219 results about "Bare metal" patented technology

The invention discloses a network intercommunication method and system, electronic equipment, a storage medium and a program product, and relates to the field of cloud computing, and the method comprises the following steps: for first virtual machine traffic output by a virtual machine in a computing node, performing route matching on the first virtual machine flow through a routing table corresponding to a first virtual route and a forwarding instance in the computing node; and instructing a target switch to send the obtained second virtual machine traffic to the physical server node, so that network intercommunication between the virtual machine and the physical server node is realized, and the target switch is connected to the physical server node, the routing reflector and the computing node. The problem that the network intercommunication effect between the virtual machine and the bare metal node is poor due to the defects of bandwidth forwarding bottleneck and high scheme cost of a soft gateway used between the virtual machine and the bare metal node in the computing node in the cloud computing environment is solved, and the network intercommunication effect between the virtual machine and the bare metal node is improved.

The invention relates to a deployment method and device of a bare metal server, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring configuration information of a bare metal server according to a received deployment request; according to the configuration information, determining a target bare metal server from a bare metal resource pool, and obtaining a target mirror image from a mirror image warehouse; and deploying the target bare metal server according to the configuration information and the target mirror image. According to the technical scheme, the bare metal management platform can complete automatic deployment of the bare metal server based on the deployment request of the user, the requirement for the technical level of an operator is lowered, the probability of occurrence of human errors is lowered, and the success rate and stability of deployment are improved.

The invention discloses a chip prototype verification method and device, a medium and a product, and relates to the technical field of integrated circuit verification, and the method comprises the steps: dynamically dividing a central processing unit core of a multi-core chip into a first core group and a second core group in a chip prototype verification platform; performing data interaction on the first core group and the second core group through the inter-core communication agent to obtain a verification control instruction; converting the test case into a chip register operation instruction or a real-time operating system drive call instruction based on the verification control instruction; distributing the chip register operation instruction to the first core group to execute a hardware real-time verification process, and distributing the real-time operation system drive calling instruction to the second core group to execute a multi-task scheduling verification process so as to respectively obtain a corresponding register snapshot and a task scheduling log; and aligning the register snapshot with the task scheduling log according to a time axis so as to generate a chip function verification result report based on the alignment data. Cooperative verification of bare computer verification and real-time operating system verification is realized.

An integrated circuit includes a host interface coupled to a host device executing a tenant operating system (OS) on bare metal and hardware accelerator(s) coupled to the host interface and a network interface. The hardware accelerator(s) receive, over the host interface, a snapshot request relating to a snapshot of tenant OS. Snapshot request includes a location, in a physical memory of the host device, of a swap file having contents of random access memory of the host device. The hardware accelerator(s) encrypt the swap file and initiate transfer of the encrypted swap file to a network storage device coupled to a cloud-based server. The hardware accelerator(s) send, over the network interface, to a snapshot manager hosted by the cloud-based server, metadata associated with storing the encrypted swap file in the cloud-based server, to allow the snapshot manager to manage the snapshot of the tenant OS.

The technology described herein, which can be incorporated into a bare metal as a service environment, is generally directed towards monitoring retrieving and analyzing security configuration stored on recovery partition storage (e.g., OEM partition drives), which can contain critical logs, error state data, and boot critical security data. A backend security policy engine enforces security context configuration policy data, including to prevent malicious attacks on the backend services. Bare metal in-band compute device health is monitored by an out-of-band network using telemetry data services. When an unrecoverable system state is detected, the out-of-band network activates the recovery partition storage for recording the system sensitive logs, debug data and error states, which is stored as encrypted per security policies. Security policy is enforced, including on system logs, to prevent data tampering and / or malicious attacks. A recovery scenario is performed to restore operation of the compute device.

Example solutions enhance security of bootable media images during bare metal restores. A boot image generation request and original image integrity data is received from a first computing device. An original image timestamp associated with the boot image generation request is stored. A message is received from a second computing device that includes current image integrity data generated by the second computing device using a current boot image. The original image integrity data is verified to match the current image integrity data. The message is determined to have been received within a length of time from the original image timestamp. A registration of the second computing device is performed within the device management system based on the verification and the determination.

Systems and methods for capturing a disk image of a bare metal server, and then using the disk image to provision other bare metal servers. A method includes capturing a disk image of a first bare metal server and writing the disk image to a repository manager. The method includes launching a continuous delivery mode on a second bare metal server where the disk image is fetched from repository manager and written to second bare metal server, followed by configuring the unique identity.

An orchestrator performs user session management of bare metal servers that lack an agent cooperating with the orchestrator. Log data is pulled from the servers, such as using a vector agent. The log data is processed to obtainer user session records (e.g., PID, username, start time, and end time). The user session records are processed to detect malicious or suspicious activity or violations of policies. The orchestrator may invoke performance of a workflow to perform session management actions such as blocking, limiting, or logging off users. The workflow executes remote from the server and may communicate instructions to the server through a secure command line interface.

The invention relates to the technical field of network intercommunication, and provides a method and equipment for realizing a bare metal gateway based on an OpenFlow flow table, and the method comprises the steps: enabling a bare metal server to be accessed to a VPC network, and creating and binding a network port to a specified bare metal gateway node in a specified VPC subnet through a cloud management platform; a logic flow table is generated through the OVN controller according to the network ports and the binding relation of the network ports, and the logic flow table is issued to the bare metal net nodes bound to the network ports; the bare metal net node translates the received logic flow table into an OpenFlow flow table and issues the OpenFlow flow table to a local OVS virtual switch; and the OVS virtual switch performs two-layer forwarding processing on the message transmitted between the bare metal server and the virtual machine in the VPC according to the received OpenFlow flow table. The bare metal gateway is realized in a pure software mode, the dependence on special hardware is avoided, and the cost is remarkably reduced. The efficient conversion between the VXLAN and the VLAN is realized based on the OpenFlow flow table, the flexibility, the expandability and the operation and maintenance automation degree are improved, and the high-performance two-layer intercommunication is ensured.

The invention provides a trusted bare metal server resource partitioning method and system oriented to hardware security extension, and aims to solve the problems of security isolation and efficient utilization of hardware resources in a cloud computing environment. A resource partitioning technology based on hardware security expansion is introduced, and key components such as a security monitor, an isolation domain manager and a trusted execution environment TEE are combined, so that hardware resource fine partitioning and security management of the trusted bare metal server in the multi-tenant environment are realized. The core lies in that shared hardware is partitioned at a natural boundary (such as a core, a memory and I / O equipment), so that a plurality of untrusted client operating systems can run on shared bare metal hardware, meanwhile, performance overhead and potential safety hazards caused by complex virtualization are avoided, functions similar to virtual machines and bare computer performance are realized, and the method has strong isolation performance and is convenient to operate. And meanwhile, safe starting and remote verification are supported.

The present disclosure describes techniques used in systems, methods, and in computer program products to perform incremental hibernate and resume of bare metal clusters. A replication process can generate full / incremental snapshots at the cluster level and at a resource level of the processes of the cluster. In the even that a user instructs the cluster to hibernate some or all processes of the cluster, the process can capture an incremental snapshot of the corresponding resources far more quickly than would be required to generate full snapshots for those resources. Likewise, system configuration information can be captured to enable the underlying infrastructure of the cluster to be restored in the future. In some embodiments, the approach provided herein also implements an instant restore feature.

The invention discloses a cloud computing bare metal hardware market distribution and management optimization system and method. The system comprises a resource access module, a distribution channel management module, an intelligent matching module, a transaction settlement module, a data analysis and optimization module, a safety and operation and maintenance management module and the like. Standardized aggregation of heterogeneous resources is realized through a resource access system, and the problem of fragmented management is solved; the distribution channel management system dynamically adjusts distribution rules and improves the channel cooperation efficiency; the intelligent matching system is combined with user behavior analysis to realize accurate supply and demand connection; the transaction settlement system integrates payment channels and marketing tools and simplifies fund circulation; the data analysis system precipitates full-link data to support decision optimization; the safety and operation and maintenance system guarantees safe and stable operation. According to the method, through the steps of resource access standardization, channel rule dynamic and the like, efficient, intelligent and standardized management of the whole distribution process is realized, and the market distribution efficiency, accuracy and safety are improved.

The invention belongs to the field of server security, and particularly relates to an elastic bare metal server resource exclusion and security isolation guarantee method and system.The method comprises the steps that an elastic coupling block chain is preset, an intelligent contract on the chain is utilized, resources are allocated from a server group according to user requirements in combination with a PoS + QoS consensus algorithm, and a distributed coupling association mapping chain is constructed; each block chain node configures a unique identity fingerprint and a configuration parameter of a resource according to a demand, deploys and starts the service chain, then applies a preset three-layer dynamic protection algorithm, monitors internal and external running states in real time according to a demand completion progress, and feeds back a judgment result to the resource configuration adjustment model and the combined security adjustment strategy library; performing exception repair and resource uplink and downlink adjustment on the service chain; according to the method, resource configuration-release traceability is guaranteed through the non-tampering property of the block chain, and safe closed loop, exclusive use and isolation of fingerprint anchoring-on-chain configuration-dynamic protection are realized.

The invention provides a control method and device for a bare metal instance, equipment and a storage medium, and relates to the technical field of computers, in particular to the technical fields of cloud computing, cloud services, bare metal products and the like. According to the specific implementation scheme, the intelligent card receives an operation request for a bare metal instance; and the intelligent card executes a target operation corresponding to the operation request on the bare metal instance based on an interface provided by the virtualization library.

The invention discloses a cluster computing resource allocation method. The method supports three resource service forms of a virtual machine, a container cloud and a bare computer. Wherein the virtual machine resources are used for deploying system software with a UI (User Interface) and a C / S (Client / Server) architecture; the container cloud resource is used for deployment of system software of a B / S architecture and operation of a large test sample; the bare computer resources are used for specific function system software, Kafka middleware and / or database deployment; and service computing resource elastic scheduling and control are deployed to realize cluster computing resource allocation. According to the method, multiple resource service forms are flexibly adopted, and virtual cluster management and high-availability design are applied, so that test resource automatic deployment strategy generation and computing resource flexible scheduling and control can be realized, and high-performance, high-reliability, servitization and easy-to-use cluster computing resource allocation and deployment services are provided for users.

The embodiment of the invention provides a resource mounting method and a data system, and the method comprises the steps: obtaining the mapping information of a plurality of namespaces in response to a resource configuration event for a target container; determining a target namespace from the plurality of namespaces based on the mapping information of the plurality of namespaces; based on the target namespace, the target computing resource is mounted to the target container, and the target computing resource is configured through the target namespace. According to the technical scheme, software stack mounting through a virtualization layer is avoided, the mounting speed is increased, mounting can be achieved without installing components, and invasion to a bare metal server is avoided.

The embodiment of the invention provides a bare metal server management method and device, electronic equipment and a storage medium, the bare metal server management method is applied to an edge cloud node, and the edge cloud node is deployed with an edge cloud console and an edge bare metal management module; wherein the edge bare metal management module comprises a BMO component and a BMCO component; the BMCO component comprises an Ironic component; the method comprises the following steps: receiving an operation task through the edge cloud console; the operation task is an operation task aiming at a bare metal server, and putting the operation task into a thread pool; extracting a plurality of operation tasks from a thread pool through the edge cloud console, and calling the edge bare metal management module to concurrently process the plurality of operation tasks; wherein the plurality of operation tasks are operation tasks aiming at different bare metal servers, and the operation tasks aiming at the same bare metal server are processed by a single thread.

The embodiment of the invention discloses a bare metal server configuration method and a server, and the method comprises the steps that a data processor can obtain a configuration request for configuring a bare metal server, and obtains target block storage in response to the configuration request, and the target block storage comprises a preset operating system; and virtualizing the target block storage to obtain a first virtualization device comprising the operating system. Due to the fact that the data processor is in communication connection with the bare metal server, after the bare metal server is started, the first virtualization device in the data processor can be recognized, and therefore the operating system in the first virtualization device can be obtained and started. The target block storage is virtualized, so that the preset operating system in the target block storage is provided for the bare metal server, configuration of the operating system of the bare metal server is achieved, a complex environment does not need to be built depending on a cloud computing platform, the configuration process is simplified, and the configuration time is shortened.

The invention relates to a disk array configuration method and device, computer equipment and a storage medium. The method is applied to a computer device running a bare metal service, and comprises the steps that a grouping creation instruction is received, the grouping creation instruction comprises grouping demand information, and the grouping demand information comprises the number of groups, a target RAID card identifier corresponding to each group and demand disk information; determining grouping configuration information according to the grouping demand information and a pre-stored corresponding relationship; wherein the corresponding relationship is used for identifying the association between each RAID card identifier in the bare metal server and the actual disk information; the grouping configuration information comprises a target RAID card identifier corresponding to each group and actual disk information which corresponds to the target RAID card identifier and meets the required disk information; and sending the grouping configuration information to the bare metal server, wherein the grouping configuration information is used for executing the RAID operation on the bare metal server.

The invention discloses a network deployment method, device and equipment and a computer readable storage medium, and is applied to the technical field of computers, and the method comprises the steps: obtaining a virtual machine and bare metal of a cloud infrastructure platform, and containerized application bare metal of a container arrangement platform; the containerized application of the bare metal is the bare metal for deploying a container arrangement platform in the bare metal; setting a switch port mode of the virtual machine and a port mode of the containerized application bare metal as a multi-virtual local area network port mode, and setting a switch port mode of the bare metal as a single-virtual local area network port mode; and interconnecting the virtual machine configured with the port mode, the bare metal and the network of the containerized application bare metal based on the virtual private cloud subnet information. According to the invention, the containerized application bare metal integrated with the container arrangement platform and the ports of the virtual machine and the bare metal are configured, so that the cloud infrastructure platform and the container arrangement platform can access the same virtual private cloud network, thereby realizing network interconnection and intercommunication.

This application belongs to the field of computer information processing technology and specifically discloses a fuzz testing input optimization device for IoT device firmware. The device includes a static analysis module for analyzing firmware through an API interface, identifying input transfer points of bare metal firmware, and realizing automatic identification through a custom script; a dynamic simulation module for identifying input transfer points of real-time operating system firmware, and implementing a length inference mechanism and a final input transfer algorithm; an input routing mapping module for identifying and dynamically monitoring data retrieval points, input processing points, and availability check instructions in the firmware to obtain mapping results; an input transfer point identification module for automatically identifying the firmware's input transfer points based on the mapping results; and a perception module for dynamically determining the minimum and maximum lengths of input data at the input transfer points, optimizing the input transfer points of firmware fuzz testing, and dynamically calculating the retained data length. This application can improve the efficiency of fuzz testing.

Systems and methods for agentless GitOps and custom resources for application orchestration and management. A system includes a bare metal server running a cloud native application and a plurality of clusters running on the bare metal server, wherein at least a portion of the plurality of clusters executes an application. The system includes a data center automation platform responsible for service management and orchestration for the bare metal server, wherein the data center automation platform subscribes to a git repository to receive updates pertaining to the application, and wherein a read only token is established between the git repository and the data center automation platform.

An orchestrator manages password rotation bare metal servers that lack an agent for performing password rotation. A user configures parameters for performing password rotation such as the frequency (e.g., cron command) and password rules for a bare metal server. Parameters may be associated with a theme that can be applied to one or multiple bare metal servers. When indicated by the frequency, the orchestrator runs a workflow with respect to one or more bare metal servers in order to change the passwords and update a vault store recording the passwords.

The invention relates to a bare metal management method and device, a server and a readable storage medium, the method is applied to a management server in a cloud desktop system, the cloud desktop system further comprises a plurality of bare metal servers, and the method comprises the steps of obtaining information of the plurality of bare metal servers; under the condition that it is determined that the bare metal servers which do not support the out-of-band network exist in the multiple bare metal servers according to the information, the bare metal servers which do not support the out-of-band network are selected from the multiple bare metal servers, and a first server set is obtained; and deploying a KVM virtual machine for the bare metal server in the first server set. By adopting the method, the bare metal server can be managed through the virtual machine.

The application discloses a media cloud desktop management method and system based on a bare metal server. The application comprises the following method: providing the basic resources of the cloud desktop in a bare metal pooling mode, adding instance matching specifications suitable for different vGPU use scenarios in the media cloud desktop system before the cloud desktop is created, creating cloud desktop template kits belonging to different virtual laboratories according to the corresponding specifications, and connecting various tool-type cloud desktops belonging to different laboratories through network access mode of the client. The application provides a media cloud desktop management method and system based on a virtual laboratory mode of an elastic bare metal server, realizes efficient management of the vGPU resources of the bare metal pooling, provides a convenient management mechanism for cloud desktop authorization and recycling, reduces the idle rate of the tool-type desktops, greatly improves the desktop use efficiency of the vGPU, realizes efficient operation and maintenance and elastic publishing and deployment capabilities of the exclusive desktop and a large number of multi-version desktop templates.

The invention relates to a deployment method and system of a bare metal server based on a data processor, computer equipment and a readable storage medium, the method is applied to the data processor, and the method comprises the following steps: receiving configuration parameters of the bare metal server sent by a management server; the configuration parameter is obtained by the management server from a creation request of a bare metal server sent by a terminal; initializing hardware resources of the bare metal server and configuring storage resources according to the configuration parameters to obtain a configured bare metal server; and returning configuration success information to the management server. By the adoption of the method, the efficiency of the hardware resource initialization process of the bare metal server can be improved, and rapid deployment of the bare metal server is achieved.

The application discloses a kind of about bare machine server BIOS automation deployment method, it is related to automation programming technical field, bare machine server carries out BMC management port initialization configuration, opens BMC setting Https (web), SSH, Redfish and IPMI service agreement, by bare machine server SSH, Redfish and different equipment special tool, from bare machine server BMC management port call relevant protocol, by system automatic judgment uses what protocol or tool is directed to different manufacturer's bare machine server and carries out BIOS data acquisition.The application is by system automatic judgment uses what protocol or tool is directed to different manufacturer's bare machine server and carries out BIOS data acquisition, multiple data acquisition protocols are used simultaneously, by system automatic determination uses data acquisition method, ensure that the most complete BIOS configuration item parameter is obtained, reduce manual participation manual data acquisition, by using BIOS template packing and encapsulating automation deployment method, unified generation standardization BIOS template, by system automatic deployment, without manual participation, speed up deployment time.

An integrated circuit includes a host interface, operatively coupled to a host device executing a tenant operating system (OS) on bare metal, and one or more hardware accelerators, operatively coupled to the host interface. The one or more hardware accelerators encrypt a swap file retrieved from the host device and initiate transfer of the encrypted swap file to a network storage device coupled to a cloud-based server. A central processing unit (CPU) is operatively coupled to the host interface and, with the one or more hardware accelerators, are to host a hardware-accelerated snapshot client that coordinates snapshot activities, associated with the encrypted swap file, between a snapshot manager, hosted by the cloud-based server, and a snapshot user interface executed on the host device.

The invention provides a computing power utilization rate prompting method and device for a common computing power intelligent computing center, and relates to the technical field of intelligent computing centers, intelligent computing centers and computing power infrastructure, and the method comprises the steps: S1, obtaining the computing power utilization rate of a target server group in a first time period; s2, prompt information is output according to the computing power utilization rate and preset mapping information, the mapping information represents the computing power unit price corresponding to each computing power utilization rate interval in a plurality of continuous computing power utilization rate intervals, and the numerical value of the computing power utilization rate interval is inversely proportional to the corresponding computing power unit price; the prompt information comprises a first interval, a computing power unit price corresponding to the first interval, a second interval and a computing power unit price corresponding to the second interval; the first interval is a computing power utilization rate interval where the computing power utilization rate is located, and the second interval is a computing power utilization rate interval with the central value larger than that of the first interval. According to the invention, the overall utilization rate of the computing power resource of the bare metal server can be improved.

The invention discloses a network configuration method and device, related equipment, a storage medium and a computer program product, and is applied to the technical field of cloud computing. The method comprises the following steps: in response to an application request of a user for applying for a bare metal server, according to link layer discovery protocol information of a plurality of neural network processing units (NPUs) in a target bare metal server, respectively distributing network configuration information for the NPUs to obtain parameter plane network information of the target bare metal server; updating a configuration drive file of the target bare metal server based on the parameter surface network information; and controlling the target bare metal server to execute the configuration drive file, and triggering the target bare metal server to perform network configuration on the plurality of NPUs when the configuration drive file is executed.