Amazon Technologies, Inc.

Oracle America, Inc.

Ab Initio Technology LLC

Sun Microsystems, Inc.

Wayne Mesard

John Jamail

Justin Schoeff

Kevin Sellers

Craig W Stanfill

Paul Caprioli

Stephen J Schmidt

Matthew Darcy Atterbury

H Mark Bromley

Ian Marshal Wharton

Arkadi Popov

Joseph Skeffington Wholey, Iii

Tycho G Nightingale

Evgenia Mikhailovna Nitishinskaya

Joseph Skeffington Wholey

Iii Joseph Skeffington Wholey

Iii Josef Skeffington Wholey

Techniques for a service provider network to authenticate client devices and determine authorizations for users by sending requests for information in remotely managed user directories. The service provider network may provide computing infrastructure to service requests from users who have accounts with a subscriber of the service provider network. The subscriber may maintain user information for the various user accounts usable to authenticate client devices and/or determine authorizations of users. The service provider network may receive a request from a client device to execute a workflow for a service of the subscriber that is supported by resources of the service provider network. The service provider network may send a request to a subscriber device for user account information for authentication and determining authorization. For instance, the service provider network may request a public key to authenticate the client device, and/or authorization information indicating permissions granted for a user account.

Authentication and authorization with remotely managed user directories

Computer systems and methods are disclosed to implement a virtual server using a multitenant serverless execution service (MTSES) and a request labeling endpoint outside the MTSES to identify the virtual server to worker nodes in the service. The MTSES is configured to host multiple virtual servers, and forward requests for the different virtual servers to dynamically selected worker nodes. However, in embodiments, the MTSES is not configured to determine the virtual server targeted by the requests. Accordingly, to allow the MTSES to support virtual servers that require knowledge of their identity, for example to authorize incoming requests, a request labeling endpoint is provided outside the MTSES to forward requests to the MTSES and automatically label individual requests with an endpoint identifier associated with their target virtual servers. In this manner, nodes in the MTSES can dynamically determine the virtual server that they are to assume for each request.

Providing virtual server identity to nodes in a multitenant serverless execution service

A file system interface receives, from one or more clients, file system operations over a network. In response to receiving a file system operation for a file, a file-object manager calls an object storage interface to store, via an application-level network protocol, a log object indicating the file system operation into a file system log in the object storage system and creates or updates a file object in a file object construction buffer in volatile system memory. To evict the file object, the file-object manager calls the object storage interface to store the file object into a file object store in the object storage system. The file-object manager does not have access to local persistent storage. After power failure, the file-object manager calls the object storage interface to retrieve log objects from the file system log and replays file system operations to restore file objects in the volatile system memory.

Using log objects in object storage for durability of file objects in volatile memory

Processing data includes: receiving units of work that each include one or more work elements, and processing a first unit of work using a first compiled dataflow graph () loaded into a data processing system () in response to receiving the first unit of work. The processing includes: analysis to determine a characteristic of the first unit of work; identifying one or more compiled dataflow graphs from graphs stored in a data storage system () that include at least some that were compiled for processing a unit of work having the determined characteristic; loading one of the identified compiled dataflow graphs into the data processing system () as the first compiled dataflow graph (); and generating one or more output work elements from at least one work element in the first unit of work.

Dynamically loading graph-based computations

A system that reduces overly optimistic program execution. During operation, the system encounters a bounded-execution block while executing a program, wherein the bounded execution block includes a primary path and a secondary path. Next, the system executes the bounded execution block. After executing the bounded execution block, the system determines whether executing instructions on the primary path is preferable to executing instructions on the secondary path based on information gathered while executing the bounded-execution block. If not, the system dynamically modifies the instructions of the bounded-execution block so that during subsequent passes through the bounded-execution block, the instructions on the secondary path are executed instead of the instructions on the primary path.

Method and apparatus for enabling optimistic program execution

One embodiment of the present invention provides a system which facilitates selective prefetching based on resource availability. During operation, the system executes instructions in a processor. While executing the instructions, the system monitors the availability of one or more system resources and dynamically adjusts an availability indicator for each system resource based on the current availability of the system resource. Upon encountering a prefetch instruction which involves the system resource, the system checks the availability indicator. If the availability indicator indicates that the system resource is not sufficiently available, the system terminates the execution of the prefetch instruction, whereby terminating execution prevents prefetch instructions from overwhelming the system resource.

Method and apparatus for selectively prefetching based on resource availability

A technique for improving the performance of a system that supports simultaneous multi-threading (SMT). When a first thread encounters a halt sequence, the system starts a transactional memory operation by generating a checkpoint and entering a transactional-execution mode. Next, the system loads from a mailbox address associated with the halt sequence. The system then stalls execution of the first thread, so that the first thread does not execute instructions within the halt sequence, thereby freeing up processor resources for other threads. To terminate the halt sequence, a second thread stores to the mailbox address, which causes a transactional-memory mechanism within the processor to detect an interference with the previous load from the mailbox address by the first thread and which causes the first thread to exit from the halt sequence. The system then continues executing instructions following the halt sequence.

Using a transactional execution mechanism to free up processor resources used by a busy-waiting thread

Growing community of inventors

Belmont, MA, United States of America

Wayne Mesard