John I Buswell

US Patent:

8635614, Jan 21, 2014

Filed:

May 14, 2011

Appl. No.:

13/107903

Inventors:

Amitabha Biswas - San Francisco CA, US
John I. Buswell - Athens OH, US
Jayakrishna Kidambi - San Jose CA, US
Harshad S. Padhye - Santa Clara CA, US
Vijoy Pandey - San Jose CA, US
Dorit Rond - Sunnyvale CA, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 9/46
G06F 9/455

US Classification:

718 1, 718102

Abstract:

Techniques for providing location independent dynamic port mirroring on distributed virtual switches is disclosed. A controller is provided to configure one or more virtual switches within a group of physical machines to appear as a set of distributed virtual switches. In response to the receipt of a data packet at a port of a physical machine, a determination is made whether or not the port has a monitor port located on the physical machine. If the port has a monitor port located on the same physical machine, a copy of the data packet is sent to the monitor port of the physical machine. If the port has a monitor port located on a different physical machine, a copy of the data packet along with an identification (ID) of the port and an ID of the monitor port are encapsulated, and the encapsulated information are sent to a controller.

US Patent:

8645952, Feb 4, 2014

Filed:

Aug 14, 2012

Appl. No.:

13/585445

Inventors:

Amitabha Biswas - San Francisco CA, US
John I. Buswell - Athens OH, US
Jayakrishna Kidambi - San Jose CA, US
Harshad S. Padhye - Santa Clara CA, US
Vijoy Pandey - San Jose CA, US
Dorit Rond - Sunnyvale CA, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 9/46
G06F 9/455

US Classification:

718 1, 718102

Abstract:

A method for providing location independent dynamic port mirroring on distributed virtual switches is disclosed. A controller is provided to configure one or more virtual switches within a group of physical machines to appear as a set of distributed virtual switches. In response to the receipt of a data packet at a port of a physical machine, a determination is made whether or not the port has a monitor port located on the physical machine. If the port has a monitor port located on the same physical machine, a copy of the data packet is sent to the monitor port of the physical machine. If the port has a monitor port located on a different physical machine, a copy of the data packet along with an identification (ID) of the port and an ID of the monitor port are encapsulated, and the encapsulated information are sent to a controller.

US Patent:

20120287936, Nov 15, 2012

Filed:

May 13, 2011

Appl. No.:

13/107554

Inventors:

Amitabha Biswas - San Francisco CA, US
John Buswell - Athens OH, US
Dayavanti G. Kamath - Santa Clara CA, US
Jayakrishna Kidambi - San Jose CA, US
Vijoy Pandey - Santa Clara CA, US
Dorit Rond - Sunnyvale CA, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - ARMONK NY

International Classification:

H04L 12/56

US Classification:

3703953

Abstract:

Packet processing logic of a host system's virtualization manager detects packets on the ingress or the egress path to/from a virtual port having three bitmap arrays for processing packets within a virtual local area network (VLAN). The logic checks the VLAN identifier (VID) of the packet to determine, based on an offset position within the corresponding bitmap array, whether the port supports the VLAN. Both the ingress array offset position and egress array offset positions correspond to the value of the VID, and are set within the specific bitmap array during configuration of the VLAN on the port. When the VLAN is supported by the port, the logic enables the packet to be processed by the port. Otherwise, the logic discards the packet. A strip bitmap array indicates when a packet's VID should be removed prior to forwarding the packet on the egress of a port (or destination port).

US Patent:

20120291025, Nov 15, 2012

Filed:

May 13, 2011

Appl. No.:

13/107433

Inventors:

Jayakrishna Kidambi - San Jose CA, US
Amitabha Biswas - San Francisco CA, US
John Buswell - Athens OH, US
Dorit Rond - Sunnyvale CA, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - ARMONK NY

International Classification:

G06F 9/455

US Classification:

718 1

Abstract:

A technique for operating a virtual switch includes determining network connection requirements for virtual machines controlled by a virtual machine monitor. Resources available, for processing data traffic of the virtual machines, are also determined. Finally, based on the network connection requirements and the resources available, a port of a virtual switch is selected to operate as a virtual Ethernet bridge or a virtual Ethernet port aggregator.

US Patent:

20120291029, Nov 15, 2012

Filed:

May 8, 2012

Appl. No.:

13/466790

Inventors:

JAYAKRISHNA KIDAMBI - SAN JOSE CA, US
AMITABHA BISWAS - SAN FRANCISCO CA, US
JOHN BUSWELL - ATHENS OH, US
DORIT ROND - SUNNYVALE CA, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

G06F 9/455

US Classification:

718 1

Abstract:

A technique for operating a virtual switch includes determining network connection requirements for virtual machines controlled by a virtual machine monitor. Resources available, for processing data traffic of the virtual machines, are also determined. Finally, based on the network connection requirements and the resources available, a port of a virtual switch is selected to operate as a virtual Ethernet bridge or a virtual Ethernet port aggregator.

US Patent:

20130010799, Jan 10, 2013

Filed:

Sep 15, 2012

Appl. No.:

13/621219

Inventors:

Amitabha Biwas - San Francisco CA, US
John Buswell - Athens OH, US
Dayavanti G. Kamath - Santa Clara CA, US
Jayakrishna Kidambi - San Jose CA, US
Vijoy Pandey - Santa Clara CA, US
Dorit Rond - Sunnyvale CA, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

H04L 12/56

US Classification:

37039553

Abstract:

Packet processing logic of a host system's virtualization manager detects packets on the ingress or the egress path to/from a virtual port having three bitmap arrays for processing packets within a virtual local area network (VLAN). The logic checks the VLAN identifier (VID) of the packet to determine, based on an offset position within the corresponding bitmap array, whether the port supports the VLAN. Both the ingress array offset position and egress array offset positions correspond to the value of the VID, and are set within the specific bitmap array during configuration of the VLAN on the port. When the VLAN is supported by the port, the logic enables the packet to be processed by the port. Otherwise, the logic discards the packet. A strip bitmap array indicates when a packet's VID should be removed prior to forwarding the packet on the egress of a port (or destination port).

US Patent:

20140033189, Jan 30, 2014

Filed:

Jul 30, 2012

Appl. No.:

13/562138

Inventors:

JOHN I. BUSWELL - ATHENS OH, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

G06F 9/24
G06F 9/44

US Classification:

717170, 713 2

Abstract:

A virtual appliance may be provided with firmware images that may be simulated in a run-time environment prior to loading into a network component. A kernel may be mapped to a virtual appliance image providing a virtual operating system image. Updates to the virtual appliance may provide updated versions of the virtual operating system image by mapping the updated virtual appliance image to an updated kernel. Various versions of the virtual operating system image may be stored and loaded into the virtual appliance without needing to downgrade a previous version of the operating system.

US Patent:

20140047244, Feb 13, 2014

Filed:

Aug 10, 2012

Appl. No.:

13/572402

Inventors:

JOHN I. BUSWELL - ATHENS OH, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

G06F 21/00

US Classification:

713190

Abstract:

Protection of interpreted programming language code filesystem files from access and alteration may be provided by encrypting a file to be protected in a boot sequence. Run-time examination of a virtual appliance may be deterred by hiding the boot sequence in a restricted virtual appliance platform. No shell or filesystem access may be provided. Thus, permissions on a read-only filesystem (for example) may be kept from being altered. The permissions may be set along with filesystem access control lists to prevent unauthorized examination of the source files.