Sharing a java virtual machine

Patent metadata

Field	Value
Publication number	US-10237126-B2
Application number	US-201715588644-A
Country	US
Kind code	B2
Filing date	May 6, 2017
Priority date	Oct 25, 2013
Publication date	Mar 19, 2019
Grant date	Mar 19, 2019

Abstract

A JAVA virtual machine with multiple tenants is shared by allocating an IP address to each of the tenants, creating a separate virtual network interface for each of the tenants and configuring each separate virtual network interface with the respective separate IP address allocated for each tenant. For each of the tenants, network operations are performed via the virtual network interface created for that tenant, to provide for network isolation of each tenant sharing a JAVA virtual machine.

First claim

What is claimed is:

1. A method for sharing a JAVA virtual machine comprising a plurality of tenants, the method comprising:
allocating, by a computer system, a separate IP address, from among a plurality of IP addresses, to each tenant of the plurality of tenants of a multi-tenant java virtual machine;
creating, by the computer system, each separate virtual network interface, from among a plurality of separate virtual network interfaces on demand, for each tenant of the plurality of tenants through a virtualization technology application program interface on top of an operating system hosting the multi-tenant java virtual machine which resides on top of a node layer;
configuring, by the computer system, each separate virtual network interface with the respective separate IP address allocated for each tenant, wherein one or more network operations for each tenant are performed via each separate virtual network interface created for each tenant; and
performing, by the computer system, for each tenant of the plurality of tenants, the one or more network operations for each tenant via the separate virtual network interface configured for each tenant by intercepting the one or more network operations of each tenant and redirecting the one or more network operations transparently to the separate virtual network interface configured for each tenant.

2. The method according to claim 1 , further comprising:
in response to a termination of a particular tenant from among the plurality of tenants, reclaiming, by the computer system, a particular IP address allocated to the particular tenant from among the plurality of IP addresses and reclaiming a particular virtual network interface allocated to the particular tenant from among the plurality of virtual network interfaces.

3. The method according to claim 1 , further comprising:
identifying, by the multi-tenant java virtual machine, each tenant of the plurality of tenants via separate tenant context information for redirecting the one or more network operations transparently to the separate virtual network interface configured for each tenant; and
binding each tenant to both a local host shared between the plurality of tenants sharing the multi-tenant java virtual machine and to a separate port mapped to the respective separate IP address allocated for each tenant.

4. The method according to claim 1 , wherein creating, by the computer system, each separate virtual network interface, from among a plurality of separate virtual network interfaces on demand, for each tenant of the plurality of tenants through a virtualization technology application program interface on top of an operating system hosting the multi-tenant java virtual machine which resides on top of a node layer further comprises:
creating each separate virtual network interface of the plurality of separate virtual network interfaces through the virtualization technology application program interface for creating a virtual machine monitoring program not available to a native application programming interface of the multi-tenant java virtual machine to securely manage one or more guest operating systems comprising the operating system.

5. A system for sharing a JAVA virtual machine comprising a plurality of tenants, the system comprising:
at least one processor coupled to a memory and operative to allocate a separate IP address, from among a plurality of IP addresses, to each tenant of the plurality of tenants of a multi-tenant java virtual machine;
the at least one processor operative to create each separate virtual network interface, from among a plurality of separate virtual network interfaces on demand, for each tenant of the plurality of tenants through a virtualization technology application program interface on top of an operating system hosting the multi-tenant java virtual machine which resides on top of a node layer;
the at least one processor operative to configure each separate virtual network interface with the respective separate IP address allocated for each tenant, wherein one or more network operations for each tenant are performed via each separate virtual network interface created for each tenant; and
the at least one processor operative to perform, for each tenant of the plurality of tenants, the one or more network operations for each tenant via the separate virtual network interface configured for each tenant by intercepting the one or more network operations of each tenant and redirecting the one or more network operations transparently to the separate virtual network interface configured for each tenant.

6. The system according to claim 5 , further comprising:
the at least one processor operative to, in response to a termination of a particular tenant from among the plurality of tenants, reclaim a particular IP address allocated to the particular tenant from among the plurality of IP addresses and reclaim a particular virtual network interface allocated to the particular tenant from among the plurality of virtual network interfaces.

7. The system according to claim 5 , wherein each tenant of the plurality of tenants is identified by the multi-tenant java virtual machine via separate tenant context information for redirecting the one or more network operations transparently to the separate virtual network interface configured for each tenant and each tenant is bound to both a local host shared between the plurality of tenants sharing the multi-tenant java virtual machine and to a separate port mapped to the respective separate IP address allocated for each tenant.

8. A computer program product for sharing a JAVA virtual machine comprising a plurality of tenants, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to:
allocate, by the computer, a separate IP address, from among a plurality of IP addresses, to each tenant of the plurality of tenants of a multi-tenant java virtual machine;
create, by the computer, each separate virtual network interface, from among a plurality of separate virtual network interfaces on demand, for each tenant of the plurality of tenants through a virtualization technology application program interface on top of an operating system hosting the multi-tenant java virtual machine which resides on top of a node layer;
configure, by the computer, each separate virtual network interface with the respective separate IP address allocated for each tenant, wherein one or more network operations for each tenant are performed via each separate virtual network interface created for each tenant; and
perform, by the computer, for each tenant of the plurality of tenants, the one or more network operations for each tenant via the separate virtual network interface configured for each tenant by intercepting the one or more network operations of each tenant and redirecting the one or more network operations transparently to the separate virtual network interface configured for each tenant.

9. The computer program product according to claim 8 , further comprising program instructions executable by the computer to cause the computer to:
in response to a termination of a particular tenant from among the plurality of tenants, reclaim, by the computer, a particular IP address allocated to the particular tenant from among the plurality of IP addresses and a particular virtual network interface allocated to the particular tenant from among the plurality of virtual network interfaces.

10. The computer program product according to claim 8 , further comprising program instructions executable by the computer to cause the computer to

Assignees

• IBM

Inventors

• Cai Junjie
• Chen Lei
• Gao Weiwei
• Li Sanhong

Classifications

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• H04L41/0806

  for initial configuration or provisioning, e.g. plug-and-play · CPC title

• H04L41/0803 Primary

  Configuration setting · CPC title

• H04L61/2015

  Electricity · mapped topic