Virtual input/output memory management unit within a guest virtual machine
    2.
    发明授权
    Virtual input/output memory management unit within a guest virtual machine 有权
    客户虚拟机内的虚拟输入/输出内存管理单元

    公开(公告)号:US09424199B2

    公开(公告)日:2016-08-23

    申请号:US13597575

    申请日:2012-08-29

    IPC分类号: G06F12/00 G06F12/10

    摘要: A virtual input/output memory management unit (IOMMU) is configured to provide a firewall around memory requests associated with an input/output (I/O) device. The virtual IOMMU uses data structures including a guest page table, a host page table and a general control register (i.e., GCR3) table. The guest page table is implemented in hardware to support the speed requirements of the virtual IOMMU. The GCR3 table is indexed using a virtual DeviceID parameter stored in a device table.

    摘要翻译: 虚拟输入/输出存储器管理单元(IOMMU)被配置为围绕与输入/输出(I / O)设备相关联的存储器请求提供防火墙。 虚拟IOMMU使用包括访客页表,主页表和通用控制寄存器(即,GCR3)表的数据结构。 来宾页表以硬件实现,以支持虚拟IOMMU的速度要求。 使用设备表中存储的虚拟DeviceID参数对GCR3表进行索引。

    INPUT/OUTPUT MEMORY MANAGEMENT UNIT WITH PROTECTION MODE FOR PREVENTING MEMORY ACCESS BY I/O DEVICES
    3.
    发明申请
    INPUT/OUTPUT MEMORY MANAGEMENT UNIT WITH PROTECTION MODE FOR PREVENTING MEMORY ACCESS BY I/O DEVICES 有权
    具有用于防止I / O设备存储器访问的保护模式的输入/输出存储器管理单元

    公开(公告)号:US20130080726A1

    公开(公告)日:2013-03-28

    申请号:US13244571

    申请日:2011-09-25

    IPC分类号: G06F12/14 G06F12/10

    摘要: A memory management unit is configured to receive requests for memory access from a plurality of I/O devices. The memory management unit implements a protection mode wherein the unit prevents memory accesses by the plurality of I/O devices by mapping memory access requests (from the I/O devices) to the same set of memory address translation data. When the memory management unit is not in the protected mode, the unit maps memory access requests from the plurality of I/O devices to different respective sets of memory address translation data. Thus, the memory management unit may protect memory from access by I/O devices using fewer address translation tables than are typically required (e.g., none).

    摘要翻译: 存储器管理单元被配置为从多个I / O设备接收对存储器访问的请求。 存储器管理单元实现保护模式,其中该单元通过将存储器访问请求(从I / O设备)映射到同一组存储器地址转换数据来防止多个I / O设备的存储器访问。 当存储器管理单元不处于保护模式时,该单元将来自多个I / O设备的存储器访问请求映射到不同的各组存储器地址转换数据。 因此,存储器管理单元可以使用比通常需要的更少的地址转换表(例如,没有)来保护存储器免受I / O设备的访问。

    Server discovery, spawning collector threads to collect information from servers, and reporting information
    4.
    发明授权
    Server discovery, spawning collector threads to collect information from servers, and reporting information 有权
    服务器发现,产生收集器线程以从服务器收集信息和报告信息

    公开(公告)号:US08214882B2

    公开(公告)日:2012-07-03

    申请号:US12176404

    申请日:2008-07-20

    IPC分类号: G06F7/04

    摘要: Server discovery, spawning collector threads to collect information from servers, and reporting such information, is disclosed. A method of one embodiment determines a number of servers communicatively coupled to a network. For each server, a collector thread is spawned to collect information regarding the server by sending requests to the server and receiving responses from the server. The collector threads can be spawned by and run on a computing device other than the number of servers, such that no computer-executable code is installed on the servers for collecting the information. Upon completion of the collector thread for each server, the information regarding the server as collected is stored to a database by one or more writer threads. The information may include dynamic load-oriented and function-oriented information regarding the servers, as well as static configuration information, from which server utilization-oriented statistics may be distilled to identify candidate servers for server consolidation.

    摘要翻译: 披露了服务器发现,从服务器收集信息的生成收集器线程和报告这些信息。 一个实施例的方法确定通信地耦合到网络的多个服务器。 对于每个服务器,产生收集器线程以通过向服务器发送请求并从服务器接收响应来收集关于服务器的信息。 收集器线程可以由不同于服务器数量的计算设备产生并运行,从而在服务器上没有安装计算机可执行代码来收集信息。 在完成每个服务器的收集器线程之后,关于收集的服务器的信息由一个或多个写入程序线程存储到数据库。 该信息可以包括关于服务器的动态面向负载和面向功能的信息,以及静态配置信息,从服务器利用率导向的统计信息可以从其中被提取以识别用于服务器整合的候选服务器。

    IOMMU USING TWO-LEVEL ADDRESS TRANSLATION FOR I/O AND COMPUTATION OFFLOAD DEVICES ON A PERIPHERAL INTERCONNECT
    5.
    发明申请
    IOMMU USING TWO-LEVEL ADDRESS TRANSLATION FOR I/O AND COMPUTATION OFFLOAD DEVICES ON A PERIPHERAL INTERCONNECT 有权
    IOMMU使用两级地址翻译用于I / O和计算外部设备的外设互连

    公开(公告)号:US20110022818A1

    公开(公告)日:2011-01-27

    申请号:US12508890

    申请日:2009-07-24

    摘要: An IOMMU for controlling requests by an I/O device to a system memory of a computer system includes control logic and a cache memory. The control logic may translate an address received in a request from the I/O device. If the request includes a transaction layer protocol (TLP) packet with a process address space identifier (PASID) prefix, the control logic may perform a two-level guest translation. Accordingly, the control logic may access a set of guest page tables to translate the address received in the request. A pointer in a last guest page table points to a first table in a set of nested page tables. The control logic may use the pointer in a last guest page table to access the set of nested page tables to obtain a system physical address (SPA) that corresponds to a physical page in the system memory. The cache memory stores completed translations.

    摘要翻译: 用于控制I / O设备对计算机系统的系统存储器的请求的IOMMU包括控制逻辑和高速缓冲存储器。 控制逻辑可以将来自I / O设备的请求中接收的地址转换。 如果请求包括具有进程地址空间标识符(PASID)前缀的事务层协议(TLP)分组,则控制逻辑可执行两级客户转换。 因此,控制逻辑可以访问一组访客页表以翻译请求中接收的地址。 最后一个访客页表中的指针指向一组嵌套页表中的第一个表。 控制逻辑可以使用最后访客页表中的指针来访问嵌套页表集合以获得与系统存储器中的物理页对应的系统物理地址(SPA)。 缓存存储器存储完成的翻译。

    Translation data prefetch in an IOMMU
    6.
    发明授权
    Translation data prefetch in an IOMMU 有权
    翻译数据预取在IOMMU中

    公开(公告)号:US07793067B2

    公开(公告)日:2010-09-07

    申请号:US12112611

    申请日:2008-04-30

    IPC分类号: G06F12/08

    摘要: In an embodiment, a system memory stores a set of input/output (I/O) translation tables. One or more I/O devices initiate direct memory access (DMA) requests including virtual addresses. An I/O memory management unit (IOMMU) is coupled to the I/O devices and the system memory, wherein the IOMMU is configured to translate the virtual addresses in the DMA requests to physical addresses to access the system memory according to an I/O translation mechanism implemented by the IOMMU. The IOMMU comprises one or more caches, and is configured to read translation data from the I/O translation tables responsive to a prefetch command that specifies a first virtual address. The reads are responsive to the first virtual address and the I/O translation mechanism, and the IOMMU is configured to store data in the caches responsive to the read translation data.

    摘要翻译: 在一个实施例中,系统存储器存储一组输入/输出(I / O)转换表。 一个或多个I / O设备启动包括虚拟地址的直接存储器访问(DMA)请求。 I / O存储器管理单元(IOMMU)耦合到I / O设备和系统存储器,其中IOMMU被配置为将DMA请求中的虚拟地址转换为物理地址,以根据I / O翻译机制。 响应于指定第一虚拟地址的预取命令,IOMMU包括一个或多个高速缓存,并被配置为从I / O转换表读取翻译数据。 读取响应于第一虚拟地址和I / O转换机制,并且IOMMU被配置为响应于读取的翻译数据将数据存储在高速缓存中。

    Translation Data Prefetch in an IOMMU
    7.
    发明申请
    Translation Data Prefetch in an IOMMU 有权
    IOMMU中的翻译数据预取

    公开(公告)号:US20080209130A1

    公开(公告)日:2008-08-28

    申请号:US12112611

    申请日:2008-04-30

    IPC分类号: G06F12/10 G06F12/08 G06F13/28

    摘要: In an embodiment, a system memory stores a set of input/output (I/O) translation tables. One or more I/O devices initiate direct memory access (DMA) requests including virtual addresses. An I/O memory management unit (IOMMU) is coupled to the I/O devices and the system memory, wherein the IOMMU is configured to translate the virtual addresses in the DMA requests to physical addresses to access the system memory according to an I/O translation mechanism implemented by the IOMMU. The IOMMU comprises one or more caches, and is configured to read translation data from the I/O translation tables responsive to a prefetch command that specifies a first virtual address. The reads are responsive to the first virtual address and the I/O translation mechanism, and the IOMMU is configured to store data in the caches responsive to the read translation data.

    摘要翻译: 在一个实施例中,系统存储器存储一组输入/输出(I / O)转换表。 一个或多个I / O设备启动包括虚拟地址的直接存储器访问(DMA)请求。 I / O存储器管理单元(IOMMU)耦合到I / O设备和系统存储器,其中IOMMU被配置为将DMA请求中的虚拟地址转换为物理地址,以根据I / O翻译机制。 响应于指定第一虚拟地址的预取命令,IOMMU包括一个或多个高速缓存,并被配置为从I / O转换表读取翻译数据。 读取响应于第一虚拟地址和I / O转换机制,并且IOMMU被配置为响应于读取的翻译数据将数据存储在高速缓存中。

    Filtering and Remapping Interrupts
    8.
    发明申请
    Filtering and Remapping Interrupts 有权
    过滤和重映射中断

    公开(公告)号:US20080114916A1

    公开(公告)日:2008-05-15

    申请号:US11559049

    申请日:2006-11-13

    IPC分类号: G06F13/24

    摘要: In one embodiment, an input/output memory management unit (IOMMU) comprises a control register and control logic coupled to the control register. The control register is configured to store a base address of a device table, wherein a given input/output (I/O) device has an associated device identifier that selects a first entry in the device table. The first entry comprises a pointer to an interrupt remapping table. The control logic is configured to remap an interrupt specified by an interrupt request received by the IOMMU from the given I/O device if the interrupt remapping table includes an entry for the interrupt.

    摘要翻译: 在一个实施例中,输入/输出存储器管理单元(IOMMU)包括耦合到控制寄存器的控制寄存器和控制逻辑。 控制寄存器被配置为存储设备表的基地址,其中给定的输入/输出(I / O)设备具有选择设备表中的第一条目的相关联的设备标识符。 第一个条目包括指向中断重映射表的指针。 控制逻辑被配置为如果中断重映射表包括用于中断的条目,则将由IOMMU接收的中断请求指定的中断从给定的I / O设备重新映射。

    Efficiently Controlling Special Memory Mapped System Accesses
    9.
    发明申请
    Efficiently Controlling Special Memory Mapped System Accesses 有权
    有效控制特殊内存映射系统访问

    公开(公告)号:US20080114906A1

    公开(公告)日:2008-05-15

    申请号:US11559028

    申请日:2006-11-13

    IPC分类号: G06F13/28

    摘要: In one embodiment, an input/output memory management unit (IOMMU) comprises a control register configured to store a base address of a set of translation tables and control logic coupled to the control register. The control logic is configured to respond to an input/output (I/O) device-initiated request having an address within an address range of an address space corresponding to a peripheral interconnect. One or more operations other than a memory operation are associated with the address range, and the control logic is configured to translate the address to a second address outside of the address range if the translation tables specify a translation from the address to the second address, whereby a memory operation is performed in response to the request instead of the one or more operations associated with the address range.

    摘要翻译: 在一个实施例中,输入/输出存储器管理单元(IOMMU)包括控制寄存器,其被配置为存储一组转换表的基址和耦合到控制寄存器的控制逻辑。 控制逻辑被配置为响应具有与外围互连相对应的地址空间的地址范围内的地址的输入/输出(I / O)设备发起的请求。 除了存储器操作之外的一个或多个操作与地址范围相关联,并且如果转换表指定从地址到第二地址的转换,则控制逻辑被配置为将地址转换为地址范围之外的第二地址, 由此响应于请求而不是与地址范围相关联的一个或多个操作执行存储器操作。

    Trust evaluation
    10.
    发明授权
    Trust evaluation 有权
    信任评估

    公开(公告)号:US07266475B1

    公开(公告)日:2007-09-04

    申请号:US11355719

    申请日:2006-02-16

    IPC分类号: G06F11/30

    摘要: A solution for evaluating trust in a computer infrastructure is provided. In particular, a plurality of computing devices in the computer infrastructure evaluate one or more other computing devices in the computer infrastructure based on a set of device measurements for the other computing device(s) and a set of reference measurements. To this extent, each of the plurality of computing devices also provides a set of device measurements for processing by the other computing device(s) in the computer infrastructure.

    摘要翻译: 提供了一种评估计算机基础设施信任的解决方案。 特别地,计算机基础设施中的多个计算设备基于用于其他计算设备的一组设备测量值和一组参考测量结果来评估计算机基础结构中的一个或多个其他计算设备。 在这种程度上,多个计算设备中的每一个还提供一组设备测量值以供计算机基础设施中的其他计算设备处理。