Secure Guest Resource Reclaiming for Faster Guest Removal
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing environments face inefficiencies in removing secure guests, particularly due to the time-consuming process of coextensively clearing all resources associated with secure guests, which can lead to high memory pressure and slow guest removal.
Innovation Solution
Implementing a method for asynchronous reclaiming of secure guest resources, allowing resources like guest memory to be left protected and available for reuse after the secure guest is removed, with the reclaiming process occurring separately from the guest removal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If all secure guest resources are reclaimed coextensively with guest removal, then security integrity is maintained, but removal speed decreases and memory pressure increases
Solution Approach 1:
The patent segments the resource reclaiming process from the guest removal process. Instead of reclaiming all resources simultaneously with guest removal, the patent separates these operations into distinct phases: the guest is removed first, and resource reclamation occurs subsequently through background processes. This segmentation allows the guest removal to complete quickly while resource reclamation proceeds asynchronously, resolving the contradiction between removal speed and resource reclaim time.
Solution Approach 2:
The patent performs preliminary actions by marking resources for reclamation during guest removal without actually reclaiming them immediately. The resources are flagged as available for reuse while the actual reclamation occurs in the background. This preliminary marking allows the guest removal to proceed rapidly while setting up the conditions for subsequent resource reclamation without blocking the removal process.
2Productivity
If secure guest resources are reclaimed immediately upon guest removal, then memory pressure is reduced, but the removal process becomes slower
Solution Approach 1:
The patent maintains continuity of useful action by implementing background processes that continuously reclaim resources after guest removal. Instead of stopping the removal process to reclaim resources, the system continues the removal operation while simultaneously executing resource reclamation in the background. This continuous operation improves system throughput by ensuring that resource reclamation does not interrupt the guest removal workflow.
Solution Approach 2:
The patent implements self-service mechanisms where the system automatically manages resource reclamation without requiring synchronous intervention. Background processes autonomously identify and reclaim resources from removed guests, allowing the main removal operation to proceed independently and rapidly. This self-service approach decouples the removal speed from resource reclaim timing, enabling faster removal operations.
3Reliability
If resources are held until fully reclaimed, then security is maintained, but resource availability for reuse is delayed
Solution Approach 1:
The patent performs preliminary actions by marking resources as available for reuse before the actual reclamation process completes. Once a guest is removed, its resources are immediately flagged as available, allowing new guests to allocate and use these resources without waiting for the background reclamation process to finish. This preliminary availability marking maintains security through proper state tracking while significantly reducing the time resources remain unavailable.
Solution Approach 2:
The patent introduces an intermediary state between resource allocation and full reclamation. Resources transition through a marked-available state that serves as an intermediary, allowing the system to balance security requirements with resource availability needs. This intermediary state enables resources to be reused by new guests while the background process completes the actual reclamation, resolving the contradiction between security maintenance and resource availability timing.
Data Source
AI summary
Deferred reclaiming of secure guest resources within a computing environment is provided, which includes initiating, by a host of the computing environment, removal of a secure guest from the computing environment, while leaving one or more resources of the secure guest to be reclaimed asynchronous to the removal of the secure guest. The deferring also includes reclaiming the one or more secure guest resources asynchronous to the removal of the secure guest, where the one or more secure guest resources are available for reuse as the one or more secure guest resources are reclaimed asynchronous to the removal of the secure guest.