会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 3. 发明申请
    • COOPERATED APPROACH TO NETWORK PACKET FILTERING
    • 网络包过滤的合作方法
    • US20140331221A1
    • 2014-11-06
    • US13882106
    • 2010-10-28
    • Yaozu DongKun Tian
    • Yaozu DongKun Tian
    • H04L12/931G06F9/455
    • H04L49/00G06F9/45533H04L45/00H04L63/0245H04L63/0263
    • An apparatus, system, method, and machine-readable medium are disclosed. In one embodiment the apparatus is a network interface controller that includes one virtual function owned by a virtual machine present in the computer system. The controller includes a simple filtering agent that is associated with the first virtual function. The agent enforces simple filter rules for received network packets. The simple filter rules are capable of blocking the network packets from reaching the virtual machine. The apparatus also includes another virtual function that is owned by a virtual machine monitor present in the computer system. The controller also includes a side bounce filtering agent to forward the first network packet to the second virtual function if the first packet is blocked by the at least one of the one or more simple filter rules.
    • 公开了一种装置,系统,方法和机器可读介质。 在一个实施例中,该装置是包括由计算机系统中存在的虚拟机拥有的一个虚拟功能的网络接口控制器。 控制器包括与第一虚拟功能相关联的简单过滤代理。 代理对接收到的网络数据包执行简单的过滤规则。 简单的过滤规则能够阻止网络数据包到达虚拟机。 该装置还包括由计算机系统中存在的虚拟机监视器拥有的另一虚拟功能。 如果第一分组被一个或多个简单过滤器规则中的至少一个阻挡,则控制器还包括侧向反弹过滤代理,以将第一网络分组转发到第二虚拟功能。
    • 5. 发明授权
    • Cooperated approach to network packet filtering
    • 网络包过滤的合作方法
    • US09276875B2
    • 2016-03-01
    • US13882106
    • 2010-10-28
    • Yaozu DongKun Tian
    • Yaozu DongKun Tian
    • G06F13/00H04L12/931H04L12/701G06F9/455H04L29/06
    • H04L49/00G06F9/45533H04L45/00H04L63/0245H04L63/0263
    • An apparatus, system, method, and machine-readable medium are disclosed. In one embodiment the apparatus is a network interface controller that includes one virtual function owned by a virtual machine present in the computer system. The controller includes a simple filtering agent that is associated with the first virtual function. The agent enforces simple filter rules for received network packets. The simple filter rules are capable of blocking the network packets from reaching the virtual machine. The apparatus also includes another virtual function that is owned by a virtual machine monitor present in the computer system. The controller also includes a side bounce filtering agent to forward the first network packet to the second virtual function if the first packet is blocked by the at least one of the one or more simple filter rules.
    • 公开了一种装置,系统,方法和机器可读介质。 在一个实施例中,该装置是包括由计算机系统中存在的虚拟机拥有的一个虚拟功能的网络接口控制器。 控制器包括与第一虚拟功能相关联的简单过滤代理。 代理对接收到的网络数据包执行简单的过滤规则。 简单的过滤规则能够阻止网络数据包到达虚拟机。 该装置还包括由计算机系统中存在的虚拟机监视器拥有的另一虚拟功能。 如果第一分组被一个或多个简单过滤器规则中的至少一个阻挡,则控制器还包括侧向反弹过滤代理,以将第一网络分组转发到第二虚拟功能。
    • 9. 发明授权
    • Enabling efficient nested virtualization
    • US10467033B2
    • 2019-11-05
    • US13997888
    • 2011-12-22
    • Kun TianYao Zu Dong
    • Kun TianYao Zu Dong
    • G06F9/455
    • Embodiments of the invention enable dynamic level boosting of operations across virtualization layers to enable efficient nested virtualization. Embodiments of the invention execute a first virtual machine monitor (VMM) to virtualize system hardware. A nested virtualization environment is created by executing a plurality of upper level VMMs via virtual machines (VMs). These upper level VMMs are used to execute an upper level virtualization layer including an operating system (OS).During operation of the above described nested virtualization environment, a privileged instruction issued from an OS is trapped and emulated via the respective upper level VMM (i.e., the VMM that creates the VM for that OS). Embodiments of the invention enable the emulation of the privileged instruction via a lower level VMM. In some embodiments, the emulated instruction is executed via the first VMM with little to no involvement of any intermediate virtualization layers residing between the first and upper level VMMs.