Method and apparatus of unloading out of memory processing flow to user space

    公开(公告)号:US10417062B2

    公开(公告)日:2019-09-17

    申请号:US15280122

    申请日:2016-09-29

    Abstract: The present application discloses a method and apparatus of unloading an out of memory (OOM) processing flow to a user space. A specific implementation of the method includes: writing related information of an OOM event into a memory page shared by a user space and a kernel space when a process triggers the OOM event, the related information comprising: an identification of the process and a path of a memory resource control sub-system where the process exists; acquiring, by an OOM service process of the user space, the related information of the OOM event through the memory page; and processing, by the OOM service process of the user space, the OOM event using the related information of the OOM event. The implementation implements unloading of an OOM processing in a kernel state to a user state for execution, and the whole OOM processing process is handed over to a user state process for implementation, which reduces the complexity of execution of the OOM processing, and is conducive to adjustment of OOM processing strategies and upgrade and replacement of services.

    Data storage method and device
    2.
    发明授权

    公开(公告)号:US10469583B2

    公开(公告)日:2019-11-05

    申请号:US15550851

    申请日:2015-10-12

    Abstract: The present disclosure provides a data storage method and device. The data storage method includes: receiving data by a simulating device from a client operating system; encapsulating the data in a user space of a host system according to a protocol used by a storage server; and sending the encapsulated data to the storage server for storage. The method can realize storing data in the storage server, thereby shortening the I/O path, improving the I/O throughput of a system, reducing the CPU load, and optimizing the system performance.

    Method and apparatus for capturing operation in a container-based virtualization system

    公开(公告)号:US10102373B2

    公开(公告)日:2018-10-16

    申请号:US15237940

    申请日:2016-08-16

    Abstract: The present application discloses a method and apparatus for capturing an operation, and security control in a container-based virtualization system. A specific implementation of the method for capturing the operation includes: detecting, in a user mode, a process launch operation in a container of the container-based virtualization system; and performing, in a kernel mode, a step of capturing a signal processing operation, if the process launch operation is detected, the step of capturing the signal processing operation comprising: determining a presence of an unprocessed signal in the process; causing an executable instruction indicated by the unprocessed signal to jump to an entry address of a self-defined first function, and passing a signal number of the unprocessed signal to the first function, if the unprocessed signal exists; and capturing a signal processing operation corresponding to the passed signal number, if the first function is called. This implementation implements the capture of an access operation by a process in a container to a host kernel, so that security control can be subsequently performed on the captured operation to ensure the security of the system.

    METHOD AND APPARATUS OF UNLOADING OUT OF MEMORY PROCESSING FLOW TO USER SPACE

    公开(公告)号:US20170329655A1

    公开(公告)日:2017-11-16

    申请号:US15280122

    申请日:2016-09-29

    Abstract: The present application discloses a method and apparatus of unloading an out of memory (OOM) processing flow to a user space. A specific implementation of the method includes: writing related information of an OOM event into a memory page shared by a user space and a kernel space when a process triggers the OOM event, the related information comprising: an identification of the process and a path of a memory resource control sub-system where the process exists; acquiring, by an OOM service process of the user space, the related information of the OOM event through the memory page; and processing, by the OOM service process of the user space, the OOM event using the related information of the OOM event. The implementation implements unloading of an OOM processing in a kernel state to a user state for execution, and the whole OOM processing process is handed over to a user state process for implementation, which reduces the complexity of execution of the OOM processing, and is conducive to adjustment of OOM processing strategies and upgrade and replacement of services.

    METHOD AND APPARATUS FOR CAPTURING OPERATION IN A CONTAINER-BASED VIRTUALIZATION SYSTEM

    公开(公告)号:US20170103206A1

    公开(公告)日:2017-04-13

    申请号:US15237940

    申请日:2016-08-16

    Abstract: The present application discloses a method and apparatus for capturing an operation, and security control in a container-based virtualization system. A specific implementation of the method for capturing the operation includes: detecting, in a user mode, a process launch operation in a container of the container-based virtualization system; and performing, in a kernel mode, a step of capturing a signal processing operation, if the process launch operation is detected, the step of capturing the signal processing operation comprising: determining a presence of an unprocessed signal in the process; causing an executable instruction indicated by the unprocessed signal to jump to an entry address of a self-defined first function, and passing a signal number of the unprocessed signal to the first function, if the unprocessed signal exists; and capturing a signal processing operation corresponding to the passed signal number, if the first function is called. This implementation implements the capture of an access operation by a process in a container to a host kernel, so that security control can be subsequently performed on the captured operation to ensure the security of the system.

Patent Agency Ranking