Virtual computing environment

• US 7,426,565 B1
• Filed: 04/17/2006
• Issued: 09/16/2008
• Est. Priority Date: 02/16/2001
• Status: Expired due to Term

• Current Assignee: Virtuozzo International GmbH
• Original Assignee: Swsoft Holdings, Ltd.
• Inventors: Protassov, Stanislav S., Beloussov, Serguei M., Tormasov, Alexander G., Lunev, Denis
• Primary Examiner(s): Cardone; Jason
• Assistant Examiner(s): Mirza; Adnan M
• Application Number:
  US11/279,902
• Time in Patent Office: 883 Days
• Field of Search: 709/223, 709/228, 709/229, 707/10
• US Class Current: 709/229
• CPC Class Codes: H04L 67/08 specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A computing system includes a physical server having a single instance of an operating system; and a plurality of virtual environments running on the physical server and directly supported by the single instance of the operating system. Each virtual environment responds to requests from users and appears to the users as a stand-alone server having its own instance of the operating system. Each virtual environment has a plurality of objects associated with it and supported by the operating system. Some of the objects are private and other objects are shared between multiple virtual environments. One virtual environment cannot access private objects of another virtual environment.

Claims

1. A computing system comprising:

a physical server having a single instance of an operating system;

a plurality of virtual environments running on the physical server and directly supported by the single instance of the operating system, each virtual environment responding to requests from users and appearing to the users as a stand-alone server having its own instance of the operating system;

each virtual environment having a plurality of objects associated with it and supported by the operating system,

wherein some of the objects are private and other objects are shared between multiple virtual environments, and

wherein one virtual environment cannot access private objects of another virtual environment.

2. The system of claim 1, wherein each virtual environment has an independent root file system.

3. The system of claim 1, wherein each virtual environment has a complete set of operating system processes.

4. The system of claim 1, wherein each virtual environment has a complete set of operating system files.

5. The system of claim 1, wherein each virtual environment can modify any file of its own instance of the operating system.

6. The system of claim 1, wherein none of the virtual environments have dedicated memory allocated to them.

7. The system of claim 1, wherein none of the virtual environments utilize emulated hardware.

8. The system of claim 1, wherein each object has a corresponding identifier,

wherein at least some of the identifiers are the same for objects associated with different virtual environments, and

wherein objects of different virtual environments are isolated from each other even when they have the same identifiers.

9. The system of claim 1, wherein resources of the operating system kernel belonging to different virtual environments are separated on a namespace level.

10. The system of claim 1, wherein resources and objects of one virtual environment are not visible to processes and objects of other virtual environments.

11. The system of claim 1, wherein the virtual environment comprises processes and files of the operating system kernel.

12. A method of operating a computing system comprising:

starting a physical server having a single instance of an operating system kernel; and

initiating a plurality of virtual environments on the physical server, the virtual environments being directly supported by the single instance of the operating system, each virtual environment responding to requests from users and appearing to the users as a stand-alone server having its own instance of the operating system, each virtual environment having a plurality of objects associated with it and supported by the operating system,

wherein some of the objects are private and other objects are shared between multiple virtual environments, and

wherein one virtual environment cannot access private objects of another virtual environment.

13. The method of claim 12, wherein each virtual environment has an independent root file system.

14. The method of claim 12, wherein none of the virtual environments have dedicated memory allocated to them.

15. The method of claim 12, wherein none of the virtual environments utilize emulated hardware.

16. The method of claim 12, wherein each object has a corresponding identifier,

wherein at least some of the identifiers are the same for objects associated with different virtual environments, and

wherein objects of different virtual environments are isolated from each other even when they have the same identifiers.

17. The method of claim 12, wherein resources of the operating system kernel belonging to different virtual environments are separated on a namespace level.

18. The method of claim 12, wherein resources and objects of one virtual environment are not visible to processes and objects of other virtual environments.

19. The method of claim 12, wherein each virtual environment includes processes and files of the operating system kernel.

20. The method of claim 12, wherein each virtual environment has a complete set of operating system processes.

21. The method of claim 12, wherein each virtual environment has a complete set of operating system files.

22. The method of claim 12, wherein each virtual environment can modify any file of its own instance of the operating system.

23. A computing system comprising:

a physical server having an instance of a host operating system (OS);

a plurality of virtual environments running on the physical server and supported by the host OS, each virtual environment responding to requests from users and appearing to the users as a stand-alone server;

each virtual environment having its own instance of an OS kernel;

each virtual environment having a file system that is invisible to other virtual environments;

each virtual environment permitting its root user to configure parameters of its instance of the OS kernel;

each virtual environment having a plurality of objects associated with it and supported by the host OS,

wherein some of the objects are private and other objects are shared between multiple virtual environments,

wherein one virtual environment cannot access private objects of another virtual environment, and

wherein two processes from different virtual environments started for execution from one host OS file are isolated from each other but use the same read-only shared physical memory pages.

25. The system of claim 23, wherein each virtual environment has its own system disk.

26. The system of claim 23, wherein each virtual environment can modify any file of its own instance of the operating system.

27. The system of claim 23, wherein none of the virtual environments have dedicated memory allocated to them.

28. The system of claim 23, wherein none of the virtual environments utilize emulated hardware.

29. The system of claim 23, wherein each object has a corresponding identifier,

wherein at least some of the identifiers are the same for objects associated with different virtual environments, and

wherein objects of different virtual environments are isolated from each other even when they have the same identifiers.

30. The system of claim 23, wherein resources of the operating system kernel belonging to different virtual environments are separated on a namespace level.

31. The system of claim 23, wherein resources and objects of one virtual environment are not visible to processes and objects of other virtual environments.

24. A method of operating a computing system, the method comprising:

starting an instance of a host operating system (OS) on a physical server;

launching a plurality of virtual environments on the physical server, each virtual environment supported by the host OS and responding to requests from users and appearing to the users as a stand-alone server,

wherein each virtual environment has its own instance of an OS kernel,

wherein each virtual environment has a file system that is invisible to other virtual environments,

wherein each virtual environment permits its root user to configure parameters of its instance of the OS kernel; and

associating a plurality of objects with each virtual environment that are supported by the host OS,

wherein some of the objects are private and other objects are shared between multiple virtual environments,

wherein one virtual environment cannot access private objects of another virtual environment, and

wherein two processes from different virtual environments started for execution from one host OS file are isolated from each other but use the same read-only shared physical memory pages.

32. The method of claim 24, wherein each virtual environment has its own system disk.

33. The method of claim 24, wherein each virtual environment can modify any file of its own instance of the operating system.

34. The method of claim 24, wherein none of the virtual environments have dedicated memory allocated to them.

35. The method of claim 24, wherein none of the virtual environments utilize emulated hardware.

36. The method of claim 24, wherein each object has a corresponding identifier,

wherein at least some of the identifiers are the same for objects associated with different virtual environments, and

wherein objects of different virtual environments are isolated from each other even when they have the same identifiers.

37. The method of claim 24, wherein resources of the operating system kernel belonging to different virtual environments are separated on a namespace level.

38. The method of claim 24, wherein resources and objects of one virtual environment are not visible to processes and objects of other virtual environments.

39. A computing system comprising:

a physical computer having a single instance of an operating system;

a plurality of virtual environments running on the physical computer and directly supported by the single instance of the operating system, each virtual environment responding to requests from users and appearing to the users as a stand-alone server having its own instance of the operating system;

each virtual environment having at least one private object associated with it and supported by the operating system,

each virtual environment having at least one shared object that is accessible by multiple virtual environments, and

wherein private objects of any virtual environment are isolated from private objects of any other virtual environment.