172 results about "Bare metal" patented technology

The invention discloses a network intercommunication method and system, electronic equipment, a storage medium and a program product, and relates to the field of cloud computing, and the method comprises the following steps: for first virtual machine traffic output by a virtual machine in a computing node, performing route matching on the first virtual machine flow through a routing table corresponding to a first virtual route and a forwarding instance in the computing node; and instructing a target switch to send the obtained second virtual machine traffic to the physical server node, so that network intercommunication between the virtual machine and the physical server node is realized, and the target switch is connected to the physical server node, the routing reflector and the computing node. The problem that the network intercommunication effect between the virtual machine and the bare metal node is poor due to the defects of bandwidth forwarding bottleneck and high scheme cost of a soft gateway used between the virtual machine and the bare metal node in the computing node in the cloud computing environment is solved, and the network intercommunication effect between the virtual machine and the bare metal node is improved.

The invention discloses a chip prototype verification method and device, a medium and a product, and relates to the technical field of integrated circuit verification, and the method comprises the steps: dynamically dividing a central processing unit core of a multi-core chip into a first core group and a second core group in a chip prototype verification platform; performing data interaction on the first core group and the second core group through the inter-core communication agent to obtain a verification control instruction; converting the test case into a chip register operation instruction or a real-time operating system drive call instruction based on the verification control instruction; distributing the chip register operation instruction to the first core group to execute a hardware real-time verification process, and distributing the real-time operation system drive calling instruction to the second core group to execute a multi-task scheduling verification process so as to respectively obtain a corresponding register snapshot and a task scheduling log; and aligning the register snapshot with the task scheduling log according to a time axis so as to generate a chip function verification result report based on the alignment data. Cooperative verification of bare computer verification and real-time operating system verification is realized.

Example solutions enhance security of bootable media images during bare metal restores. A boot image generation request and original image integrity data is received from a first computing device. An original image timestamp associated with the boot image generation request is stored. A message is received from a second computing device that includes current image integrity data generated by the second computing device using a current boot image. The original image integrity data is verified to match the current image integrity data. The message is determined to have been received within a length of time from the original image timestamp. A registration of the second computing device is performed within the device management system based on the verification and the determination.

Systems and methods for capturing a disk image of a bare metal server, and then using the disk image to provision other bare metal servers. A method includes capturing a disk image of a first bare metal server and writing the disk image to a repository manager. The method includes launching a continuous delivery mode on a second bare metal server where the disk image is fetched from repository manager and written to second bare metal server, followed by configuring the unique identity.

An orchestrator performs user session management of bare metal servers that lack an agent cooperating with the orchestrator. Log data is pulled from the servers, such as using a vector agent. The log data is processed to obtainer user session records (e.g., PID, username, start time, and end time). The user session records are processed to detect malicious or suspicious activity or violations of policies. The orchestrator may invoke performance of a workflow to perform session management actions such as blocking, limiting, or logging off users. The workflow executes remote from the server and may communicate instructions to the server through a secure command line interface.

The invention relates to the technical field of network intercommunication, and provides a method and equipment for realizing a bare metal gateway based on an OpenFlow flow table, and the method comprises the steps: enabling a bare metal server to be accessed to a VPC network, and creating and binding a network port to a specified bare metal gateway node in a specified VPC subnet through a cloud management platform; a logic flow table is generated through the OVN controller according to the network ports and the binding relation of the network ports, and the logic flow table is issued to the bare metal net nodes bound to the network ports; the bare metal net node translates the received logic flow table into an OpenFlow flow table and issues the OpenFlow flow table to a local OVS virtual switch; and the OVS virtual switch performs two-layer forwarding processing on the message transmitted between the bare metal server and the virtual machine in the VPC according to the received OpenFlow flow table. The bare metal gateway is realized in a pure software mode, the dependence on special hardware is avoided, and the cost is remarkably reduced. The efficient conversion between the VXLAN and the VLAN is realized based on the OpenFlow flow table, the flexibility, the expandability and the operation and maintenance automation degree are improved, and the high-performance two-layer intercommunication is ensured.

The invention provides a trusted bare metal server resource partitioning method and system oriented to hardware security extension, and aims to solve the problems of security isolation and efficient utilization of hardware resources in a cloud computing environment. A resource partitioning technology based on hardware security expansion is introduced, and key components such as a security monitor, an isolation domain manager and a trusted execution environment TEE are combined, so that hardware resource fine partitioning and security management of the trusted bare metal server in the multi-tenant environment are realized. The core lies in that shared hardware is partitioned at a natural boundary (such as a core, a memory and I / O equipment), so that a plurality of untrusted client operating systems can run on shared bare metal hardware, meanwhile, performance overhead and potential safety hazards caused by complex virtualization are avoided, functions similar to virtual machines and bare computer performance are realized, and the method has strong isolation performance and is convenient to operate. And meanwhile, safe starting and remote verification are supported.

The present disclosure describes techniques used in systems, methods, and in computer program products to perform incremental hibernate and resume of bare metal clusters. A replication process can generate full / incremental snapshots at the cluster level and at a resource level of the processes of the cluster. In the even that a user instructs the cluster to hibernate some or all processes of the cluster, the process can capture an incremental snapshot of the corresponding resources far more quickly than would be required to generate full snapshots for those resources. Likewise, system configuration information can be captured to enable the underlying infrastructure of the cluster to be restored in the future. In some embodiments, the approach provided herein also implements an instant restore feature.

The invention discloses a cloud computing bare metal hardware market distribution and management optimization system and method. The system comprises a resource access module, a distribution channel management module, an intelligent matching module, a transaction settlement module, a data analysis and optimization module, a safety and operation and maintenance management module and the like. Standardized aggregation of heterogeneous resources is realized through a resource access system, and the problem of fragmented management is solved; the distribution channel management system dynamically adjusts distribution rules and improves the channel cooperation efficiency; the intelligent matching system is combined with user behavior analysis to realize accurate supply and demand connection; the transaction settlement system integrates payment channels and marketing tools and simplifies fund circulation; the data analysis system precipitates full-link data to support decision optimization; the safety and operation and maintenance system guarantees safe and stable operation. According to the method, through the steps of resource access standardization, channel rule dynamic and the like, efficient, intelligent and standardized management of the whole distribution process is realized, and the market distribution efficiency, accuracy and safety are improved.

The invention belongs to the field of server security, and particularly relates to an elastic bare metal server resource exclusion and security isolation guarantee method and system.The method comprises the steps that an elastic coupling block chain is preset, an intelligent contract on the chain is utilized, resources are allocated from a server group according to user requirements in combination with a PoS + QoS consensus algorithm, and a distributed coupling association mapping chain is constructed; each block chain node configures a unique identity fingerprint and a configuration parameter of a resource according to a demand, deploys and starts the service chain, then applies a preset three-layer dynamic protection algorithm, monitors internal and external running states in real time according to a demand completion progress, and feeds back a judgment result to the resource configuration adjustment model and the combined security adjustment strategy library; performing exception repair and resource uplink and downlink adjustment on the service chain; according to the method, resource configuration-release traceability is guaranteed through the non-tampering property of the block chain, and safe closed loop, exclusive use and isolation of fingerprint anchoring-on-chain configuration-dynamic protection are realized.

The invention discloses a cluster computing resource allocation method. The method supports three resource service forms of a virtual machine, a container cloud and a bare computer. Wherein the virtual machine resources are used for deploying system software with a UI (User Interface) and a C / S (Client / Server) architecture; the container cloud resource is used for deployment of system software of a B / S architecture and operation of a large test sample; the bare computer resources are used for specific function system software, Kafka middleware and / or database deployment; and service computing resource elastic scheduling and control are deployed to realize cluster computing resource allocation. According to the method, multiple resource service forms are flexibly adopted, and virtual cluster management and high-availability design are applied, so that test resource automatic deployment strategy generation and computing resource flexible scheduling and control can be realized, and high-performance, high-reliability, servitization and easy-to-use cluster computing resource allocation and deployment services are provided for users.

The embodiment of the invention provides a resource mounting method and a data system, and the method comprises the steps: obtaining the mapping information of a plurality of namespaces in response to a resource configuration event for a target container; determining a target namespace from the plurality of namespaces based on the mapping information of the plurality of namespaces; based on the target namespace, the target computing resource is mounted to the target container, and the target computing resource is configured through the target namespace. According to the technical scheme, software stack mounting through a virtualization layer is avoided, the mounting speed is increased, mounting can be achieved without installing components, and invasion to a bare metal server is avoided.

The embodiment of the invention provides a bare metal server management method and device, electronic equipment and a storage medium, the bare metal server management method is applied to an edge cloud node, and the edge cloud node is deployed with an edge cloud console and an edge bare metal management module; wherein the edge bare metal management module comprises a BMO component and a BMCO component; the BMCO component comprises an Ironic component; the method comprises the following steps: receiving an operation task through the edge cloud console; the operation task is an operation task aiming at a bare metal server, and putting the operation task into a thread pool; extracting a plurality of operation tasks from a thread pool through the edge cloud console, and calling the edge bare metal management module to concurrently process the plurality of operation tasks; wherein the plurality of operation tasks are operation tasks aiming at different bare metal servers, and the operation tasks aiming at the same bare metal server are processed by a single thread.

This application belongs to the field of computer information processing technology and specifically discloses a fuzz testing input optimization device for IoT device firmware. The device includes a static analysis module for analyzing firmware through an API interface, identifying input transfer points of bare metal firmware, and realizing automatic identification through a custom script; a dynamic simulation module for identifying input transfer points of real-time operating system firmware, and implementing a length inference mechanism and a final input transfer algorithm; an input routing mapping module for identifying and dynamically monitoring data retrieval points, input processing points, and availability check instructions in the firmware to obtain mapping results; an input transfer point identification module for automatically identifying the firmware's input transfer points based on the mapping results; and a perception module for dynamically determining the minimum and maximum lengths of input data at the input transfer points, optimizing the input transfer points of firmware fuzz testing, and dynamically calculating the retained data length. This application can improve the efficiency of fuzz testing.

Systems and methods for agentless GitOps and custom resources for application orchestration and management. A system includes a bare metal server running a cloud native application and a plurality of clusters running on the bare metal server, wherein at least a portion of the plurality of clusters executes an application. The system includes a data center automation platform responsible for service management and orchestration for the bare metal server, wherein the data center automation platform subscribes to a git repository to receive updates pertaining to the application, and wherein a read only token is established between the git repository and the data center automation platform.

An orchestrator manages password rotation bare metal servers that lack an agent for performing password rotation. A user configures parameters for performing password rotation such as the frequency (e.g., cron command) and password rules for a bare metal server. Parameters may be associated with a theme that can be applied to one or multiple bare metal servers. When indicated by the frequency, the orchestrator runs a workflow with respect to one or more bare metal servers in order to change the passwords and update a vault store recording the passwords.

The application discloses a media cloud desktop management method and system based on a bare metal server. The application comprises the following method: providing the basic resources of the cloud desktop in a bare metal pooling mode, adding instance matching specifications suitable for different vGPU use scenarios in the media cloud desktop system before the cloud desktop is created, creating cloud desktop template kits belonging to different virtual laboratories according to the corresponding specifications, and connecting various tool-type cloud desktops belonging to different laboratories through network access mode of the client. The application provides a media cloud desktop management method and system based on a virtual laboratory mode of an elastic bare metal server, realizes efficient management of the vGPU resources of the bare metal pooling, provides a convenient management mechanism for cloud desktop authorization and recycling, reduces the idle rate of the tool-type desktops, greatly improves the desktop use efficiency of the vGPU, realizes efficient operation and maintenance and elastic publishing and deployment capabilities of the exclusive desktop and a large number of multi-version desktop templates.

The application discloses a kind of about bare machine server BIOS automation deployment method, it is related to automation programming technical field, bare machine server carries out BMC management port initialization configuration, opens BMC setting Https (web), SSH, Redfish and IPMI service agreement, by bare machine server SSH, Redfish and different equipment special tool, from bare machine server BMC management port call relevant protocol, by system automatic judgment uses what protocol or tool is directed to different manufacturer's bare machine server and carries out BIOS data acquisition.The application is by system automatic judgment uses what protocol or tool is directed to different manufacturer's bare machine server and carries out BIOS data acquisition, multiple data acquisition protocols are used simultaneously, by system automatic determination uses data acquisition method, ensure that the most complete BIOS configuration item parameter is obtained, reduce manual participation manual data acquisition, by using BIOS template packing and encapsulating automation deployment method, unified generation standardization BIOS template, by system automatic deployment, without manual participation, speed up deployment time.

An integrated circuit includes a host interface, operatively coupled to a host device executing a tenant operating system (OS) on bare metal, and one or more hardware accelerators, operatively coupled to the host interface. The one or more hardware accelerators encrypt a swap file retrieved from the host device and initiate transfer of the encrypted swap file to a network storage device coupled to a cloud-based server. A central processing unit (CPU) is operatively coupled to the host interface and, with the one or more hardware accelerators, are to host a hardware-accelerated snapshot client that coordinates snapshot activities, associated with the encrypted swap file, between a snapshot manager, hosted by the cloud-based server, and a snapshot user interface executed on the host device.

The invention discloses a network configuration method and device, related equipment, a storage medium and a computer program product, and is applied to the technical field of cloud computing. The method comprises the following steps: in response to an application request of a user for applying for a bare metal server, according to link layer discovery protocol information of a plurality of neural network processing units (NPUs) in a target bare metal server, respectively distributing network configuration information for the NPUs to obtain parameter plane network information of the target bare metal server; updating a configuration drive file of the target bare metal server based on the parameter surface network information; and controlling the target bare metal server to execute the configuration drive file, and triggering the target bare metal server to perform network configuration on the plurality of NPUs when the configuration drive file is executed.

The invention discloses a traffic forwarding method, device and equipment and a storage medium, relates to the technical field of traffic forwarding, and is applied to a cloud platform system, a bare metal server, a computing node and a switch are deployed in the cloud platform system, and a virtual machine and a node network bridge are deployed on the computing node. The method comprises the following steps: in response to access traffic received by a port of a switch, analyzing the access traffic to obtain an access source address and an access destination address; acquiring a virtual forwarding routing table corresponding to the port, and judging the flow direction of the access flow in combination with the access source address and the access destination address; and according to the flow direction of the access traffic, the access traffic is correspondingly forwarded after being encapsulated or de-encapsulated. According to the method, the switch is used as an enhanced gateway, so that the technical problems of bandwidth bottleneck, difficulty in realizing physical network card isolation, complex deployment and high cost dependence in the existing traffic forwarding scheme are solved, and efficient and stable two-layer and three-layer traffic communication of the virtual machine and the physical machine in the cloud platform is realized.

This invention provides a container cloud deployment method, apparatus, and device based on the DPC protocol. The method includes: creating a single master node cluster and an empty node pool through a container management platform, and then including bare metal nodes in the empty node pool; wherein the bare metal nodes have a storage access environment that supports the DPC protocol; sequentially installing a DPC client and a third-party container plugin on the bare metal nodes, and then loading the image of the third-party container plugin into the local repository of the container management platform; creating an instance based on an application template generated from the loaded image, and assigning a unique name to the instance; deploying a storage interface tool on the master node and configuring connection parameters, and then creating a storage class associated with the instance on the container management platform; creating a PVC based on the storage class to verify whether the storage link is available; if the verification is successful, the container cloud deployment is considered successful. This invention significantly improves the efficiency of container access to storage by introducing DPC technology into the container cloud deployment scheme.

The application discloses a network configuration method and device, related equipment, a storage medium and a computer program product, and applies to the technical field of cloud computing. The method comprises the following steps: in response to an application request of a user applying for a bare metal server, network configuration information is respectively allocated to a plurality of neural network processing units (NPUs) in a target bare metal server according to link layer discovery protocol information of the plurality of NPUs, and parameter plane network information of the target bare metal server is obtained; based on the parameter plane network information, a configuration driver file of the target bare metal server is updated; and the target bare metal server is controlled to execute the configuration driver file, and the configuration driver file triggers the target bare metal server to perform network configuration on the plurality of NPUs when being executed.

A cluster configuration request to form a hyperconverged computing infrastructure (HCI) cluster in a cloud computing environment is processed. Based on the cluster configuration request and any other cluster specifications, a plurality of bare metal computing nodes of the cloud computing environment are configured to operate as an HCI cluster. First, a tenant-specific secure network overlay is formed on a first set of tenant-specific networking hardware resources. Then, the tenant-specific secure network overlay is used by an orchestrator to provision a second set of tenant-specific networking hardware resources. The second set of tenant-specific networking hardware resources are configured to interconnect node-local storage devices into a shared storage pool having a contiguous address space. Top-of-rack switches are configured to form a network overlay on the first set of tenant-specific networking hardware resources. Then, top-of-rack switches are configured to form a layer-2 subnet on the second set of tenant-specific networking hardware resources.

The application belongs to the technical field of server automatic operation and maintenance, and discloses a kind of bare metal server automation deployment method and system.The method is established hardware communication connection by edge access equipment and target bare metal server, simulates the input peripheral and storage peripheral required for deployment, collects server real-time output picture and identifies current deployment stage state, matches corresponding operation instruction to complete the whole process automatic deployment from firmware configuration to operating system installation.The system includes integrated peripheral simulation unit, picture acquisition unit edge access equipment, and state identification unit, control unit.This scheme does not need to rely on server business network and PXE start support, and the deployment efficiency is greatly improved, the heterogeneous scene deployment success rate is more than 98%, and is suitable for offline computer room, secret data center and other scenes.

This invention provides a method, apparatus, and electronic device for image file processing. It receives image creation requests for system disk data and data disk data, operating independently of a public cloud private network environment. Based on the image creation request, it obtains a first image script and a second image script. Based on the first image script, the second image script, and the image configuration parameters carried in the image creation request, it generates a system image file corresponding to the system disk data and a data image file corresponding to the data disk data. This method can obtain image scripts corresponding to system disk data and data disk data respectively based on image creation requests carrying image configuration parameters. Based on the image scripts and image configuration parameters, it creates images of system disk data and data disk data in a bare metal server. Because users do not need to migrate or install data on the data disk using other methods, it improves the availability of data storage and reduces user operating costs.

The invention provides a bare metal cloud service device, an instance creating and destroying method and physical equipment. The device comprises a data processor DPU bare metal resource pool and a DPU bare metal cloud service. According to the bare metal cloud service device, the DPU intelligent network card is used for replacing an original common network card, and computing, storage and network functions on an original CVM host machine are installed on an operating system of the DPU intelligent network card through the DPU equipment putting module, so that the computing power of a host CPU is released, the network and storage capabilities of bare metal cloud service are improved, and the service efficiency of the bare metal cloud service is improved. The manageability of the bare metal cloud service is enhanced; and the cloud computing elasticity and flexibility of the bare metal cloud service are improved.

The present application belongs to the technical field of metal plastic working, and relates to a method for identifying surface cracking of a blank during hot working of steel. The specific steps are as follows: obtaining an infrared image of the surface of the blank; identifying a contour region of the surface of the blank; calculating the median value of the temperature values or infrared radiation intensity values of all pixel points in the contour region of the surface of the blank, and performing noise reduction processing on the infrared image by using the median value; identifying and calibrating the bare metal surface and the oxide scale covered surface in the contour region of the surface of the blank; calculating the temperature or infrared radiation intensity gradient of each pixel point in the contour region of the surface of the blank; for each identified crack, performing fractal calculation to determine the morphology of the crack, and classifying the possible causes of the crack. The present application solves the problem of online automatic identification of surface cracking of high-temperature metal during hot working, avoids false positives and false negatives caused by manual monitoring, and can output crack morphology data to provide data for detailed technical analysis.

A system for managing a composite information processing system includes an information processing system and a composite information processing system within the composite information processing system, wherein the composite information processing system includes at least one computing resource set, at least one control resource set, and at least one hardware resource set. The system further includes a system control processor configured to obtain a bare metal communication indicating a write of data from the computing resource set, write a first copy of the data to a storage resource of the at least one hardware resource set, write a second copy of the data to a tracking volume, generate a backup of the data using the tracking volume, and store the backup in a storage volume.

Systems and methods for building applications by automatically incorporating application performance data into the application build process are disclosed. By capturing build settings and performance data from prior applications being executed on different computing systems such as bare metal and virtualized cloud instances, a performance database may be maintained and used to predict build settings that improve application performance (e.g., on a specific computing system or computing system configuration).