International Business Machines Corporation

Monica Jean Lemay

Yogesh Patgar

Shashidhar Soppin

Girish S Shrigiri

Randall Clay Itskin

Vijayalakshmi Krishnamurthy

Purushothama Padmanabha

Purushotama Padmanabha

Christina Ann Lara

Michael E Browne

Andrew P Wack

Chethan Jain

Jacob Morris Tick

Kshamatha Deshpande

Todd Tosseth

Sougata Sarkar

Derwin D Gavin

A computer-implemented method according to one embodiment includes identifying a node within a clustered system, determining a role of the node, based on one or more characteristics of the node, and setting one or more firewall parameters for the node within the clustered system, based on the role of the node.

Adjusting firewall parameters based on node characteristics

Methods, systems, and computer program products for performing cache load balancing between multiple virtual input/output servers (VIOSs) are provided. Aspects include monitoring a utilization level for a cache in each of at least two VIOSs and determining that an imbalance exists between the utilization levels of the at least two VIOSs. Aspects also include transferring at least one logical storage unit between the at least two VIOSs, wherein the transferring reduces the imbalance.

Cache load balancing in a virtual input/output server

An approach is provided in which an information handling system receives a request from a subject to perform an operation between a first object and a second object. The first object belongs to a first set of domains and the second object belongs to a second set of domains. The information handling system determines whether a set of common domains exist between first set of domains and the second set of domains that meet an inter-domain restriction that is imposed on the subject, which requires that the first set of domains and the second set of domains have at least one domain in common. The information handling system, in turn, performs the operation based on the determination.

Managing inter-object operations in a domain role-based access control (RBAC) system

An aspect includes a method for sharing memory in a computer system that includes receiving a request, from a logical partition (LPAR) executing on a processor, for a page in a shared physical memory to be moved into a logical page of a logical memory of the LPAR. It is determined, by the hypervisor, that the page is physically located in a hypervisor paging device. It is determined whether the request is from a paging process executing at the LPAR to migrate the logical page to a local paging device to make room for an other logical page in the logical memory. Based on determining that the request is from the paging process, the logical page is marked to indicate that the physical page is on the hypervisor paging device and a new logical page is added to the logical memory for the other logical page.

Efficiency in active memory sharing

A method, system, and program product for creating network isolation between virtual machines is provided, including receiving, by a security virtual machine (SVM), an outgoing network packet from a virtual machine (VM). The source internet protocol (IP) address and a source media access control (MAC) address is extracted from the outgoing network packet. A zone identifier table is searched for a zone id, whereby the zone identifier table includes the source IP address and the source MAC address. The outgoing network packet is sent to a physical Ethernet adapter connected to an external network switch whereby the external network switch is connected to an external network, based on the zone id not being found in the zone identifier table. The outgoing network packet is sent to a physical Ethernet adapter that is connected to an internal switch, based on the zone id being found in the zone identifier table.

Creating network isolation between virtual machines

An apparatus for relocating related resource partitions includes a detection module that detects a relocation event to relocate a first resource partition operating in a first division from the first division to a second division. The first division includes a second resource partition. The first resource partition and the second resource partition are each distinct operating environments. A determination module determines that the second resource partition is sufficiently related to the first resource partition. A relocation module relocates the second resource partition to the second division with the first resource partition in response to determining that the second resource partition is sufficiently related to the first resource partition.

Relocating related resource partitions

The method for relocating related resource partitions includes detecting a relocation event to relocate a first resource partition operating in a first division from the first division to a second division. The first division includes a second resource partition. The first resource partition and the second resource partition are each distinct operating environments. The method also includes determining that the second resource partition is sufficiently related to the first resource partition. The method includes relocating the second resource partition to the second division with the first resource partition in response to determining that the second resource partition is sufficiently related to the first resource partition.

A method of relocating a workload partition (WPAR) from a departure logical partition (LPAR) to an arrival LPAR determines an amount of a resource allocated to the relocating WPAR on the departure LPAR and allocates to the relocating WPAR on the arrival LPAR an amount of the resource substantially equal to the amount of the resource allocated to the relocating WPAR on the departure LPAR.

Resource allocation during workload partition relocation

Provided are techniques for receiving, from a user, a first Role-Based Access Control (RBAC) request for access to a resource; correlating the first RBAC request to a first originating host device; mapping an ID corresponding to the user, the first originating host device and the resource to a first role; generating, based upon the first role, a first set of permissions corresponding to the resource; and enabling to the user to access the resource from the first originating host device in conformity with the first set of permissions. In addition to ID, host and resource, a communication medium may be factored into the mapping.

Enabling host based RBAC roles for LDAP users

A a system for relocating a workload partition (WPAR) from a departure logical partition (LPAR) to an arrival LPAR determines an amount of a resource allocated to the relocating WPAR on the departure LPAR and allocates to the relocating WPAR on the arrival LPAR an amount of the resource substantially equal to the amount of the resource allocated to the relocating WPAR on the departure LPAR.

Disclosed are a method, information processing system and computer readable medium for performing a system test on a program. The method comprises creating a test plan associated with a system test. The system test is for testing a program within an environment. At least one test trigger to be monitored for during the system test is defined within the test plan. Execution of the system test on a system under test for the at least one test trigger is monitored. An occurrence of the at least one test trigger is determined. The test plan is modified to take into account the occurrence of the at least one test trigger in response to determining the occurrence. Execution of the system test is continued based on the modified test plan.

Growing community of inventors

Austin, TX, United States of America

Monica Jean Lemay