Back to results
US 10,095,534 B2Granted
Guest controlled virtual device packet filtering
AssigneeRed Hat Israel, Ltd.
InventorMichael S. Tsirkin
Life of this patent
Estimating the term…
Abstract
In response to detecting a change to a host hardware configuration, a hypervisor sends a notification of the change to a guest operating of a first virtual machine, the first virtual machine networked with one or more additional virtual machines. The hypervisor filters a networking packet from the guest operating system in view of the change to the host hardware configuration. In response to receiving from the guest operating system an indication that the change to the host hardware configuration has been recorded by the guest operating system, the hypervisor, disables filtering of one or more additional networking packets from the guest operating system.
Claims20
A method comprising:
- receiving, by a processing device-executing a hypervisor, a networking packet from a guest operating system of a first virtual machine, the first virtual machine networked with one or more additional virtual machines, wherein the networking packet is directed from the guest operating system of the first virtual machine to the one or more additional virtual machines;
- in response to detecting a change to a host hardware configuration, sending, by the hypervisor, a notification of the change to the guest operating system of the first virtual machine;
- filtering, by the hypervisor, the received networking packet in view of the change to the host hardware configuration, wherein the filtering to determine whether to forward the networking packet to the one or more additional virtual machines or forgo forwarding the networking packet;
- and
- responsive to receiving from the guest operating system an indication that a guest operating system configuration change corresponding to the change to the host hardware configuration has been made, disabling, by the hypervisor, filtering of one or more additional networking packets from the guest operating system of the first virtual machine directed to the one or more additional virtual machines.
2 more elements
A computing apparatus comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, to execute a hypervisor to:
- receive a networking packet from a guest operating system of a first virtual machine, the first virtual machine networked with one or more additional virtual machines, wherein the networking packet is directed from the guest operating system of the first virtual machine to the one or more additional virtual machines;
- filter the networking packet from the guest operating system in view of a host hardware configuration, wherein the filtering to determine whether to forward the networking packet to the one or more additional virtual machines or forgo forwarding the networking packet;
- and
- responsive to receiving from the guest operating system an indication that a guest operating system configuration change corresponding to the change to the host hardware configuration has been made, disable filtering of one or more additional networking packets from the guest operating system of the first virtual machine directed to the one or more additional virtual machines.
4 more elements
A non-transitory computer readable storage medium, having instructions stored therein, which when executed by a processing device of a computer system, cause the processing device to:
- receive, by the processing device executing a hypervisor, a networking packet from a guest operating system of a first virtual machine, the first virtual machine networked with one or more additional virtual machines, wherein the networking packet is directed from the guest operating system of the first virtual machine to the one or more additional virtual machines;
- in response to detecting a change to a host hardware configuration, send, by the hypervisor, a notification of the change to the guest operating system of the first virtual machine;
- filter, by the processing device executing the hypervisor, the received networking packet in view of the change to the host hardware configuration, wherein the filtering to determine whether to forward the networking packet to the one or more additional virtual machines or forgo forwarding the networking packet;
- responsive to receiving from the guest operating system an indication that a guest operating system configuration change corresponding to the change to the host hardware configuration has been made, disable, by the processing device executing the hypervisor, filtering of one or more additional networking packets from the guest operating system of the first virtual machine directed to the one or more additional virtual machines;
- and
- responsive to receiving a notification from the guest operating system to enable filtering, enable, by the processing device executing the hypervisor, filtering of the one or more additional networking packets from the guest operating system of the first virtual machine directed to the one or more additional virtual machines.
3 more elements
Dependencies are inferred from the claim text.