95 results about "Namespace" patented technology

A system and method for storing data in a memory device. The method includes transmitting, to a host, information indicative of a first allowable maximum size of a first namespace associated with a first IU and a second allowable maximum size of a second namespace associated with a second IU. The first and the second IUs may be of different sizes. The includes comprise receiving configuration information comprising one or more instructions to: generate a first L2P table associated with the first IU based on the first allowable maximum size, and generate a second L2P table associated with the second IU based on the second allowable maximum size and generating the first L2P table and the second L2P table based on the configuration information; and causing first data and second data to be stored in the first namespace and the second namespace using the first and second L2P tables respectively.

A policy-governed network resolution system generates a cryptographically verifiable Resolution Receipt (RR) for each identifier request. An identifier (e.g., a domain name under a BEIDNS / BEIDomain / BEITLD namespace) is routed to a resolver gateway, matched to a basepoint within a curated identifier reservoir, evaluated under a versioned policy container, and authorized by a signed scope token to enforce selective disclosure. The resolver may enrich the context with a knowledge-graph entity identifier, derive a decentralized identity root for Behavioral Economics Identity (BEI), and mint a content-addressable global object key. Minute-grade activity is metered and recorded in the RR, including policy version, reason codes, lifecycle state, audit anchors, and a signature chain, further supporting denial receipts with remediation steps. RR digests may be recorded in append-only logs and optionally anchored to a distributed ledger. Aggregated RR metrics may be streamed for real-time indexing, resource governance, and bounded rollback in IoT and real-estate embodiments.

The application discloses an electronic system, a computing storage device, a host and an operation method, and belongs to the technical field of data storage. The electronic system comprises a computing storage device and a host, wherein the computing storage device and the host are coupled; the host is configured to send a command comprising indication information to the computing storage device; the computing storage device is configured to acquire the indication information; and based on the indication information, the cache data in the memory namespace is generated into snapshot information and stored into a non-volatile memory (NVM) namespace.

A computer system includes physical memory devices of different types that store randomly-accessible data in a main memory of the computer system. In one approach, an operating system allocates memory from a namespace for use by an application. The namespace is a logical reference to physical memory devices in which physical addresses are defined. The namespace is bound to a memory type. In response to binding the namespace to the memory type, the operating system adjusts a page table to map a logical memory address in the namespace to a memory device of the memory type.

In a method of operating a storage device including a first storage device and a second storage device connected to each other via a host device, a data migration request for a first namespace included in the first storage device is received. A second namespace is generated in the second storage device. The second namespace corresponds to the first namespace. A pointer table for performing a data migration operation corresponding to the data migration request is set. First data and second data are migrated to the second namespace based on the pointer table. The first data is stored in the first namespace. The second data is stored in a first buffer memory included in the first storage device and corresponds to the first namespace. Based on the data migration operation being performed, the second data is directly sent from the first buffer memory to the second namespace.

A system includes a memory device and a processing device, operatively coupled with the memory device, to perform operations including: receiving a request to modify one or more regions of the memory device; identifying one or more mapping structures associated with each region of the one or more regions of the memory device; determining that a counter satisfies a threshold criterion, wherein the counter indicates a number of memory access commands at the one or more regions; creating a copy of each mapping structure associated with each region; and modifying the copy of each mapping structure according to the request to modify the one or more regions of the memory device.

File names and inodes are indexed directly in a filesystem namespace consisting of a layered set of key value store (KVS) database logical tables. The KVS is used directly for organizing file and directory metadata on a cluster file system instead of traditional Btree structures. Embodiments provide file deletion in the file system namespace, and other features include snapshot deletion and cleaning the namespace. A name hash index is used to speed filename lookup in the file system namespace. Two key types of INODE and DIRENT are used to encode namespace metadata using self-identify variable length records in the namespace. Point-in-time snapshot copies are also formalized using KVS database operations as well operations on sets of snapshots for operations including garbage collection and data replication.

A system for instantiating distinct network namespaces for each container within a pod is provided. The system includes one or more computer-readable non-transitory storage media embodying software that is operable when executed to instantiate a first network namespace for a pod, determine whether a pod specification includes an indication of an intent to create a second network namespace for the pod, and, responsive to determining that the pod specification includes the indication of the intent to create the second network namespace, instantiate the second network namespace for the pod. The pod includes a logical unit configured to execute one or more containers, in which the pod is managed by a container orchestration system, and the pod specification includes a file including one or more attributes of the pod.

The application discloses a kind of based on OSLC's life cycle heterogeneous data packaging and tracing method, comprising: S1, the data source of each software tool in life cycle is analyzed, determine the data resource type, attribute and semantic association that need to be exposed;S2, according to the principle of covering and minimum principle, filter and limit resource type and attribute;S3, construct semantic packaging mechanism, make namespace, resource class and attribute definition custom glossary;S4, establish resource shape, form semantic constraint framework;S5, according to life cycle link, establish tracing semantic chain, define tracing relationship attribute and form cascade constraint;S6, tracing semantic chain is registered in semantic library in RDF format, realizes automatic identification and forward and backward tracing;S7, build OSLC adapter, generate full-link view by RESTfulAPI and DFS algorithm.The application realizes the semantic uniform packaging and automatic tracing of heterogeneous system data, with the advantages of strong consistency and high expansibility.

The present disclosure relates to a controller and network configuration method. The controller comprises an orchestrator of a virtualized computing infrastructure, wherein the orchestrator is configured to: receive namespace specification data specifying a namespace, a first virtual network for the namespace, and a second virtual network for the namespace; receive virtual execution element specification data specifying a virtual execution element, wherein the virtual execution element specification data comprises a namespace object specifying a namespace of the virtual execution element; and send, based on the namespace specification data and the namespace object, one or more requests to a network controller of the virtualized computing infrastructure to create respective virtual network interfaces of the first virtual network and the second virtual network for the virtual execution element.

Forechannel connections are established from client-side deduplication libraries to a namespace node of a set of namespace nodes formed as a cluster. The namespace nodes are responsible for namespace operations on files managed by a deduplication filesystem. The forechannel connections are responsible for carrying file data between the client-side deduplication libraries and the namespace node. Server-initiated connections are established from the namespace node to the client-side deduplication libraries. The server-initiated connections are responsible for carrying instructions from the namespace node to the client-side deduplication libraries. While a transfer of file data is in progress, the client-side deduplication libraries are instructed over the server-initiated connections to failover the transfer to one or more other namespace nodes. After the failover, the namespace node is upgraded.

A shared file system is maintained that is writable by a first storage system. A read-only view of the shared file system is provided to a second storage system. Within the read-only view, a directory associated with the second storage system is exposed that is writable by the second storage system while the shared file system remains read-only to the second storage system. The directory may be readable by other storage systems accessing the shared file system while write access to the directory is isolated to the associated storage system.

A computer-implemented Universal Quantum Access Key (UQAK) system provides quantum-secure identity authentication, policy-controlled authorization, domain-namespace routing, and interoperable settlement. A namespace resolver resolves a human-readable identifier, parcel identifier, subdomain identifier, or basepoint identifier to a signed endpoint record. An identity module authenticates a subject identity anchor. An event-ingestion module receives a digitally signed event record, transaction request, evidence commitment, or terminal-originated payment event. A Time-Proof engine binds the event to a time reference, validity window, and anti-replay value. A policy container loads a signed, versioned policy bundle or PackSet. A transaction authorization and minting engine executes a single atomic state transition that authorizes a protected action, binds an associated token, value unit, certificate, entitlement, or authorization state, generates a decision or mint receipt, and anchors a digest in a tamper-evident data structure. A clearing and settlement module generates a settlement receipt.

This application discloses a method and apparatus for isolating Android cloud mobile phone devices based on process namespaces. The method includes: adding a home namespace field to device objects in the Linux kernel, and controlling the visibility scope of the device objects at multiple levels based on the value of the home namespace field; responding to a system directory traversal request, outputting matching directory entries based on the matching result of the process namespace of the current process and the home namespace field of the device object; responding to a system file access request, executing a matching access request based on the matching result of the process namespace of the current process and the home namespace field of the device object to which the system file belongs; and responding to a device event sending request, sending the device event to the corresponding process namespace based on the home namespace field of the device object. Through the above methods, this application can achieve fine-grained device isolation and dedicated namespace management.

The application relates to a method, system, device and medium for realizing multi-tenancy based on directory partitioning. In the multi-tenancy mode, a first target root directory with a true tenant root directory attribute is created, and a target first-level subdirectory with a true target working directory attribute of a tenant is created under the first target root directory according to the tenant; the target first-level subdirectory is only visible and accessible to the corresponding tenant; a target second-level subdirectory with a true target namespace working directory attribute of a user under the corresponding tenant is created under the target first-level subdirectory, and the target second-level subdirectory is only visible and accessible to the corresponding user to realize resource isolation between different users; and the user can create a subdirectory with a true ordinary directory attribute under the corresponding target second-level subdirectory to realize file management index. The application realizes resource isolation between tenants and users by using directory partitioning of a file system directory, so as to meet the multi-tenancy and multi-user demand.

The embodiment of the present disclosure provides a kind of Android cloud mobile phone virtual WiFi implementation method of simulation, belong to communication technical field, specifically include: the identification of target container is acquired and its network namespace is determined;Virtual wireless entity is created and registered, including the wiphy / radio of binding and the visible wlan0 interface;Create and start hotspot side AP simulation entity, configure SSID and authentication parameter, and generate 802.11 management frame;In target Android container, start wpa_supplicant, complete association authentication by nl80211 interface and host computer interaction;After authentication succeeds, network address is allocated by AP simulation entity;Configuration network address conversion and forwarding rule, traffic is mapped to the physical external interface of host computer, and the network connectivity of container is realized.The simulation degree, interface consistency, compatibility and migratability are improved by the scheme of the present disclosure.

Provided is a storage device, memory processor, and an operating method thereof. More specifically, provided is an operating method of a storage device including acquiring quality of service (QoS) information, obtaining a read request or write request for data in the NVM from a host, and allocating a logical-to-physical (L2P) slot of a plurality of L2P slots including L2P mapping information corresponding to the data to at least one namespace among a plurality of namespaces of a dynamic random-access memory (DRAM) based on the QoS information.

This invention provides a network system, a network worker node, network management and control, and a network isolation method. The network system includes: a container network server interface deployed within the network worker node; the container network server interface is used to: create a corresponding identifier for the container when a container is created within the network worker node, request network management to create a virtual network interface card (NIC) corresponding to the container, and send a virtual port creation request generated based on the virtual NIC and identifier to network management; the first communication port of the virtual NIC is associated with the main namespace of the network system's operating system, and the second communication port of the virtual NIC is associated with the container's namespace; network management is used to create virtual ports according to the virtual port creation request, assign IP addresses to the virtual ports, and feed back the IP addresses to the container network server interface; and a virtual infrastructure network is used to process network data based on the identifier information and IP address of the virtual NIC. This invention can achieve network security isolation.

The application discloses a Netfilter connection tracking counting and limiting method and device, and belongs to the technical field of computer data processing. The method comprises the following steps: constructing tracking counting and limiting checking logic for an existing connection tracking module in a Netfilter framework, and triggering after a data packet enters a protocol stack of Linux. In the tracking counting and limiting checking logic, a connection tracking table in the framework is inquired. If the inquiry is not hit, it is judged whether the current system is provided with a counting and limiting function based on a namespace. If yes, corresponding +1 operation is performed on corresponding statistical parameters according to the namespace and a protocol type. The application realizes connection number counting and limiting in the namespace dimension by binding the namespace and the connection tracking depth.

This application relates to a method for processing commands and a storage device. The method for processing commands includes: in response to receiving a read command or write command to access a first namespace, processing the read command or write command according to the state of the first namespace; wherein the state of the namespace includes an unlocked state and a locked state; the unlocked state includes a passwordless unlocked state and a password-protected unlocked state; if the first namespace is in a passwordless unlocked state, processing the read command or write command to move data in the physical address space corresponding to the first namespace; if the first namespace is in a password-protected unlocked state or a locked state, not processing the read command or write command, generating and sending a prompt message to the host indicating that the read command or write command processing failed.

Partition hints for use with a zoned namespace (ZNS) storage device. The partition hints include one or more of a first hint indicating that the partition is part of a group of multiple partitions, a second hint indicating that the partition is to be quickly filled, or a third hint indicating that the partition is associated with a background operation. The first hint is structured to instruct the ZNS storage device to allocate a first storage resource to the partition that is physically adjacent to a second storage resource reserved for other partitions in the multiple partitions. The second hint is structured to instruct the ZNS storage device to bypass a staging area when writing to the partition. The third hint is structured to instruct the ZNS storage device to deprioritize at least one operation of writing to the partition or to bypass the staging area when writing to the partition.

This application relates to the field of artificial intelligence control, providing an intelligent agent management system and method based on a large language model. The system includes a session-level sub-agent management unit, derived from the sub-agent manager of the intelligent agent framework, used to configure a traceable and unique identity (session ID) for each child intelligent agent connected to the parent intelligent agent. Events of the child intelligent agents are recorded in the namespace corresponding to the identity ID in a shared database. Parent and child intelligent agents sharing the same session are connected to the same shared database. Events generated when a child intelligent agent runs its execution chain are stored in the namespace corresponding to the identity ID in the shared space. Event records corresponding to different identity IDs in the shared database are independent of each other, avoiding conflicts and eliminating the need to create a separate session directory for each child intelligent agent at the file system level.

Embodiments of the present application provide a version upgrade method and device of an HDFS cluster, electronic equipment and a storage medium, and relate to the technical field of big data storage. The method comprises: migrating and deploying a target NameNode node included in a low-version HDFS cluster to a high-version HDFS cluster, and forming a third NameNode group in the high-version HDFS cluster by using the target NameNode node and a plurality of new NameNode nodes; the third NameNode group manages a third namespace; the low-version HDFS cluster is an HDFS cluster with a single namespace; the high-version HDFS cluster is an HDFS cluster with a plurality of namespaces and an RBF mechanism; and the target NameNode node is a to-be-active NameNode node in the low-version HDFS cluster; migrating critical business data included in the low-version HDFS cluster to the high-version HDFS cluster; migrating and deploying other NameNode nodes included in the low-version HDFS cluster to a first NameNode group in the high-version HDFS cluster; and removing the plurality of new NameNode nodes from the high-version HDFS cluster. In this way, a version upgrade with no user awareness and low risk is achieved.

Methods, systems, and apparatus, including computer programs encoded on computer-storage media, for managing software in cloud computing platforms and other server systems. In some implementations, a system obtains a set of software modules from a repository of a software provider. Based on the set of software modules, an application programming interface (API) gateway and a cluster operator module are installed in a management namespace of a cluster of processing nodes. One or more applications are installed in an environment namespace. The system maintains a set of custom resources outside the environment namespace, wherein the custom resources provide customizations that are applied to the one or more applications in the environment namespace. Software in the management namespace is configured to apply the customizations after software of the one or more applications in the environment namespace is updated.

Programs run in different file module specific namespaces do not share the same file system. For every port number, there is both a TCP port and a UDP port. However, UDP ports are more rarely used. Additionally, UDP ports and TCP ports are in the same (network module specific) namespace. Accordingly, a test script attempts to reserve a UDP port with a particular port number. If the reservation is successful, the test script creates an instance of a program that will use the corresponding TCP port. If the reservation fails, another test script has already reserved that port and this test script tries a different port number. As a result of using the UDP port-based reservation scheme, test execution scripts are enabled to coordinate the reservation of TCP ports, consistent with operating system namespaces.