) creates a guest VPN adapter in the virtualized environment. A software component is inserted between the guest VPN adapter and the virtual network adapter. The software component adds Ethernet frames to point-to-point protocol (PPP) packets received from the guest VPN adapter and removes Ethernet frames from packets received from the virtual network adapter.

Enabling virtual private network (VPN) support in a virtualized environment

Embodiments relate to hypervisors that provide hardware isolated virtualization environments (HIVEs) such as containers and virtual machines (VMs). A first HIVE includes a first virtual network interface card (NIC) and a second HIVE includes a second virtual NIC. Both virtual NICs are backed by the same physical NIC. The physical NIC has an Internet Protocol (IP) address. The virtual NICs are assigned the same IP address as the physical NIC. A networking stack of the hypervisor receives inbound packets addressed to the IP address. The networking stack steers the inbound packets to the virtual NICs according to tuples of the inbound packets. Packets emitted by the virtual NICs comprise the IP address, pass through the network stack, and are transmitted by the physical NIC with headers comprising the IP address.

Hypervisor flow steering for address sharing

Computing devices are configured to passively monitor network stacks and protocols for a respective computing device, transmit metadata and statistics gathered by the monitoring to a remote service, and utilize a crowd-sourced heuristic model responsively generated by the remote service to proactively predict connectivity issues and connect to a best available network media and access device for the network media. A computing device's operating system may monitor various networking protocols without the computing device engaging in constant network activities (e.g., video streaming). The statistics obtained from this passive monitoring can be utilized by the remote service using various machine learning techniques to predict when networks will subsequently fail. Profiles are developed and sorted within the model to be used by individual computing devices to seamlessly connect to access devices based on performance, as opposed to connecting to the access device previously utilized by the user.

Application of machine learning for building predictive models enabling smart fail over between different network media types

In embodiments of a programming interface for data communications, a request queue and a completion queue can be allocated from a user-mode virtual memory buffer that corresponds to an application. The request queue and the completion queue can be pinned to physical memory and then mapped to kernel-mode system addresses so that the request queue and the completion queue can be accessed by a kernel-mode execution thread. A request can be received from an application for the kernel to handle data in the request queue, and a system issued to the kernel for the kernel-mode execution thread to handle the request. The kernel-mode execution thread can then handle additional requests from the application without additional system calls being issued.

Programming interface for data communications

Growing community of inventors

North Bend, WA, United States of America

Keith Edgar Horton