Red Hat Israel, Ltd.

Red Hat, Inc.

Marcel Apfelbaum

Michael Tsirkin

Gal Hammer

Swati Sehgal

Orit Luba Wasserman

Yanir Quinn

Swat Sehgal

A device attachment request to attach a device to a container within a virtual machine is received. The virtual machine is monitored to determine whether the virtual machine is ready for a hot-plug of the device. An indication that the virtual machine is ready for the hot-plug of the device is received from the virtual machine. A device hot-plug operation is issued to cause the device to be hot-plugged to the virtual machine.

Reliable device assignment for virtual machine based containers

An example system includes a processor and a node agent executing on the processor. The node agent is configured to receive a message indicative of a workload, a processor policy of the workload, and a number of processor threads requested for the workload. The node agent is also configured to allow simultaneous allocation of a processor core to the workload and another workload based on the processor policy being a first policy. The node agent is also configured to prevent simultaneous allocation of the processor core to the workload and the other workload based on the processor policy being a second policy or a third policy. The node agent is also configured to allow simultaneous allocation of the processor core for two or more of the requested processor threads based on the processor policy being the second policy. The node agent is also configured to prevent simultaneous allocation of the processor core for more than one of the requested processor threads based on the processor policy being the third policy.

Simultaneous-multi-threading (SMT) aware processor allocation for cloud real-time workloads

Disclosed is a method of managing memory of a virtual machine (VM), including providing a physical IOMMU device on a host, and performing a memory translation using the physical IOMMU device on the host.

Hardware offloading for an emulated IOMMU device

A request to execute a workload that utilizes an amount of resources to be executed is received from a client device. Corresponding resources that are available at multiple non-uniform memory access (NUMA) nodes are received from one or more host systems. A particular NUMA node of the multiple NUMA nodes is identified in view of the particular NUMA node having available resources that are greater than the amount of resources to execute the workload. A scheduling hint is assigned to the workload that indicates that the particular NUMA node is to be used to execute the workload.

Scheduling in a container orchestration system utilizing hardware topology hints

Techniques of scheduling workload(s) on partitioned resources of host systems are described. The techniques can be used, for example, in a container-orchestration system. One technique includes retrieving information characterizing at least one schedulable partition and determining an availability and a suitability of one or more of the schedulable partition(s) for executing a workload in view of the information. Each of the schedulable partition(s) includes resources of one or more host systems. The technique also includes selecting one or more of the schedulable partition(s) to execute the workload in view of the availability and the suitability.

Scheduling workloads on partitioned resources of a host system in a container-orchestration system

A system includes a memory, a processor in communication with the memory, and an operating system ('OS') executing on the processor. The processor belongs to a processor socket. The OS is configured to pin a workload of a plurality of workloads to the processor belonging to the processor socket. Each respective processor belonging to the processor socket shares a common last-level cache ('LLC'). The OS is also configured to measure an LLC occupancy for the workload, reserve the LLC occupancy for the workload thereby isolating the workload from other respective workloads of the plurality of workloads sharing the processor socket, and maintain isolation by monitoring the LLC occupancy for the workload.

Dynamic last level cache allocation for cloud real-time workloads

Systems and methods for intelligently scheduling a pod in a cluster of worker nodes are described. A scheduling service may account for previous scheduling attempts by considering the time and node (scheduling data) on which a preceding attempt to schedule a node were made, and factoring this information into the scheduling decision. Upon making a determination of a node on which to attempt to schedule the pod, the scheduling data may be updated with the time and node ID of the determined node and the pod may be scheduled on the determined node. In response to determining that the pod has been evicted from the determined node, the above process may continue iteratively until the pod has been successfully scheduled.

Increase assignment effectiveness of kubernetes pods by reducing repetitive pod mis-scheduling

A system and method for aggregating host machines into a single cloud node for workloads requiring excessive resources. The method includes providing a plurality of computing devices in association with a cloud service system. The method includes defining an aggregated node of the cloud service system corresponding to at least two computing devices of the plurality of computing devices. The method includes exposing an application programming interface (API) that is indicative of combined resources of the at least two computing devices of the plurality of computing devices. The method includes receiving a query to perform a workload requiring a set of resources that exceed the resources provided by each of the computing devices of the cloud service system. The method includes forwarding, to the aggregated node, the query to cause the at least two computing devices to perform the workload using the combined resources of the least two computing device.

Aggregating host machines into a single cloud node for workloads requiring excessive resources

A network device queue manager receives a request to execute a workload on a node of a cloud computing environment, where the cloud computing environment comprises a plurality of nodes; determines that the workload is to be executed by a dedicated processor resource; identifies a set of one or more shared processor resources associated with the node, wherein each shared processor resource of the set of shared processor resources processes device interrupts; selects a processor resource from the set of one or more shared processor resources to execute the first workload on the first node; bans the selected processor resource from processing device interrupts while executing the workload; and executes the workload with the selected processor resource.

Optimized network device queue management for hybrid cloud networking workloads

Disclosed is a method of managing memory of a virtual machine (VM), including receiving, at a physical input-output memory management unit (IOMMU) of a processing device operating the VM, a request from a VM IOMMU for VM memory address translation for a VM peripheral component interconnect (PCI) device created on the VM; determining, by the physical IOMMU, a corresponding VM memory address translation result based on the request as received and a memory translation table; and transmitting, by the physical IOMMU to the VM IOMMU, the corresponding VM memory address translation result for servicing the request for VM memory address translation of the VM PCI device.

Data can be placed by an edge node in a computing environment using multiple criteria in a placement policy. For example, a processing device of an edge node can receive a write request for storing a data object. The processing device can select first and second criteria from a placement policy based on a tag for the data object. The processing device can determine a set of remote components that fulfill the first criterion. The processing device can then identify, from the set, a destination component that fulfills the second criterion. The processing device can transmit the data object to the destination component.

Policy-based data placement in an edge environment

Data can be placed by an edge node in a computing environment using multiple criteria in a placement policy. For example, a processing device of an edge node can receive a write request for storing a data object. The processing device can select first and second criteria from a placement policy based on a tag for the data object. The first criterion may correspond to a required characteristic and the second criterion may correspond to a prioritized characteristic. The processing device can determine a set of remote components that fulfill the first criterion. The processing device can then identify, from the set, a destination component that fulfills the second criterion. The processing device can transmit the data object to the destination component.

A method performed by a physical computing system includes, with a hypervisor, presenting a virtualized Remote Direct Memory Access (RDMA) device to a guest, with the hypervisor, allocating a portion of total guest memory to the guest, with the hypervisor, determining a memory threshold for the guest, the memory threshold being based on a number of virtual machines managed by the hypervisor and a size of total guest memory, with the hypervisor, receiving from the guest, a first request to register a first size sub-portion of the portion of total guest memory to the virtualized RDMA device, and with the hypervisor, in response to determining that the first size sub-portion exceeds the memory threshold, returning a notification to the guest, the notification indicating that the first request failed. The first size sub-portion is less than the portion of total guest memory.

Methods for managing virtualized remote direct memory access devices

A system and method of emulated input-output memory management units includes a management software associating a first device with a first input-output memory management unit having a first security designation, and associating a second device with a second input-output memory management unit having a second security designation different from the first security designation. A hypervisor constructs a table that describes associations between the plurality of devices and the plurality of input-output memory management units. The hypervisor provides the table to a guest virtual machine having a plurality of guest addresses including a first guest address and a second guest address. The first device accesses the first guest address through the first input-output memory management unit and the second device accesses the second guest address through the second input-output memory management unit.

Multiple input-output memory management units with fine grained device scopes for virtual machines

Various examples are directed to systems and methods for utilizing a memory-mapped I/O channel. A first application may request that a message be sent to a channel counterparty. A message driver may receive from the first application the request to send the message, where the request comprises payload data from the message. The message driver may write a work request to a send queue of a first queue pair at the first memory location. An emulated channel adapter may poll a physical address at a memory device corresponding to the first memory location; determine that the work request is present at the send queue, and send the payload data to the channel counterparty.

Growing community of inventors

Afula, Israel

Marcel Apfelbaum