-
公开(公告)号:US10719369B1
公开(公告)日:2020-07-21
申请号:US15611708
申请日:2017-06-01
Applicant: Amazon Technologies, Inc.
Inventor: Anirudh Balachandra Aithal , Ryan John Marchand , Kiran Kumar Meduri
Abstract: Systems for provisioning virtual network interfaces (VNIs) for tasks running on a virtual machine instance in a distributed computing environment are provided. The systems receive a request to launch a task corresponding to a plurality of containers in an instance in association with an instruction to provide a VNI for the task with a set of network security rules. The system may select an instance with sufficient resources to launch the task and enable communication using the VNI. The system may inhibit processes running on the instance other than containers associated with the task from communicating via the VNI.
-
公开(公告)号:US10298577B1
公开(公告)日:2019-05-21
申请号:US15087913
申请日:2016-03-31
Applicant: Amazon Technologies, Inc.
Inventor: Anirudh Balachandra Aithal , Kiran Kumar Meduri , Samuel Benjamin Karp , Juan Rhenals
Abstract: An application is comprised of a plurality of processes. A process is able to accesses a remote service using a service access credential which is adapted to the particular requirements of the process. By providing a process with customized credential, the process is constrained from performing unnecessary operations, and the overall security of the application is improved. When processes are deployed to a host computer, an agent on a host computer collects credential information and other metadata associated with the processes running on the host computer. The agent makes the metadata available to a credential provider running on the host, and the credential provider exposes an interface that is accessible to the processes. The processes include a credential proxy which communicates with the credential provider. The credential proxies relay credential requests to the credential provider, and return the provided credentials from the credential provider to the processes.
-
公开(公告)号:US09996380B2
公开(公告)日:2018-06-12
申请号:US15007113
申请日:2016-01-26
Applicant: Amazon Technologies, Inc.
Inventor: Deepak Singh , Anthony Joseph Suarez , William Andrew Thurston , Anirudh Balachandra Aithal , Daniel Robert Gerdesmeier , Euan Skyler Kemp , Kiran Kumar Meduri , Muhammad Umer Azad
CPC classification number: G06F9/45558 , G06F9/45533 , G06F9/5005 , G06F9/5055 , G06F9/5077 , G06F2009/4557 , G06F2009/45595
Abstract: A task definition is received. The task definition indicates at least a location from which one or more software image can be obtained and information usable to determine an amount of resources to allocate to one or more software containers for the one or more software image. A set of virtual machine instances in which to launch the one or more software containers is determined, the one or more software image is obtained from the location included in the task definition and is launched as the one or more of software containers within the set of virtual machine instances.
-
公开(公告)号:US10782990B1
公开(公告)日:2020-09-22
申请号:US14951334
申请日:2015-11-24
Applicant: Amazon Technologies, Inc.
Inventor: Anthony Joseph Suarez , Jia Bi Zhang , Christopher Brian Barclay , Anirudh Balachandra Aithal , Cornelle Christiaan Pretorius Janse Van Rensburg
Abstract: At least one instance of an application is launched in a set of software containers that are distributed among a set of virtual machine instances. A set of measurements corresponding to resource utilization by a software container of the set of software containers is obtained and a timestamp is generated for the set of measurements. The set of measurements is aggregated, with other sets of measurements corresponding to the set of software containers for the application, into a set of aggregated measurements grouped in a time window group, based at least in part on the timestamp, and, as a result of fulfillment of a condition, the time window group is outputted.
-
公开(公告)号:US10423398B1
公开(公告)日:2019-09-24
申请号:US15293669
申请日:2016-10-14
Applicant: Amazon Technologies, Inc.
Inventor: Michael David Marr , Anirudh Balachandra Aithal , Matthew David Klein
Abstract: Systems and methods are described for managing computing resources. In one embodiment, groupings of computer resources having common firmware settings are maintained based on an abstraction firmware framework representing associations between vendor-specific firmware settings and abstracted firmware settings that provide a degree of independence from specific vendor-specific firmware settings. In response to a request for a computer resource with a specified abstracted firmware configuration, it is determined which of the groupings can support the specified abstracted firmware configuration based on at least one criterion for managing the computer resources in accordance with the abstraction firmware framework.
-
公开(公告)号:US20190108049A1
公开(公告)日:2019-04-11
申请号:US16004050
申请日:2018-06-08
Applicant: Amazon Technologies, Inc.
Inventor: Deepak Singh , Anthony Joseph Suarez , William Andrew Thurston , Anirudh Balachandra Aithal , Daniel Robert Gerdesmeier , Euan Skyler Kemp , Kiran Kumar Meduri , Muhammad Umer Azad
Abstract: A task definition is received. The task definition indicates at least a location from which one or more software image can be obtained and information usable to determine an amount of resources to allocate to one or more software containers for the one or more software image. A set of virtual machine instances in which to launch the one or more software containers is determined, the one or more software image is obtained from the location included in the task definition and is launched as the one or more of software containers within the set of virtual machine instances.
-
公开(公告)号:US09471784B1
公开(公告)日:2016-10-18
申请号:US13706839
申请日:2012-12-06
Applicant: Amazon Technologies, Inc.
Inventor: Michael David Marr , Anirudh Balachandra Aithal , Matthew David Klein
IPC: G06F21/57
CPC classification number: G06F21/572
Abstract: Systems and methods are described for managing computing resources. In one embodiment, data representative of an abstracted firmware framework is maintained. The data may comprise computing firmware settings and determined based on standardized associations between vendor-specific firmware settings and abstracted firmware settings that are independent of the vendor-specific firmware settings. In response to receiving a request for a computing firmware setting, the requested computing firmware setting is translated to one or more vendor-specific firmware settings based on the data. A computing resource capable of implementing the one or more vendor-specific firmware settings is identified.
Abstract translation: 描述了管理计算资源的系统和方法。 在一个实施例中,维护表示抽象固件框架的数据。 数据可以包括计算固件设置并且基于独特于供应商特定固件设置的供应商特定固件设置和抽象固件设置之间的标准化关联来确定。 响应于接收到计算固件设置的请求,所请求的计算固件设置被转换为基于该数据的一个或多个供应商特定的固件设置。 识别能够实现一个或多个供应商特定固件设置的计算资源。
-
公开(公告)号:US20160162320A1
公开(公告)日:2016-06-09
申请号:US15007113
申请日:2016-01-26
Applicant: Amazon Technologies, Inc.
Inventor: Deepak Singh , Anthony Joseph Suarez , William Andrew Thurston , Anirudh Balachandra Aithal , Daniel Robert Gerdesmeier , Euan Skyler Kemp , Kiran Kumar Meduri , Muhammad Umer Azad
CPC classification number: G06F9/45558 , G06F9/45533 , G06F9/5005 , G06F9/5055 , G06F9/5077 , G06F2009/4557 , G06F2009/45595
Abstract: A task definition is received. The task definition indicates at least a location from which one or more software image can be obtained and information usable to determine an amount of resources to allocate to one or more software containers for the one or more software image. A set of virtual machine instances in which to launch the one or more software containers is determined, the one or more software image is obtained from the location included in the task definition and is launched as the one or more of software containers within the set of virtual machine instances.
Abstract translation: 接收到任务定义。 任务定义至少指示可以从其获得一个或多个软件映像的位置,以及可用于确定要分配给一个或多个软件映像的一个或多个软件容器的资源量的信息。 确定在其中启动一个或多个软件容器的一组虚拟机实例,从包括在任务定义中的位置获得一个或多个软件映像,并作为该组内的一个或多个软件容器发起 虚拟机实例。
-
公开(公告)号:US11669365B1
公开(公告)日:2023-06-06
申请号:US16551555
申请日:2019-08-26
Applicant: Amazon Technologies, Inc.
Inventor: Anirudh Balachandra Aithal , Onur Filiz
CPC classification number: G06F9/4881 , G06F9/5027 , G06F11/1448 , G06F2201/84
Abstract: A task pool may be created and maintained, in association with a container management service, which stores a snapshot of a one or more tasks, the performance of which is suspended or paused. Tasks may be defined as applications executable in one or more software containers instantiated on a virtual machine or compute instance, where the snapshot of a task may include an image of the one or more containers associated with the task container and state information of the one or more containers. A task may be initially provisioned in a paused state or paused after executing at least a portion of the task. Paused tasks in the task pool may be readily restarted or resumed by loading the snapshot onto a compute instance. The task pool may manage provisioning new tasks and pause tasks based on changes in demand.
-
公开(公告)号:US11573814B1
公开(公告)日:2023-02-07
申请号:US16217454
申请日:2018-12-12
Applicant: Amazon Technologies, Inc.
Inventor: Anirudh Balachandra Aithal , Noah Meyerhans
IPC: G06F9/455 , G06F9/50 , H04L41/5054 , G06F16/11 , H04L67/60
Abstract: Techniques are described for sharing prepopulated container image caches among container execution environments to improve the performance of container launches. The container images used to prepopulate such a cache at a computing device supporting one or more container execution environments can include various container images that are used as the basis for a wide range of user-created containers such as, for example, container images representing popular operating system distributions, database servers, web-application frameworks, and so forth. Existing systems typically obtain these container images as needed at runtime when launching containers (for example, from a container registry or other external source), often incurring significant overhead in the container launch process. The use of a prepopulated container image cache can significantly improve the performance of container launches by making such commonly used container images available to container execution environments running at a computing device ahead of time.
-
-
-
-
-
-
-
-
-