Microsoft Technology Licensing, LLC

Nicholas David Wood

Gerardo Diaz-Cuellar

Dinesh Kumar Govindasamy

Omar Cardona

Sermet Iskin

Vikrant Arora

Osman Nuri Ertugay

Scott B Graham

Keith Edgar Horton

Shankar Seal

Sandeep Bansal

Poornananda Gaddehosur Ramachandra

Anirban Paul

Madhan Raj Mookkandy

George Kudrayvtsev

Jorge P Coronel Mendoza

Embodiments relate to hypervisors that provide hardware isolated virtualization environments (HIVEs) such as containers and virtual machines (VMs). A first HIVE includes a first virtual network interface card (NIC) and a second HIVE includes a second virtual NIC. Both virtual NICs are backed by the same physical NIC. The physical NIC has an Internet Protocol (IP) address. The virtual NICs are assigned the same IP address as the physical NIC. A networking stack of the hypervisor receives inbound packets addressed to the IP address. The networking stack steers the inbound packets to the virtual NICs according to tuples of the inbound packets. Packets emitted by the virtual NICs comprise the IP address, pass through the network stack, and are transmitted by the physical NIC with headers comprising the IP address.

Hypervisor flow steering for address sharing

Methods and devices for load balancing of connections may include receiving, at a management component on a container host on a computer device, at least one data packet based on a destination IP address of the data packet that corresponds to a plurality of container hosts. The methods and devices may include selecting a destination container from at least one container host on the computer device and other computer devices in communication with the computer device over a virtual network to balance a data load and translating the source IP address of the at least one data packet to a local IP address of the container host. The methods and devices may include changing the destination IP address of the at least one data packet to a virtual IP address of the selected destination container so that the at least one data packet is transformed to a proxy data packet.

Non-DSR distributed load balancer with virtualized VIPS and source proxy on load balanced connection

Per process networking capability techniques are described. In one or more implementations, a determination is made as to whether access to a network capability is permitted for a process that is executed on the computing device based on a token that is associated with the process. The token has one or more security identifiers that reference one or more network capabilities described in a manifest. The access to the network capability is managed based on the determination.

Per process networking capabilities

Growing community of inventors

Woodinville, WA, United States of America

Nicholas David Wood