Hypervisor Guest Software Update via Dedicated Channel

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Virtual machines without external network connections face challenges in receiving software updates, such as security fixes and bug fixes, due to their isolation from public networking.

Innovation Solution

A hypervisor manages the download and distribution of guest software updates through a dedicated channel, allowing updates to be streamed from the hypervisor to virtual machines without the need for external networking, providing control over update content and timing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If VMs are isolated from external public networking for security purposes, then security is improved, but the ability to receive software updates deteriorates

Engineering Contradiction:

ImprovesecurityVSAvoidsoftware update capability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The hypervisor acts as an intermediary between the external network and isolated VMs. It downloads updates from external sources and delivers them to VMs through a virtual channel, allowing VMs to receive updates without direct network access. This resolves the contradiction by maintaining security isolation while enabling update capability through the mediating hypervisor.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If VMs have no external network connection, then security isolation is improved, but update management complexity increases

Engineering Contradiction:

Improvesecurity isolationVSAvoidupdate management

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The hypervisor automatically performs update management tasks including downloading, verifying, and distributing updates to VMs. This self-service approach eliminates the need for manual update management in isolated environments, reducing complexity while maintaining security isolation. The system serves itself by automating the entire update lifecycle.

Inventive Principle:

Principle #25Self-service

3Device complexity

If updates are downloaded by the hypervisor instead of VMs, then VM simplicity is improved, but hypervisor workload increases

Engineering Contradiction:

ImproveVM configurationVSAvoidhypervisor processing load

Core Design Contradiction:

Device complexityVSPower

Solution Approach 1:

The update management functionality is segmented into separate components: the hypervisor handles download and distribution, while a dedicated update manager component handles verification and installation coordination. This segmentation distributes the workload appropriately, reducing the burden on the core hypervisor while maintaining VM simplicity.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS9021465B2Downloading guest software updates by a hypervisor

Publication Date: 2015.04.28 RED HAT ISRAEL

AI summary

A method and system for providing guest software updates to a host computer system. The hypervisor in the host computer system downloads an update to guest software that runs on a virtual machine associated with the hypervisor. The hypervisor determines the content of the update to be sent to the virtual machine. The hypervisor then sends the content of the update to the virtual machine via a dedicated channel between the hypervisor and the virtual machine. Thus, a guest without external networking or even no network stack can be updated.