公开(公告)号：US20200162332A1

公开(公告)日：2020-05-21

申请号：US16196736

申请日：2018-11-20

Applicant: Amazon Technologies, Inc.

Inventor： Anthony Nicholas Liguori ,  Matthew Shawn Wilson

IPC: H04L12/24 ,  G06F9/455 ,  G06F9/4401

Abstract: At a network manager of an extension resource group of a provider network, a message comprising a command to launch a compute instance is received at an address which is part of a first network configured at a premise external to the provider network. The extension resource group includes a first host at the external premise. Within a second network configured at the external premise, the first host is assigned an address within a second address range. Addresses within the second range are also assigned to hosts within the provider network. The command is transmitted to the first host, and a compute instance is instantiated.

公开(公告)号：US10360061B2

公开(公告)日：2019-07-23

申请号：US15880390

申请日：2018-01-25

Applicant: Amazon Technologies, Inc.

Inventor： Anthony Nicholas Liguori ,  Matthew Shawn Wilson ,  Ian Paul Nowland

IPC: G06F8/65 ,  G06F9/455

Abstract: Generally described, aspects of the present disclosure relate to loading an updated virtual machine monitor on the physical computing device during a boot process. The updated virtual machine monitor may be loaded from an update manager external to the virtual machine monitor, such as the offload device or a server connected with the physical computing device over a network. In certain embodiments, the updated virtual machine monitor may be loaded in a tiered process by first loading a startup virtual machine monitor, which automatically updates by loading the updated virtual machine monitor. The startup virtual machine monitor may be a virtual machine monitor with less functionality than the updated machine manager, such as where the startup virtual machine monitor may be a “lite” or simple virtual machine monitor while the updated virtual machine monitor may be a fully functional virtual machine monitor of the most recent update or version.

公开(公告)号：US20180139110A1

公开(公告)日：2018-05-17

申请号：US15354765

申请日：2016-11-17

Applicant: Amazon Technologies, Inc.

Inventor： Robert Michael Johnson ,  Nafea Bshara ,  Matthew Shawn Wilson

IPC: H04L12/24

CPC classification number: H04L41/5054 ,  G06F9/50 ,  G06F15/7871 ,  H04L41/5096

Abstract: Methods and apparatus are disclosed for programming reconfigurable logic devices such as FPGAs in a networked server environment. In one example, a system hosting a network service providing field programmable gate array (FPGA) services includes a network service provider configured to receive a request to implement application logic in a plurality of FPGAs, allocate a computing instance comprising the FPGAs in responses to receiving the request, produce configuration information for programming the FPGAs, and send the configuration information to an allocated computing instance. The system further includes a computing host that is allocated by the network service provider as a computing instance which includes memory, processors configured to execute computer-executable instructions stored in the memory, and the programmed FPGAs.

公开(公告)号：US20180136961A1

公开(公告)日：2018-05-17

申请号：US15699693

申请日：2017-09-08

Applicant: Amazon Technologies, Inc.

Inventor： Anthony Nicholas Liguori ,  Matthew Shawn Wilson ,  Ian Paul Nowland

IPC: G06F9/455 ,  G06F8/65 ,  G06F8/658

CPC classification number: G06F9/45558 ,  G06F8/65 ,  G06F8/656 ,  G06F8/658 ,  G06F2009/4557 ,  G06F2009/45575 ,  G06F2009/45583

Abstract: Generally described, aspects of the present disclosure relate to a live update process of the virtual machine monitor during the operation of the virtual machine instances. An update to a virtual machine monitor can be a difficult process to execute because of the operation of the virtual machine instances. Generally, in order to update the virtual machine monitor, the physical computing device needs to be rebooted, which interrupts operation of the virtual machine instances. The live update process provides for a method of updating the virtual machine monitor without rebooting the physical computing device.

公开(公告)号：US20170308696A1

公开(公告)日：2017-10-26

申请号：US15643408

申请日：2017-07-06

Applicant: Amazon Technologies, Inc.

Inventor： Rahul Gautam Patel ,  Nachiketh Rao Potlapally ,  William John Earl ,  Matthew Shawn Wilson

IPC: G06F21/55 ,  G06F9/50 ,  G06F9/46 ,  G06F21/53 ,  G06F9/455

CPC classification number: G06F21/55 ,  G06F9/45533 ,  G06F9/468 ,  G06F9/5077 ,  G06F21/53

Abstract: Techniques are described for allocating resources to a task from a shared hardware structure. A plurality of tasks may execute on a processor, wherein the processor may include one or more processing cores and each task may include a plurality of computer executable instructions. In accordance with one technique for allocating resources to a task from a shared hardware structure amongst multiple tasks, aspects of the disclosure describe assigning a first identifier to a first task from the plurality of tasks, associating a portion of the shared hardware resource with the first identifier, and restricting access and/or observability for computer executable instructions executed from any other task than the first task to the portion of the hardware resource associated with the first identifier.

公开(公告)号：US09760394B2

公开(公告)日：2017-09-12

申请号：US15075508

申请日：2016-03-21

Applicant: Amazon Technologies, Inc.

Inventor： Anthony Nicholas Liguori ,  Matthew Shawn Wilson ,  Ian Paul Nowland

IPC: G06F9/455 ,  G06F9/445

CPC classification number: G06F9/45558 ,  G06F8/65 ,  G06F8/656 ,  G06F8/658 ,  G06F2009/4557 ,  G06F2009/45575 ,  G06F2009/45583

Abstract: Generally described, aspects of the present disclosure relate to a live update process of the virtual machine monitor during the operation of the virtual machine instances. An update to a virtual machine monitor can be a difficult process to execute because of the operation of the virtual machine instances. Generally, in order to update the virtual machine monitor, the physical computing device needs to be rebooted, which interrupts operation of the virtual machine instances. The live update process provides for a method of updating the virtual machine monitor without rebooting the physical computing device.

公开(公告)号：US20170090971A1

公开(公告)日：2017-03-30

申请号：US15242097

申请日：2016-08-19

Applicant: Amazon Technologies, Inc.

Inventor： Anthony Nicholas Liguori ,  Matthew Shawn Wilson ,  Ian Paul Nowland

IPC: G06F9/455 ,  G06F9/50

Abstract: Generally described, the present application relates to systems and methods for the managing virtual machines instances using a physical computing device and an offload device. The offload device can be a separate computing device that includes computing resources (e.g., processor and memory) separate from the computing resources of the physical computing device. The offload device can be connected to the physical computing device via a interconnect interface. The interconnect interface can be a high speed, high throughput, low latency interface such as a Peripheral Component Interconnect Express (PCIe) interface. The offload device can be used to offload virtualization and processing of virtual components from the physical computing device, thereby increasing the computing resources available to the virtual machine instances.

公开(公告)号：US20160170781A1

公开(公告)日：2016-06-16

申请号：US14567189

申请日：2014-12-11

Applicant: Amazon Technologies, Inc.

Inventor： Anthony Nicholas Liguori ,  Matthew Shawn Wilson ,  Ian Paul Nowland

IPC: G06F9/455 ,  G06F9/44

CPC classification number: G06F9/45558 ,  G06F8/65 ,  G06F2009/45575

Abstract: Generally described, aspects of the present disclosure relate to loading an updated virtual machine monitor on the physical computing device during a boot process. The updated virtual machine monitor may be loaded from an update manager external to the virtual machine monitor, such as the offload device or a server connected with the physical computing device over a network. In certain embodiments, the updated virtual machine monitor may be loaded in a tiered process by first loading a startup virtual machine monitor, which automatically updates by loading the updated virtual machine monitor. The startup virtual machine monitor may be a virtual machine monitor with less functionality than the updated machine manager, such as where the startup virtual machine monitor may be a “lite” or simple virtual machine monitor while the updated virtual machine monitor may be a fully functional virtual machine monitor of the most recent update or version.

Abstract translation: 通常描述，本公开的方面涉及在引导过程期间在物理计算设备上加载更新的虚拟机监视器。 更新的虚拟机监视器可以从虚拟机监视器外部的更新管理器加载，例如卸载设备或通过网络与物理计算设备连接的服务器。 在某些实施例中，可以通过首先加载启动虚拟机监视器来加载更新的虚拟机监视器，该启动虚拟机监视器通过加载更新的虚拟机监视器而自动更新。 启动虚拟机监视器可以是具有比更新的机器管理器更少功能的虚拟机监视器，例如启动虚拟机监视器可以是“精简”或简单的虚拟机监视器，而更新的虚拟机监视器可以是完全功能的 最近更新或版本的虚拟机监视器。

公开(公告)号：US09292332B1

公开(公告)日：2016-03-22

申请号：US14567729

申请日：2014-12-11

Applicant: Amazon Technologies, Inc.

Inventor： Anthony Nicholas Liguori ,  Matthew Shawn Wilson ,  Ian Paul Nowland

IPC: G06F9/455 ,  G06F9/445

CPC classification number: G06F9/45558 ,  G06F8/65 ,  G06F8/656 ,  G06F8/658 ,  G06F2009/4557 ,  G06F2009/45575 ,  G06F2009/45583

Abstract: Generally described, aspects of the present disclosure relate to a live update process of the virtual machine monitor during the operation of the virtual machine instances. An update to a virtual machine monitor can be a difficult process to execute because of the operation of the virtual machine instances. Generally, in order to update the virtual machine monitor, the physical computing device needs to be rebooted, which interrupts operation of the virtual machine instances. The live update process provides for a method of updating the virtual machine monitor without rebooting the physical computing device.

Abstract translation: 通常描述，本公开的方面涉及在虚拟机实例的操作期间虚拟机监视器的实时更新过程。 由于虚拟机实例的操作，对虚拟机监视器的更新可能是难以执行的过程。 通常，为了更新虚拟机监视器，需要重新启动物理计算设备，这会中断虚拟机实例的操作。 实时更新过程提供了一种在不重新启动物理计算设备的情况下更新虚拟机监视器的方法。

公开(公告)号：US20150007175A1

公开(公告)日：2015-01-01

申请号：US13932828

申请日：2013-07-01

Applicant: Amazon Technologies, Inc.

Inventor： Nachiketh Rao Potlapally ,  Eric Jason Brandwine ,  Matthew Shawn Wilson

IPC: G06F9/455

CPC classification number: G06F9/455 ,  G06F9/45558 ,  G06F9/5077 ,  G06F12/14 ,  G06F12/145 ,  G06F21/53 ,  G06F21/57 ,  G06F2009/45562 ,  G06F2009/45587 ,  G06F2212/1052 ,  H04L9/0643 ,  H04L9/08 ,  H04L9/32 ,  H04L9/321 ,  H04L63/04

Abstract: Approaches to enable the configuration of computing resources for executing virtual machines on behalf of users to be cryptographically attested to or verified. When a user requests a virtual machine to be provisioned, an operator of the virtualized computing environment can initiate a two phase launch of the virtual machine. In the first phase, the operator provisions the virtual machine on a host computing device and obtains cryptographic measurements of the software and/or hardware resources on the host computing device. The operator may then provide those cryptographic measurements to the user that requested the virtual machine. If the user approves the cryptographic measurements, the operator may proceed with the second phase and actually launch the virtual machine on the host. In some cases, operator may compare the cryptographic measurements to a list of approved measurements to determine whether the host computing device is acceptable for hosting the virtual machine.

Abstract translation: 允许代表用户配置用于执行虚拟机的计算资源的方法被加密地验证或验证。 当用户请求虚拟机被配置时，虚拟化计算环境的操作者可以启动虚拟机的两阶段启动。 在第一阶段中，操作者将主机计算设备上的虚拟机提供给主机计算设备上的软件和/或硬件资源的加密测量。 然后，操作者可以向请求虚拟机的用户提供那些加密测量。 如果用户批准加密测量，则操作员可以继续进行第二阶段，并且在主机上实际启动虚拟机。 在某些情况下，操作员可以将加密测量值与已批准测量列表进行比较，以确定主机计算设备是否可接受托管虚拟机。