US20080201455A1

Movatterモバイル変換

Info

Publication number: US20080201455A1
Application number: US12/032,477
Authority: US
Inventors: Syed M. Amir Husain
Original assignee: Individual
Current assignee: Citrix Systems Inc
Priority date: 2007-02-15
Filing date: 2008-02-15
Publication date: 2008-08-21
Also published as: US20080201414A1; US20160162321A1; US9747125B2; US20080201711A1; US8176486B2; US9270781B2; US20080201479A1

Abstract

Various embodiments of a system and method for moving execution of a virtual machine from a first server computer to a second server computer are disclosed. The first server computer and the second server computer may implement different types of virtualization platforms. The first server computer may be configured to execute a first virtual machine within a first virtualization platform, create snapshot information for the first virtual machine, and transmit the snapshot information to the second server computer. The second server computer may be configured to create a second virtual machine within a second virtualization platform, where the second virtualization platform is a different type of virtualization platform than the first virtualization platform. The second server computer may set the second virtual machine to a state corresponding to the state of the first virtual machine using the snapshot information.

Description

PRIORITY CLAIM

The present application claims priority to U.S. provisional patent application Ser. No. 60/889,994 titled, “Virtualization Methods for a Blade Computing System,” which was filed on Feb. 15, 2007, whose inventor was Syed Mohammad Amir Husain.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates generally to a server computer system including a plurality of server computers, where each server computer executes virtualization platform software. More particularly, the invention relates to a system and method for moving execution of a virtual machine across different types of virtualization platforms.

2. Description of the Related Art

Many commercial businesses and enterprises make extensive use of personal computers (PCs) in their daily operations. Typically, each user of a PC in the enterprise has a networked PC at his/her desk or work area. As the number of networked computer systems utilized in an enterprise increases, the management of resources in the network may become increasingly complex and expensive. Some of the manageability issues involved in maintaining a large number of networked computer systems may include ease of installation and deployment, the topology and physical logistics of the network, asset management, scalability (the cost and effort involved in increasing the number of units), troubleshooting network or unit problems, support costs, software tracking and management, as well as the simple issue of physical space, be it floor space or room on the desktop, as well as security issues regarding physical assets, information protection, software control, and computer virus issues.

Many of these issues may be addressed by centralizing the locations of computing resources. For example, each individual user may connect through a network to a server computer system and use computing resources provided by the server computer system.

Some server computer systems are capable of leveraging the physical hardware resources available through virtualization. Virtualization provides the ability for multiple virtual machines to run together on the same physical server computer. For example, each virtual machine may execute its own operating system and may appear to a user of the virtual machine to be the same as an independent physical computer. The software layer that executes on the physical server computer and manages the various virtual machines is called a hypervisor or virtual machine host software. The hypervisor can run on bare hardware (called aType 1 or native VM) or under control of an operating system (called aType 2 or hosted VM).

SUMMARY

Various embodiments of a system and method for moving execution of a virtual machine from a first server computer to a second server computer are disclosed. The first server computer and the second server computer may implement different types of virtualization platforms. For example, virtual machines that execute within the virtualization platform of the first server computer may not be directly supported by the virtualization platform of the second server computer.

According to one embodiment, the first server computer may be configured to execute a first virtual machine within a first virtualization platform. The first server computer may create snapshot information for the first virtual machine, where the snapshot information represents a state of the first virtual machine. The snapshot information may be transmitted to the second server computer.

The second server computer may be configured to create a second virtual machine within a second virtualization platform, where the second virtualization platform is a different type of virtualization platform than the first virtualization platform. The second server computer may set the second virtual machine to a state corresponding to the state of the first virtual machine using the snapshot information.

BRIEF DESCRIPTION OF THE DRAWINGS

A better understanding of the present invention can be obtained when the following detailed description of the embodiment is considered in conjunction with the following drawings, in which:

FIG. 1 illustrates computer systems including peripheral devices coupled to computer blades in a cage, according to one embodiment;

FIG. 2 illustrates a computer blade, according to one embodiment;

FIG. 3 illustrates a computer blade having a power supply, hard drive, and motherboard, according to one embodiment;

FIG. 4 illustrates an example of a blade computing system according to one embodiment;

FIGS. 4B and 4C illustrate examples of a server computer system including a plurality of server computers;

FIG. 5 is a flowchart diagram illustrating one embodiment of a method for maintaining a pool of free virtual machines on a server computer;

FIG. 5B illustrates various examples of algorithms for maintaining the number of free virtual machines in the pool over time;

FIG. 6A is a flowchart diagram illustrating one embodiment of a method for associating a virtual machine with a user on an exclusive basis;

FIG. 6B is a flowchart diagram illustrating one embodiment of a method for assigning a particular virtual machine to a particular user after the virtual machine has been exclusively associated with the user;

FIG. 6C is an example illustrating a plurality of virtual machines on a particular server computer in the server computer system;

FIG. 7A is a flowchart diagram illustrating one embodiment of a method for transferring a virtual machine across server computers;

FIG. 7B is a flowchart diagram illustrating one embodiment of a method for moving execution of a virtual machine from a first server computer that implements one type of virtualization platform to a second server computer that implements a different type of virtualization platform;

FIG. 7C illustrates an example of a system which may implement the method ofFIG. 7B, according to one embodiment;

FIG. 7D illustrates an example of snapshot information used in the method ofFIG. 7B;

FIG. 8 is a flowchart diagram illustrating one embodiment of a method for automatically hibernating an inactive virtual machine;

FIG. 9 illustrates an example of transferring a virtual machine from a server computer to a client computer and back again;

FIG. 10 is a flowchart diagram illustrating one embodiment of a method for dynamically transferring local execution of a virtual machine from a client computer to remote execution on a server computer; and

FIG. 11 is a flowchart diagram illustrating one embodiment of a method for dynamically transferring remote execution of a virtual machine on a server computer to local execution on a client computer.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and are herein described in detail. It should be understood, however, that the drawings and detailed description thereto are not intended to limit the invention to the particular form disclosed, but on the contrary, the intention is to cover all modifications, equivalents and alternatives falling within the spirit and scope of the present invention as defined by the appended claims.

INCORPORATION BY REFERENCE

The following provisional patent application is hereby incorporated by reference:

U.S. provisional patent application Ser. No. 60/889,994 titled, “Virtualization Methods for a Blade Computing System,” which was filed on Feb. 15, 2007, whose inventor was Syed Mohammad Amir Husain.

DETAILED DESCRIPTION OF EMBODIMENTS

Various embodiments of a distributed computer system and associated methods are described herein. A plurality of users located at different physical locations may connect through a network to a server computer system including one or more server computers. In some embodiments, upon connecting to the server computer system, each user may be assigned to a virtual machine executing on a server computer in the system. Various methods for assigning users to virtual machines and managing the virtual machines executing on the various server computers are described herein.

FIGS.1-4—Blade Computer Systems

In some embodiments the server computer system may include a blade server computer system, also referred to herein as a blade computer system. In a blade server computer system, multiple physical server computers, e.g., PC's, may be installed into a central frame or cabinet (e.g., physical chassis). Different sets of human interface hardware (e.g., keyboard, display device, mouse, etc.) for interacting with the server computers may be located at remote locations from the central cabinet. In one approach, each physical server computer in the system may be a “computer on a card”, also referred to as a computer blade or “blade”. For example, each server computer may be included on a circuit card that may include standard computing system components such as a CPU, memory, power supply, and network interface, as well as an extender, e.g., a USB or PCI extender, for communicating with the remote human interface. A server computer system in which a plurality of human interfaces are coupled via a network to a plurality of centralized computer blades is referred to herein as a blade server computing system.

FIGS. 1-4 illustrate components that may be used in various embodiments of a blade computing system. AsFIG. 1 indicates, in one embodiment, the blade computing system may include a plurality of human interfaces20 coupled to a cage orchassis113 that includes a plurality ofcomputer blades105, where eachcomputer blade105 acts as a server computer. Each human interface20 may include at least one peripheral device (e.g., keyboard117, mouse119, monitor121, etc.) that enables a user to provide user input to and/or receive output from arespective computer blade105, or a respective virtual machine executing on acomputer blade105. Eachcomputer blade105 may include various components necessary for computer operations, such as, but not limited to, a processor and a storage medium.

AsFIG. 1 shows, connecting cables151 may connectcomputer blades105 to respective human interfaces20, also referred to as peripheral device groups, through respective device ports or hubs157 (e.g., C-Ports or I-Ports). In one embodiment, each device port may comprise an extender device that may enable transmission of user interface signals (i.e., peripheral device signals) over distances generally not allowed by standard protocols such as USB.

In one embodiment, the human interfaces20 or peripheral device groups, such as thehuman interface20A, may include a keyboard117, a pointing device, e.g., a mouse119, a display device, e.g., a computer monitor121, and/or other peripheral devices for human interface. Acomputer blade105, such ascomputer blade105A, may communicate with the peripheral devices coupled to thecomputer blade105 by sending and receiving encoded human interface signals transmitted over the respective connecting cable151. In one embodiment, acage113, e.g., a metal cabinet or chassis, may have a plurality ofslots111. The

computer blades

105A,105B, and105C may be inserted into the

slots

111A,111B, and111C, respectively. Thecage113 may also include cage connectors (not shown) to couple thecomputer blades105 to their respective connecting cables151.

Thecomputer blades105 may be installed in thecage113 at a central location, while each human interface20 (e.g., each peripheral device group) may be located remotely from thecage113, such as at respective work areas of the users of thecomputer blades105. The separation of the human interfaces20 from thecomputer blades105 may allow easier software installation across a network, such as but not limited to downloading CD-ROMs, and may provide a central location of multiple server computers which may simplify both hardware and software maintenance.

Eachcomputer blade105 may also be coupled to anetwork115 through an on-board network logic (not shown). Thenetwork115 may be a Local Area Network (LAN) or a Wide Area Network (WAN), such as the Internet, although other networks, e.g, wireless, cellular, etc., are also contemplated. As mentioned above, in one embodiment, thecomputer blades105 may be inserted intorespective slots111 of thecage113, and coupled to respective peripheral device groups through the cage connectors (not shown) and connecting cables151. In one embodiment, eachcomputer blade105 may also be coupled to thenetwork115 through the cage connectors (not shown) and a network cable, such as Ethernet cables163.

While the embodiment ofFIG. 1 illustrates a blade computing system, it is noted that in other embodiments the server computer system described herein may include other types and forms of computers. In other words, the server computer system embodiment shown inFIG. 1 is intended to be an example only, and is not intended to limit the types or number of server computers used in the server computer system. For further information regarding the use of multiple computer blades in a system, please see U.S. patent application Ser. No. 09/728,667 titled “Computer On A Card With A Remote Human Interface”.

FIG.2—Computer Blade

Referring toFIG. 2, an embodiment of acomputer blade105 is shown. In one embodiment, thecomputer blade105 may include various components for computer operations, such as, but not limited to, amotherboard207, apower supply210, and ahard drive208, as shown. In one embodiment, themotherboard207, thepower supply210, and thehard drive208 may be coupled to or mounted on aslide drawer frame205. In one embodiment, theslide drawer frame205 may be three rack units high (or approximately 5.25 inches), thus occupying a much smaller space than standard PC units, although otherslide drawer frame205 dimensions may also be used.

Themotherboard207 may be a printed circuit board with components such as, but not limited to, a central processing unit (CPU), memory, and LAN interface. Other types of motherboards and other types of motherboard components are also contemplated. Thecomputer blade105 may include one or more storage devices that implement non-volatile storage, such as ahard drive208, optical drive, and/or flash memory. Thecomputer blade105 may communicate with external systems, e.g., peripheral devices and networks, through anedge connector209. In one embodiment, theedge connector209 may transmit signals such as, but not limited to, network signals, input/output (I/O) signals, video signals, audio signals, and universal serial bus (USB) signals. For example, the edge connector may communicate network signals to a network and encoded human interface signals to a group of peripheral devices.

In one embodiment, thecomputer blade105 may further includepower supply210 mounted on theslide drawer frame205 with an internal power source or coupled to an external power source (not shown) to provide power to thecomputer blade105. Thepower supply210 may convert local main power to an appropriate voltage for thecomputer blade105. Because thecomputer blade105 has anindividual power supply210, if thepower supply210 fails, thecomputer blade105 may be the only computer blade that fails. In one embodiment, a single power supply located in thecage113 may supply power toseveral computer blades105. However, a single power supply for thecage113 may be a single point of failure for thecage113. If the single power supply fails,multiple computer blades105 may also fail, requiring multiple replacement blades. In a system with a single power supply for acage113, thecomputer blades105 may require one or more stand-by replacement blades connected to another power source. If the power supply for thecage113 fails, information from thecomputer blades105 may be copied onto the replacement computer blades from other computer blades in the system to which information from thecomputer blades105 had been previously copied.

AsFIG. 2 also illustrates that, in one embodiment,cage113 may have a plurality of slots, such asslot111, to house thecomputer blade105. Thecomputer blade105 may be inserted into one of theslots111 of thecage113. Thecage113 may include a cage connector (not shown) to couple to theedge connector209 on thecomputer blade105. The cage connector may also include an external second connector (not shown) that is electrically coupled to thecomputer blade105 when thecomputer blade105 is inserted into the slot107. The external second connector may be further coupled to the connecting cables151 (shown inFIG. 1) for communication of the encoded human interface signals to a group of peripheral devices at a remote location. The use of the cage connectors as an intermediate connection betweencomputer blade105 and the connecting cable151 may allow the removal and exchange ofcomputer blade105 without the need to disconnect the connecting cable151 from thecage113. If thecomputer blade105 fails, thecomputer blade105 may be removed and a new computer blade inserted. As noted above, in one embodiment, when acomputer blade105 fails, the user's human interface, e.g., one or more peripheral devices, may be switched to a replacement computer blade105 (possibly in a manner that is transparent to the user), after which the failedcomputer blade105 may be removed and replaced.

FIG.3—Computer Blade Components

Referring toFIG. 3, an embodiment of acomputer blade105 having apower supply210,hard drive208, andmotherboard207 is shown. Thecomputer blade105 may include elements that make up a standard PC, such as, but not limited to, amotherboard207 with various components such as but not limited to a processor, e.g., aCPU306,memory304, andinterface logic302, which may includenetwork logic305, I/O logic307, andinterface logic303, as well as other interface circuitry associated with amotherboard207, configured on a single card. Thenetwork logic305 may include a LAN or WAN connection, such as but not limited to an IEEE 803.2 (10/100 BaseT) Ethernet, and circuitry for connecting to peripheral devices coupled to thecomputer blade105. Thecomputer blade105 may be electrically coupled to the cage113 (shown inFIG. 2) through theedge connector209 that may face to the rear of thecomputer blade105. In one embodiment, thecomputer blade105 may slide into a slot107 (shown inFIG. 2) of the cage113 (shown inFIG. 2), making contact with the cage connector (not shown).

In one embodiment, thecomputer blade105 may further include anetwork interface logic305 included on a printed circuit board for interfacing to a network. Thenetwork logic305 may encode network signals into a format suitable for transmission to the network. Thenetwork logic305 may also receive encoded network signals from the network, and decode the encoded network signals. In one embodiment, themotherboard207 may further include logic supporting PCI slot-based feature cards.

In one embodiment, the components on thecomputer blade105 may be arranged from front to back for thermal efficiency. Theinterface logic302 may be located at the rear of thecomputer blade105, while thepower supply210 andhard disk208 may be located at the front of thecomputer blade105. In one embodiment, thecomputer blade105 may have different slide drawer frame shapes, such as but not limited to square, rectangle, cubic, and three-dimensional rectangular forms. In one embodiment, thecomputer blade105 may have components mounted on either side of thecomputer blade105. Thecomputer blade105 may also have components mounted on both sides of thecomputer blade105. If theslide drawer frame205 has a three-dimensional shape, the components may be mounted on an inside surface and outside surface of theslide drawer frame205.

FIG.4—Example Blade Computing System

FIG. 4 illustrates an example of a blade computing system according to one embodiment. The system includes a plurality of end user consoles80. Each end user console80 may include a human interface20, also referred to as a peripheral device group. Human end users utilize the end user consoles80 to interact with software programs executing oncomputer blades105. The end user consoles80 may be geographically dispersed, while thecomputer blades105 are located in a central location in acage113.

In some embodiments, there may be a one-to-one correspondence between the end user consoles80 and thecomputer blades105. For example, eachcomputer blade105 may correspond to one end user console80. For example, a first user may utilize the end user console80A to interact with software programs executing on acomputer blade105A, a second user may utilize the end user console80B to interact with software programs executing on acomputer blade105B, etc.

In other embodiments, acomputer blade105 may correspond to or host multiple end user consoles80. For example, as described below, in some embodiments eachcomputer blade105 may execute virtual machine host software that enables a plurality of virtual machines to execute on thecomputer blade105. Each virtual machine may correspond to one of the end user consoles80. As an example, acomputer blade105A may instantiate two virtual machines, where one of the virtual machines corresponds to an end user console80A and the other virtual machine corresponds to an end user console80B. In various embodiments, eachcomputer blade105 may execute any number of virtual machines and thus may correspond to or host any number of end user consoles80.

In some embodiments the end user consoles80 may communicate with thecomputer blades105 through a wide area network, such as the Internet. The number of users connected to thecomputer blades105 at any given time may vary. For example, in some embodiments, when a user needs to use a virtual machine he may establish a remote communication session in order to communicate with a virtual machine executing on one of thecomputer blades105. When the user is finished using the virtual machine the remote communication session may end. Thus, at any given time, various numbers of users may have respective remote communication sessions open in order to use respective virtual machines implemented on thecomputer blades105.

In various embodiments, the end user consoles80 may communicate with thecomputer blades105 using any kind of devices and communication software. As one example, an end user console80A may communicate with adedicated computer blade105A through a NeoLinux I/Port client. As another example, an end user console80B may communicate with a VMWare virtual machine executing on acomputer blade105B through an XPe I/Port client. As another example, end user consoles80C and80D may communicate through a web-browser interface vianetwork hardware40 withcomputer blades105C and105D.

In the embodiment illustrated inFIG. 4, the system includes aprimary application server50. Theprimary application server50 is an application server that acts as an interface between theadministrator console70, thedatabase server45, the end user consoles80, and thecomputer blades105. Theprimary application server50 executessystem management software10 that enables the interaction among these components. Theprimary application server50 may also support fault-tolerant failover to a secondaryfailover application server52. Theprimary application server50 may maintain security for the system and interact with the each of the nodes in the system, including thedatabase server45 that stores characteristics, information, and logs related to the system.

Thedatabase server45 may host a management database that includes information about the system. For example, the database may include information aboutcomputer blades105 or other devices in the system, virtual machines executing on thecomputer blades105, users that have been discovered on the network, etc. The database may store various kinds of information about the system environment, including inventory information, logs, mapping information, device health and status information (e.g., resource usage and performance statistics), security information, and management information. In some embodiments the database may be implemented as a relational database, e.g., using software such as Microsoft SQL Server or MySQL Server.

Eachcomputer blade105 may execute software that enables the computer blade to interact with theprimary application server50 and host software applications with which end users interact. For example, in some embodiments eachcomputer blade105 may execute blade client software12. In some embodiments, if acomputer blade105 executes virtual machines then each virtual machine executing on thecomputer blade105 may execute the blade client software12. In some embodiments the blade client software12 may be executed by both the host computer blade and by each virtual machine executing on thecomputer blade105. For example, for ahost computer blade105 with 4 virtual machines, 5 copies of the blade client software12 may be executed—one for thehost computer blade105 and one on each virtual machine instantiation. In other embodiments the blade client software12 may be executed by each virtual machine on ahost computer blade105 but may not be executed by thehost computer blade105 itself.

If acomputer blade105 hosts one or more virtual machines then thecomputer blade105 may also execute virtual machine host software that implements and manages the virtual machines. In various embodiments thecomputer blade105 may execute any kind of virtual machine host software. Examples include Microsoft Virtual Server and VMware Server (or other virtualization platforms from VMWare, Inc.).

In some embodiments, the peripheral devices at each end user console80 may connect to theprimary application server50 via a device port157. The port157 may enable the transmission of device signals between the peripheral devices and theprimary application server50. For example, in one embodiment a port157 may include an I-Port that allows thin-client communication by encoding the device signals using an IP-based protocol. In another embodiment a port157 may include a C-Port that encodes the device signals using a protocol that enables high-performance graphics transmission.

In some embodiments, port software14 may be installed on each device port157 in the system. For example, where a device port157 includes an I-Port, I-Port client software may be installed on the I-Port. In various embodiments, any of various I-Ports may be supported, such as 18800 running Windows XPe, 18820 running Windows XPe, Eon e100 running Windows XPe, 18020 running NeoLinux, Eon e100 running NeoLinux, Capio One running NeoLinux, etc.

The system also includes one or more administrator consoles70. Theadministrator console70 provides an administrative graphical user interface through which an administrator may manage the system, e.g., by interacting with thesystem management software10 executing on theprimary application server50. In various embodiments the system may include any number of administrator consoles70.

The administrative graphical user interface may enable the administrator to manage the system and monitor resources in the system. For example, the administrative graphical user interface may enable the administrator to perform tasks such as: delivering software and driver updates to I/Port thin clients at the end user consoles80; monitoring the health and status of end user consoles,computer blades105,primary application server50,database server45, or other devices in the system; monitoring resource usage on thecomputer blades105; managing virtual machines executing on thecomputer blades105; assigning virtual machines to users; etc. The graphical user interface may provide the administrator an at-a-glance network-wide snapshot of key resource elements.

The administrative graphical user interface may also provide the administrator with control over the provisioning ofcomputer blades105 and their allocation to end user consoles80. For example, in some applications, limiting a user to asingle computer blade105 or virtual machine has the potential to create imbalanced resource utilization. This is because while the same blade or virtual machine may have more than enough capability for a light workload at a particular time, it may provide too little computing or memory capacity for more demanding tasks at other times.

The system may also automate a number of help desk and service tasks that require physical intervention with traditional legacy PCs. For instance, if a virtual machine or blade goes down because of hardware or software failures, the system's sparing functionality may automatically allocate a new virtual machine or blade to the end user, or may enable an administrator to quickly assign a new virtual machine or blade to the end user. Similarly, if the administrator wishes to perform maintenance on a virtual machine or blade and needs to switch a user currently logged into that blade to another resource, he can do so easily using the system's switching-over-IP functionality.

It is noted that in some embodiments the server computer system may include multiple blade computing systems. For example, the server computer system may includemultiple cages113, where each cage includes a plurality ofcomputer blades105. In one embodiment, each of thecages113 may be located physically close to each other, e.g., in the same room or at the same data center. In another embodiment,different cages113 may be located separately from each other. As one example,different cages113 may be located in different buildings of a large organization. As another example,different cages113 may be located in different cities or even different countries.

FIG.4B—Server Computer System Including Multiple Standalone Server Computers

In various embodiments the server computer system to which users connect may include any type and number of server computers. For example, in some embodiments the server computer system may not be implemented using a blade computing system, but may instead include a plurality of standalone server computers, e.g., traditional PCs. For example,FIG. 4B illustrates an example in which the server computer system includes a plurality of server computers106. The server computers106 may be coupled to each other and may also be coupled to anetwork115. Each server computer106 may execute virtual machine host software which implements a plurality of virtual machines executing on the server computer106.

It is also noted that in various embodiments users may utilize any type of client hardware to connect to the server computer system. For example, in the embodiment illustrated inFIG. 4B, each user may utilize a respective client computer system82. Each client computer system82 may be any type of computer system, such as a PC or handheld computing device. A user of a respective client computer system82 may interact with client software in order to connect to the server computer system through thenetwork115. In response to the user connecting to the server computer system, the user may be assigned to one of the virtual machines executing on one of the server computers106.

In various embodiments, thenetwork115 may include any type of network or combination of networks. For example, thenetwork115 may include any type or combination of local area network (LAN), a wide area network (WAN), wireless networks, an Intranet, the Internet, etc. Exemplary local area networks include Ethernet networks, Fiber Distributed Data Interface (FDDI) networks, and token ring networks. Also, the server computers106 and client computers82 may each be coupled to thenetwork115 using any type of wired or wireless connection medium. For example, wired mediums may include Ethernet, fiber channel, a modem connected to plain old telephone service (POTS), etc. Wireless connection mediums may include a wireless connection using a wireless communication protocol such as IEEE 802.11 (wireless Ethernet), a modem link through a cellular service, a satellite link, etc.

It is also noted that in some embodiments the server computer system may include multiple groups or clusters of server computers. For example,FIG. 4C illustrates an example in which three clusters of server computers82 are located in three respective data centers17. Server computers82 in different data centers17 may communicate with each other through a network. In some embodiments the server computers82 in different data centers17 may communicate through a Wide Area Network (WAN). For example, in some embodiments the server computers82 in different data centers17 may communicate through the Internet. For example, each data center17 may be located in a different geographical location, e.g., a different city, country, or continent. In some embodiments, management software may execute in the server computer system to allow an administrator to manage resources on all the server computers82 in the various data centers17 from a central administrative user interface.

As another example, in some embodiments the server computer system may include multiple blade computing systems. For example, the server computer system may include a first chassis including a first plurality ofblades105 and a second chassis including a second plurality ofblades105. In some embodiments, different blade computing systems may be located at different data centers17, e.g., different geographical locations. It is also noted that in some embodiments the system may include a combination of different types of server computers. For example, some server computers may be implemented as computingblades105 installed in a blade computing system, and other server computers may be implemented as standalone computers82.

For the remainder of this disclosure, the term “server computer” may refer to any type of server computer in the server computer system, e.g., acomputing blade105 such as illustrated inFIGS. 1-4 or a standalone server computer82 or PC such as illustrated inFIG. 4B.

Maintaining a Pool of Free Virtual Machines

In some embodiments, each respective server computer (e.g.,blade105 or server computer82) in the server computer system may be configured to execute virtual machine host software that enables the respective server computer to instantiate and execute a plurality of virtual machines. Executing a plurality of virtual machines on a respective server computer may enable multiple users to connect to the respective server computer, e.g., where each user interacts with software applications executed by a respective virtual machine on the respective server computer.

When a user connects to the server computer system, the user may be directed to a one of the server computers (e.g.,blades105 or server computers82) in the server computer system and may be assigned a virtual machine executing on the server computer. Assigning the virtual machine to the user may comprise enabling the user (or a client device used by the user) to communicate with and use the virtual machine. The user may interact through the network with the virtual machine, e.g., by providing input to the virtual machine and receiving output from the virtual machine, similarly as if interacting with a physical computer. For example the communication between the user's client device and the server computer that executes the virtual machine may be performed using any of various remote communication protocols or virtualization protocols, such as VNC, RDP, ICA, TDX, PCoIP, etc.

When the user is directed to a given server computer, if a free virtual machine (that is, a virtual machine not already assigned to and in use by another user) is not currently executing on the server computer then it may be necessary to first create or instantiate a new virtual machine. Creating a new virtual machine may cause the user to experience a delay because of the overhead involved in creating and starting the new virtual machine. Thus, the user's experience may be improved if a free virtual machine which can be assigned to the user is already executing on the server computer in order to avoid the need to start a new one.

However, each virtual machine in an active state of execution on the server computer may utilize the server computer's resources, such as memory and CPU cycles. Thus, it may be wasteful to have many free virtual machines unnecessarily executing on the server computer when they are not in use.

In some embodiments, the management software for the server computer system may enable an administrator to configure the various server computers in the system to maintain respective pools of free virtual machines. For example, for a particular server computer in the system, the administrator may provide user input specifying a pool size of N, which indicates that N free virtual machines should be maintained on the particular server computer, as indicated inblock401 ofFIG. 5. In response, the server computer may create and add N free virtual machines to the pool, as indicated inblock403, e.g., where N is a number greater than or equal to 1. Each of the free virtual machines in the pool may be available to be assigned to a user when needed in response to a user request to connect to the server computer. Thus, while each virtual machine in the pool may not currently be in use, it may be in an active state of execution (e.g., not hibernated to disk) so that it can readily be assigned to a user when necessary.

As indicated inblock405, the number of free virtual machines in the pool may be maintained at the pool size N as users connect and disconnect from the server computer. For example, suppose that the server computer receives a first request to assign a virtual machine to a first user. In response to the first request, the server computer may assign a first virtual machine from the pool to the first user. The user may then use the first virtual machine. For example, a remote communication session may be established between the server computer and a client computer system which the user is using. The client computer system may provide input to the first virtual machine that is running on the server computer and receive output from the first virtual machine through the remote communication session, e.g., using a remote communication protocol or virtualization protocol, such as RDP, VNC, ICA, TDX, PCoIP, etc.

Assigning the first virtual machine to the first user means that the first virtual machine is no longer free, since it is now being used by the user. Thus, the first virtual machine is removed from the pool in response to assigning it to the user.

In order to maintain the number of free virtual machines in the pool at the specified pool size N, the server computer may also add a new free virtual machine to the pool to replace the first virtual machine. In some embodiments, adding the new free virtual machine to the pool may comprise creating the new free virtual machine and adding the new free virtual machine to the pool. For example, the new free virtual machine may not exist at all, or may only exist in the form of a virtual machine image file which has not been instantiated into an active virtual machine. In other embodiments, the new free virtual machine may already exist but may be in a state of hibernation (e.g., execution of the virtual machine may be suspended and its state information may be stored on disk). Thus, the new free virtual machine may be removed from hibernation and returned to an active state of execution and then added to the pool. In this manner, the server computer may maintain a pool of free virtual machines available to be assigned to users.

In other embodiments the number of free virtual machines in the pool may not always be equal to the specified pool size of N, but may vary over time depending on factors such as the pool size and the number of users currently connected to the server computer. For example, in some embodiments the server computer may be configured with a maximum number of concurrent users, e.g., the maximum number of users that can be connected to the server computer (assigned to virtual machines on the server computer). In some embodiments, when a free virtual machine from the pool is assigned to a user, the server computer may compute a decision on whether to add a new virtual machine to the pool to replace the one that was assigned to the user based on the maximum number of concurrent users, the number of users currently assigned to virtual machines on the first server computer, and/or the pool size N.

In various embodiments, any of various algorithms may be used to determine the number of free virtual machines that should be in the pool at any given time, e.g., where the algorithm may be based on various parameters or conditions.FIG. 5B illustrates several examples of how the number of free virtual machines in the pool may vary over time. In these examples, it is assumed that a maximum number of 4 users can be assigned to virtual machines executing on the server computer, and the server computer has been configured with a pool size of N. (In various embodiments a server computer may be configured to allow any maximum number of concurrent users.)

In the example of Table 1, at time T1 there are no active users, and there are 2 free virtual machines in the pool. At time T2, a user has connected to the server computer. One of the free virtual machines in the pool was assigned to the user, and a new free virtual machine was added to the pool to maintain its number at 2. At time T3, a second user has connected to the server computer. Again, one of the free virtual machines in the pool was assigned to the second user, and a new free virtual machine was added to the pool to maintain its number at 2. In this example, the server computer may be configured to maintain the number of free virtual machines in the pool to be the minimum of: a) the pool size; and b) the maximum number of concurrent users (i.e., 4) minus the number of currently active users. Thus, at time T4, after a third user has connected to the server computer and been assigned to one of the free virtual machines in the pool, the virtual machine assigned to the third user is not replaced with a new one, so that there is now only one virtual machine in the pool. Similarly, at time T5, the maximum number of 4 users has been reached, and there are now no free virtual machines in the pool.

Table 2 illustrates another example of an algorithm for maintaining the pool. In this example, the algorithm behaves similarly to the one described above with reference to Table 1 except that a minimum of at least one free virtual machine is kept in the pool at all times. Thus, even though the maximum number of 4 active users has been reached at time T5, there is still one free virtual machine in the pool. In various embodiments, the minimum number may be set to values other than 1.

Various embodiments of the algorithm may use different methods to reduce the number of free virtual machines in the pool as the number of currently active users nears the maximum number of concurrent users. For example, in Table 3 the algorithm behaves similarly as in Table 2, except that at time T4 when there are 3 active users, there is only one free virtual machine in the pool.

Table 4 illustrates another example where the number of free virtual machines in the pool is maintained at the pool size of 2 regardless of how many users are currently connected to the server computer.

When a user disconnects from the server computer, the virtual machine that the user was previously using is now free. In some embodiments, this virtual machine may be added to the pool unconditionally in response to the user disconnecting. In other embodiments, the virtual machine may only be added to the pool if it would not result in the number of virtual machines in the pool becoming greater than the pool size N. In other embodiments, for example, the algorithm may allow the virtual machine to be added to the pool even if it would cause the number of virtual machines in the pool to become greater than the pool size N, unless the difference is more than a threshold maximum.

In some embodiments, if the server computer determines that the virtual machine from which the user disconnected should not be added to the pool then the virtual machine may be hibernated, e.g., by saving its state information to disk and suspending its execution. In other embodiments the virtual machine may be removed from the server computer altogether, e.g., may be completely de-allocated or un-instantiated from the server computer.

In one embodiment the server computer may be configured with a maximum number M of users that can connect to the server computer at one time. In some embodiments the server computer may ensure that the current number of users connected X plus the pool size N is not greater than the maximum number of users M. For example, suppose that the maximum number of users is 5 and the pool size is 2. If there are currently3 or fewer users connected then the server computer may maintain a pool of 2 free virtual machines. However, if 3 users are connected and then a 4th user connects then the 4th user may be assigned to one of the free virtual machines in the pool, but the server computer may not create a new virtual machine to be added to the pool to replace the one that was assigned to the 4th user, since only one additional user can connect to the server computer and there is already one free virtual machine left in the pool.

As a further illustration of the pooling technique described above, consider an example in which a server computer is configured to have a maximum of 6 users. It would be possible to have no free virtual machines running on the server computer and instead to instantiate new virtual machines on demand, e.g., in response to users connecting to the server computer. However, this would require users to wait for a virtual machine to be started up before their connection is successful.

It would also be possible to have 6 virtual machines actively executing on the server computer at all times. For example, when no users are connected, all 6 of the virtual machines would be free; when 1 user is connected, one of the virtual machines would be assigned to the user and the other 5 would be free; etc. However, this may not be an efficient use of resources because each virtual machine uses some of the computer blade's computing resources (e.g., CPU power, memory, network bandwidth, etc.) even if the virtual machine is free.

Instead, a pool of free virtual machines may be maintained at a certain size, e.g., as described above. For example, suppose that the pool size is set to 1 via a Pool Size configuration value specified by an administrator. In this example, the number of virtual machines running at any given time on the server computer may equal the number of currently connected users plus 1 (except when the maximum number of users are connected). When a new user connects to the server computer, one of the virtual machines in the pool may be assigned to the user. Since the virtual machine was already instantiated and in an active execution state before the user connected, the user may be able to quickly connect to the server computer. The size of the free virtual machine pool may be maintained by instantiating a new virtual machine and adding it to the pool. When a user disconnects from the server computer, the number of free virtual machines (including the one that was just un-assigned from the user who disconnected) on the server computer may be examined. If the number of free virtual machines is greater than the Pool Size configuration value, the appropriate number of virtual machines may be hibernated to disk so that the number of free virtual machines once more equals the Pool Size configuration value.

As discussed above, the server computer system may include multiple server computers. An administrator of the server computer system may be able to utilize management software to set different pool sizes for different server computers. For example, an administrative graphical user interface of the management software may enable the administrator to set the pool size for each server computer as desired. In response to the user input from the administrator, the management software may communicate with each server computer to inform them of their respective pool sizes.

In some embodiments, the graphical user interface of the management software may allow the administrator to set a global Pool Size configuration value for all the server computers in the system. For example, the administrator may specify a system-wide pool size of 4 for all server computers. In other embodiments, different pool sizes may be set for different server computers. In one embodiment, the server computers may be grouped into two or more groups. For each group, the administrator may be able to specify a respective group pool size for all the server computers in a particular group. If a global pool size was set and a group pool size is also set then the group pool size may override the global pool size. In some embodiments the administrator may also be able to set pool sizes for individual server computers. If a global pool size or group pool size is set then the individual pool size specified for a particular server computer may override these global and group settings.

Dedicated Virtual Machines

In some embodiments, virtual machines may be used by multiple users. For example, suppose that a user A connects to a particular server computer of the server computer system, and a particular virtual machine is assigned to the user A. Once the user A is done, he may disconnect from the particular server computer. The particular virtual machine may then become available for use by other users. For example, if a user B subsequently connects to the particular server computer, the same virtual machine that user A was previously using may be assigned to the user B.

In other embodiments, it may be desirable to associate a particular virtual machine with a particular user on an exclusive basis, e.g., so that only the particular user can use the particular virtual machine.FIG. 6A is a flowchart diagram illustrating one embodiment of a method for associating a virtual machine with a user on an exclusive basis.

Inblock431, a first virtual machine may be created on a particular server computer. For example, virtual machine hosting software executing on the particular server computer may create the first virtual machine.

In433, an administrative user interface of management software for managing the server computer system may be displayed. The administrative user interface may enable an administrator to configure operation of the various server computers in the server computer system. In particular, the administrative user interface may enable the administrator to associate particular virtual machines with particular users on an exclusive basis. For example, the user interface may enable the administrator to select a particular server computer and view a list of virtual machines that have been created on the particular server computer. The user interface may also enable the administrator to select a first virtual machine from the list of virtual machines, select a first user from a plurality of users defined in the system, and request that the first virtual machine be associated with the first user on an exclusive basis.

As indicated in435, in response to the administrator's user input to the user interface, the system may store information indicating that the first virtual machine is exclusively associated with the first user, e.g., indicating that users other than the first user cannot use the first virtual machine.

FIG. 6B is a flowchart diagram illustrating one embodiment of a method for assigning the first virtual machine to the first user after the first virtual machine has been exclusively associated with the first user. As indicated inblock441, a first request from the first user to connect to the server computer system may be received. The system may determine that the first virtual machine is associated with the first user on the exclusive basis (e.g., by accessing the information stored in block435) and assign the first virtual machine to the first user in response to the first request, as indicated in

blocks

443 and445. Assigning the first virtual machine to the first user enables the first user to communicate with and use the first virtual machine, e.g., through a remote communication session with the first user's client device.

In some embodiments, the first user's request to connect may be sent directly from the first user's client device to the server computer on which the first virtual machine is defined. In other embodiments, the request may be first sent to another server computer in the server computer system and then relayed to the server computer on which the first virtual machine is defined. For example, the server computer system may include a login server which is configured to receive connection requests and direct the requests to the appropriate server computers in the system. For example, the login server may access the stored information indicating that the first virtual machine is exclusively associated with the first user, and in response may direct the user's connection request to the server computer on which the first virtual machine executes.

However, in some embodiments the first virtual machine may not be removed from the server computer after the first virtual machine has been de-assigned from the first user. Instead, the server computer may continue to maintain the first virtual machine so that it is available for future connections by the first user. In some embodiments the server computer may maintain the first virtual machine in an active state of execution. In other embodiments, execution of the first virtual machine may be suspended, and the first virtual machine may be hibernated to disk.

Other users who connect to the server computer may be prevented from using the first virtual machine. For example, as noted above, when the first virtual machine is associated with the first user on the exclusive basis, the server computer system may store information indicating that only the first user can use the first virtual machine. Thus, if another user connects to the server computer, the other user may be assigned a virtual machine other than the first virtual machine that is exclusively associated with the first user.

FIG. 6C is an example illustrating a plurality of virtual machines (VMs)60 on a particular server computer in the server computer system. The VMs60 that are shown are those that are currently unassigned, i.e., currently not in use by any user. The

VMs

60A,60B, and60C are in an active state of execution, and the

VMs

60D and60E are in a state of hibernation. In this example, theVM60A has been associated with a User A on an exclusive basis, and theVM60D has been associated with a User B on an exclusive basis. Thus, users other than the User A are prevented from using the VM60A, and users other than the User B are prevented from using the VM60B. The other VMs60 are shared virtual machines that have not been exclusively assigned to any user and may be used by any user in the system.

In this example, the User A may have previously connected to and used theVM60A. Although the User A subsequently disconnected from theVM60A, theVM60A remains in an active state of execution in this example. Thus, if the User A subsequently re-connects to the server computer system then theVM60A may again be assigned to the User A, and the User A may not need to wait for it to be loaded since it is already in a state of active execution.

Suppose now that the server computer system receives a connect request from the User B. The system may access stored information to determine that theVM60B is exclusively associated with the User B and may assign theVM60B to the User B. However, since theVM60B is in a state of hibernation, in some embodiments the User B may need to wait while theVM60B is returned to a state of active execution. In other embodiments the system may receive user input from the User B indicating that it is permissible to assign a virtual machine other than theVM60B to the User B. For example, in some embodiments a login screen may be displayed on the User B's client device when the User B logs in, where the login screen allows the User B to select an option specifying that if the User B'sexclusive VM60B is not currently loaded then it is acceptable to assign a different VM60 to the User B. In other embodiments, after determining that theVM60B is currently hibernated, the system may prompt the User B to specify whether he wants to wait while theVM60B is loaded or wants another active VM60 to be immediately assigned to him.

If the User B chooses to be assigned to a different VM60 then the system may select one of the shared virtual machines that are currently unassigned and in an active state of execution, and assign the User B to the selected VM60, e.g., either the

VM

60B or60C in this example.

It is possible that in some situations the virtual machine exclusively assigned to a particular user may not be currently loaded when the user attempts to connect to the system, and no other shared virtual machines may be available on the particular server computer which hosts the user's exclusive virtual machine. For example, the particular server computer may have already reached a maximum number of concurrent users allowed. In this situation the system may be operable to transfer the user's exclusive virtual machine to a different server computer in the server computer system, e.g., using techniques such as described below.

Consider an embodiment in which a particular server computer maintains a pool of free virtual machines of a particular pool size N, as described above. In some embodiments, when a user with an exclusive virtual machine disconnects from the server computer, the user's exclusive virtual machine may be hibernated to disk so that the number of free virtual machines does not exceed the configured pool size. Thus, if the user reconnects, the user may need to wait until the first virtual machine is retrieved from disk.

In other embodiments, an exclusive virtual machine (i.e., a virtual machine that is associated with a user on an exclusive basis) may not be counted in the total of free virtual machines in the pool. In other embodiments, an exclusive virtual machine may be counted in the total of free virtual machines in the pool, but the server computer may be configured to replace a non-exclusive (shared) virtual machine in the pool of free virtual machines with the exclusive virtual machine in response to a user of the exclusive virtual machine disconnecting from the server computer. In either of these embodiments, the exclusive virtual machine may be ready when the user re-connects so that the user does not have to wait for the exclusive virtual machine to be ready.

As noted above, the system may provide the user with a choice, e.g., via a graphical user interface, to either wait for his exclusive virtual machine to be loaded or to be assigned a shared virtual machine. However, the system preferably would not assign a user who has an exclusive virtual machine to a shared virtual machine without first receiving the user's approval.

In some embodiments, the system may support different classes of users, e.g., Exclusive users and Non-Exclusive users. Each user in the Exclusive class may be assigned a virtual machine on an exclusive basis when the user first connects to the system, whereas Non-Exclusive users are assigned to shared virtual machines on a non-exclusive basis.

Associating virtual machines with users on an exclusive basis may allow complete user-based isolation of applications and data stored on a virtual machine. Each user can be an exclusive owner of his virtual machine so that the user's virtual machine is never re-used by other users. In various embodiments, associating a virtual machine with a user on an exclusive basis may also ensure conditions such as:

- A particular application license is only used by a particular user
- Data stored on a particular virtual machine is in no way accessible to anyone else
- Personalization and Internet cache data as well as other privacy items are not accessible to any user other than the exclusively assigned user
- Any temporary files or other scratch space can in no way be accessed and reverse engineered for data theft
- Operating system features such as System Restore operate within the context of a single user (not multiple users making changes to the system in a way that makes System Restore unviable).

Physical Computer Assigned to User

As discussed above, in some embodiments of the server computer system, various server computers in the system may each execute one or more virtual machines. When a user connects to the server computer system, the user may be assigned one of the virtual machines for his use.

In other embodiments, instead of being assigned a virtual machine, the user may be assigned one of the physical server computers. For example, a given server computer in the system may not implement a virtualization platform that allows multiple users to use the server computer's resources. Instead, the entire physical server computer may be dedicated to a single user.

In some embodiments the physical server computers may be shared among different users. For example, one user may connect to the system and may be assigned a particular physical server computer. After finished using the physical server computer, this user may disconnect from the system. Another user may then connect to the system can be assigned the same physical server computer.

In other embodiments a physical server computer may be assigned to a single user on an exclusive basis, similarly as described above with respect to a virtual machine being assigned to a single user on an exclusive basis.

The server computer system may implement a connection broker which is operable to assign computers to users as they connect to the system. In some embodiments the connection broker may be operable to assign both virtual machines and physical computers to users. For example, the connection broker may use various criteria in order to decide whether to assign a user a virtual machine or a physical computer, and to decide which virtual machine or which physical computer to assign to the user. For example, the connection broker may base the decision on factors such as the currently available resources of the computers in the system and the geographic location of the user with respect to the computers.

The connection broker may also select a virtual machine or a physical computer to assign to a particular user in response to configuration information previously specified by an administrator. For example, an administrator of the server computer system may use an administrative user interface to specify an association of a particular virtual machine or a particular physical computer with a particular user. Information specifying the association may be stored in a database accessible by the connection broker. When the user attempts to log on to the system, the connection broker may access the information stored in the database in order to automatically determine which virtual machine or physical computer should be assigned to the user. Thus, the user may not need to inform the server computer system of the virtual machine or physical computer that is associated with the user, but instead, the system may automatically determine this based on the association information stored in the database. Thus, when the user logs on to the system, the user may not need to provide input specifying a particular virtual machine or physical computer to be assigned to the user.

Transferring Virtual Machines Across Server Computers

In some embodiments it may be desirable to transfer or move a virtual machine from one server computer in the server computer system to another server computer in the server computer system. For example, where the server computer system includes a blade computing system, it may be desirable to transfer a virtual machine executing on onecomputing blade105 to anothercomputing blade105. As another example, where the server computer system includes a plurality of standalone server computers or PCs82 connected via a network, it may be desirable to transfer a virtual machine executing on one server computer82 to another server computer82.

FIG. 7A is a flowchart diagram illustrating one embodiment of a method for transferring a virtual machine from one server computer to another.

In501, a first virtual machine on a first server computer in the server computer system may be selected for transfer. In some embodiments the first virtual machine may currently be executing on the first server computer. In this case, the first virtual machine may be hibernated in response to being selected for transfer, as shown inblock502. Hibernating the first virtual machine may comprise pausing or suspending execution of the first virtual machine and storing state information representing the current state of the first virtual machine (e.g., state information representing the state of the first virtual machine as it exists the moment before it is paused or suspended). For example, the state information may be stored as one or more files on non-volatile storage, such as a disk drive of the first server computer, or other non-volatile storage in the server computer system.

When execution of a virtual machine is initiated, the virtual machine is typically instantiated from a virtual machine image file. For example, the virtualization environment that hosts the virtual machine may read the virtual machine image file from a disk drive and create information in RAM which represents the virtual machine in an active state of execution. The virtual machine image file may be constructed according to a particular virtual machine image format supported by a particular virtualization environment or particular virtual machine host software. In some embodiments, hibernating the first virtual machine may include creating a virtual machine image file representing the first virtual machine in its current state, or updating a virtual machine image file from which the first virtual machine was previously instantiated so that the virtual machine image file represents the current state of the first virtual machine as it exists at the time the first virtual machine is hibernated. In other embodiments, hibernating the first virtual machine may include storing state information representing the current state of the first virtual machine separately from the virtual machine image file from which the first virtual machine was previously instantiated.

In other embodiments, at the time the first virtual machine is selected for transfer inblock501, the first virtual machine may already be hibernated. In this case, the disk drive of the first server computer may already store state information representing the first virtual machine in its suspended state, and it may not be necessary to performblock502.

In503, a second server computer to which to transfer the first virtual machine may be selected. For example, in one embodiment the first server computer may be afirst computer blade105 installed in achassis113, and the second server computer may be asecond computer blade105 installed in thechassis113. In another embodiment the second server computer may be asecond computer blade105 installed in adifferent chassis113 from thefirst computer blade105.

In another embodiment the first server computer may be a first standalone server computer or PC82, and the second server computer may be a second standalone server computer or PC82. In another embodiment the first server computer may be a first standalone server computer or PC82, and the second server computer may be acomputer blade105 installed in achassis113, or vice versa.

As indicated inblock505, in some embodiments the hibernated information representing the first virtual machine may be transmitted from the first server computer to the second server computer. For example, transmitting the hibernated information may include transmitting a virtual machine image file representing the first virtual machine in its current state and/or transmitting other state information representing the first virtual machine.

In some embodiments, the hibernated information may initially be stored on a local disk drive or other storage device of the first server computer, and the hibernated information may be transmitted for storage on a local disk drive or storage device of the second server computer. In some embodiments the file system in which the hibernated information is stored on the first server computer may be accessible by the second server computer. For example, in some embodiments the first server computer and the second server computer may both be included in a local area network (LAN) such that both server computers have access to a common file system. As another example, the second server computer may be connected through a virtual private network (VPN) to the first server computer or to a LAN that includes the first server computer or that includes a storage device on which files for the first server computer are stored. Thus, in some embodiments the one or more files representing the hibernated information may be copied to the second server computer through a file system copy operation or a VPN copy operation.

In other embodiments the file system of the first server computer may not be accessible by the second server computer. For example, the second server computer may not be included in the LAN of the first server computer and may not be connected to the LAN through a VPN. Thus, the second server computer may not have file system access to the one or more files representing the hibernated information of the first virtual machine. In this case, the first server computer and the second server computer may communicate through a network in order to transfer the hibernated information representing the first virtual machine to the second server computer.

In some embodiments the second server computer may be connected to the first server computer through a wide area network (WAN) connection, and/or the second server computer may be separated from the first server computer by one or more firewalls. In this case, the first server computer and the second server computer may communicate using a communication protocol that enables the hibernated information to be transferred from the first server computer to the second server computer through the WAN connection and/or through the one or more firewalls. For example, in some embodiments the first server computer and the second server computer may communicate using a common communication protocol, such as HTTP, HTTPS, or FTP to transmit the hibernated information of the first virtual machine to the second server computer.

In other embodiments, when the first virtual machine is hibernated inblock502, the hibernated information representing the first virtual machine may be stored on a storage device accessible by both the first server computer and the second server computer, such as a network attached storage (NAS) or storage area network (SAN). In this case, it may not be necessary to performblock505, since the second server computer can access the hibernated information from the NAS or SAN.

As indicated inblock507, after the hibernated information representing the first virtual machine has been transmitted to the second server computer, the second server computer may begin executing the first virtual machine, e.g., under control of a virtualization environment or virtual host software. For example, the first virtual machine may be instantiated on the second server computer using the virtual machine image file and/or the other state information representing the first virtual machine transmitted inblock505. As noted above, the hibernated information includes state information representing the state of the first virtual machine as it existed on the first server computer the moment before it was hibernated. Thus, the state information may be used to set the first virtual machine on the second server computer into an identical state as it existed on the first server computer or to re-create an execution state of the first virtual machine on the second server computer such that the execution state is identical to how it was on the first server computer.

Since the first virtual machine was not completely shut down on the first server computer when it was hibernated, it may not be necessary to perform a complete startup procedure for the first virtual machine on the second server computer. Instead, the first virtual machine may simply be removed from its state of hibernation and returned to an active state of execution under control of the virtualization environment on the second server computer. This may enable execution of the first virtual machine on the second server computer to begin quickly and may enable the preservation of the state of the first virtual machine.

In some embodiments, the method described above may be performed in response to receiving a request to move execution of the first virtual machine from the first server computer to the second server computer. For example, the first virtual machine may be in an active state of execution on the first server computer, and a user at a remote client computer may have a first remote communication session open to the first virtual machine on the first server computer. In one embodiment, an administrator of the server computer system may utilize an administrative user interface in order to request that execution of the first virtual machine be transferred to the second server computer. In response, the first virtual machine may be transferred to the second server computer, and the second server computer may resume execution of the first virtual machine, as described above.

In this example, the first remote communication session between the user at a remote client computer and the first server computer may be automatically replaced with a second remote communication session between the remote client computer and the second server computer. Once the second server computer has begun executing the first virtual machine and the second remote communication session has been established, the user may interact with the first virtual machine just as the user was doing previously, except that now the communication with the first virtual machine occurs between the user's client computer and the second server computer instead of between the user's client computer and the first server computer. In some embodiments, the first virtual machine may appear to the user to be exactly the same as before it was transferred to the second server computer, and the user may not notice a difference in the first virtual machine regardless of which server computer executes the first virtual machine.

In some embodiments the transfer of the first virtual machine may be transparent to or unnoticed by the user of the remote client computer. For example, in some embodiments the user may not be aware of the transfer. In other embodiments the user may notice a delay as the transfer takes place, or the server computer system may communicate with the client software on the remote client computer to cause the client software to display information informing the user that the transfer is taking place and to expect a delay as it occurs.

In other embodiments, the user himself may initiate the transfer of the first virtual machine from the first server computer to the second server computer. For example, in some embodiments the client software on the remote client computer may include a feature that enables the user to request that the first virtual machine which he is using be transferred to a different server computer. For example, if the user is experiencing an unusual delay in the communication with the first virtual machine and believes that the delay may be caused by network latency between the client computer and the first server computer, or if the user believes that the delay may be caused by the first server computer being overloaded, then the user may request that his first virtual machine be transferred to a different server computer. In response, the server computer system may transfer the first virtual machine to the second server computer, as described above.

Alternatively, in another embodiment, the user may use a feature of the client software in order to inform an administrator of the server computer system that the user is experiencing poor performance. In response to receiving the notification, the administrator may use an administrative user interface provided by management software for the server computer system in order to view server computers present in the system and to select a different server computer to which the first virtual machine should be transferred. For example, the administrative user interface may display information indicating resource usage and performance statistics of the various server computers in the system, and the administrator may select the second server computer to which to move the first virtual machine based on its resource usage, e.g., may select a server computer that appears to have ample free memory, available processor power, available network bandwidth, or other free resources which may improve the user's experience.

In another embodiment, the administrative user interface may display information indicating network locations or geographic locations of the various server computers in the server computer system, and the administrator may select the second server computer to which to move the first virtual machine based on its location. For example, the administrator may select a second server computer which is geographically closer to the user's client computer than the first server computer.

Alternatively, in some embodiments, the server computer system may be configured to automatically keep track of resource usage and performance statistics of the various server computers in the system and may automatically move various virtual machines between server computers in order to load balance the system. In other embodiments the server computer system may be configured to automatically keep track of network latency experienced by the user, and may automatically move the user's virtual machine to a different server computer if the system detects that the user is experiencing an unusually slow network latency. In other embodiments the server computer system may automatically transfer the user's virtual machine to a different server computer if the system detects that the first server computer is overloaded, e.g., if its memory, disk space, processor power, network bandwidth, or other resources are running low. In other embodiments the server computer system may be configured to automatically determine the geographical proximity between the user's client computer and the first server computer that initially hosts the user's virtual machine, and may automatically move the user's virtual machine to the second server computer if the system determines that the second server computer is closer to the user's client computer.

Thus, in some embodiments, the first virtual machine may be actively executing on the first server computer, and the method described above may be performed in order move the first virtual machine to the second server computer. Once the first virtual machine has been transferred, its execution may be automatically resumed on the second server computer.

In other embodiments, the first virtual machine may not be actively executing on the first server computer before being moved to the second server computer, but may instead be in a state of hibernation on the first server computer. In this case, when the first virtual machine has been transferred to the second server computer, the second server computer may not automatically begin executing the first virtual machine. Instead, the first virtual machine may remain in a state of hibernation on the second server computer until subsequently being returned to active execution in response to a subsequent event, such as a request to re-activate the first virtual machine being received.

Transfer Across Different Virtualization Platforms

As described above, various server computers in the server computer system may execute virtualization environment software (also referred to herein as a hypervisor, or virtual machine host software, or virtualization platform). The virtualization environment software executing on a particular server computer may implement a virtual machine execution environment so that one or more virtual machines can be created and executed within the virtual machine execution environment on the particular server computer.

In various embodiments each server computer in the server computer system may execute any type of virtualization environment software. Many different implementations of virtualization environments are commercially available from various software vendor companies. One example of a virtualization environment software platform that may be executed by a server computer in the server computer system is Microsoft Virtual Server by Microsoft Corp. Other examples include ESX Server, Virtual Server, Workstation, and ACE by VMWare, Inc. It is noted that these are listed as examples only, and in other embodiments, the server computers and the server computer system may execute any of various other kinds of virtualization environment software platforms provided by or sold by any of various other organizations or software vendors.

In some embodiments, different server computers in the server computer system may execute different types of virtualization platforms. For example, in some embodiments one or more of the server computers may execute the VMWare ESX Server virtualization platform, and one or more other server computers may execute a different VMWare virtualization platform, such as Workstation or ACE. As another example, in some embodiments one or more of the server computers may execute the VMWare ESX Server virtualization platform, and one or more other server computers may execute the Microsoft Virtual Server virtualization platform.

Virtual machines for different virtualization platforms may not be compatible with each other. For example, a virtual machine image format used by one virtualization platform may not be supported by another virtualization platform. For example, the VMWare ESX Server virtualization platform typically cannot execute a virtual machine created by the Microsoft Virtual Server virtualization platform, and vice versa.

Thus, in some embodiments, in order to move a virtual machine from a first server computer to a second server computer that uses a different virtualization platform, it may be necessary to use techniques other than transferring the virtual machine image file used by the first server computer to the second server computer, and the second server computer instantiating the virtual machine from the virtual machine image file. Instead, in these cases, the alternative method illustrated inFIG. 7B may be used in order to move execution of a virtual machine from the first server computer to the second server computer.

For example, suppose that a firstvirtual machine60A executing within afirst virtualization platform63A on afirst server computer82A needs to be moved to asecond server computer82B. As indicated inblock517 ofFIG. 7B,snapshot information64 for the firstvirtual machine60A may be created. Thesnapshot information64 represents the state of the firstvirtual machine60A. In various embodiments, thesnapshot information64 may include any of various types of information representing the state of the firstvirtual machine60A.

For example,FIG. 7D illustrates an example where thesnapshot information64 includesapplication state information65. At the time thesnapshot information64 is created, one or more software applications may currently be executing on the firstvirtual machine60A. Theapplication state information65 may include information representing the execution state of each of these software applications executing on the firstvirtual machine60A. For example, suppose that a first software application is executing on the firstvirtual machine60A. Theapplication state information65 may include information indicating program instructions and data for the first software application currently stored in the memory of the firstvirtual machine60A.

As another example, thesnapshot information64 may includememory state information67. Thememory state information67 may represent the dynamic memory contents of the firstvirtual machine60A as the contents exist at the time thesnapshot information64 is created.

As another example, thesnapshot information64 may include network state information66. The network state information66 may represent the states of network connections that are currently open by the firstvirtual machine60A at the time thesnapshot information64 is created, or other information representing network communication performed by the firstvirtual machine60A.

As another example, thesnapshot information64 may include userinterface state information68. The userinterface state information68 may include information representing a state of the user interface implemented by the firstvirtual machine60A. For example, at the time thesnapshot information64 is created, a user of a remote client computer may have a remote communication session opened to the firstvirtual machine60A. Through the remote communication session, the firstvirtual machine60A may display one or more graphical user interface windows on the display of the remote client computer. The userinterface state information68 may include information representing the state of each graphical user interface window. For example, suppose that a first graphical user interface window is currently displayed on the client computer. The userinterface state information68 may include information regarding the first graphical user interface window, such as information indicating whether the window is maximized or minimized, the size of the window, the position of the window on the display, etc.

In some embodiments, execution of the firstvirtual machine60A may be paused just prior to creating thesnapshot information64. This may enable the entire state of the firstvirtual machine60A to be captured in thesnapshot information64 in a consistent manner, e.g., without the state of the firstvirtual machine60A changing while thesnapshot information64 is being created.

As indicated inblock519, the snapshot information may be transmitted from the first server computer to the second server computer. In some embodiments, the virtual machine image file for the firstvirtual machine60A may not be transmitted to the second server computer. For example, the snapshot information created inblock517 may be stored on thefirst server computer82A separately from the virtual machine image file and transmitted separately to thesecond server computer82B. However, similar techniques as described above for transmitting the virtual machine image file in the method ofFIG. 7A may be used to transmit the snapshot information to thesecond server computer82B. For example, in some embodiments thesecond server computer82B may be connected to thefirst server computer82A through a wide area network (WAN) connection, e.g., through the Internet. A common communication protocol such as HTTP, HTTPS, or FTP may be used to transmit the snapshot information without requiring thesecond server computer82B to be connected to thefirst server computer82A through a LAN or VPN.

After the snapshot information has been transmitted to thesecond server computer82B, a secondvirtual machine60B may be created on thesecond server computer82B within asecond virtualization platform63B, and the state of the secondvirtual machine60B may be set using the snapshot information, as indicated in

blocks

521 and523. As discussed above, thesecond virtualization platform63B may be a different type than thefirst virtualization platform63A on thefirst server computer82A. Thus, the secondvirtual machine60B may not be created from the virtual machine image file that implements the firstvirtual machine60A on thefirst server computer82A. Instead, the secondvirtual machine60B may be created by thesecond virtualization platform63B as a different type of virtual machine (i.e., a virtual machine supported by thesecond virtualization platform63B), and then the state of the secondvirtual machine60B may be set so that it appears to the user to be the same as the firstvirtual machine60A. The remote communication session that was previously open between the user's client computer and thefirst server computer82A may be replaced by a new remote communication session between the user's client computer and thesecond server computer82B.

Since the state of the secondvirtual machine60B is set using thesnapshot information64, it may appear to the user that he is still using the same virtual machine as before. In some embodiments, the user may not be aware that his virtual machine was moved to thesecond server computer82B, and may not be aware that the virtual machine has been re-created in a different virtualization platform.

For example, as noted above, thesnapshot information64 may includeapplication state information65 representing the execution state of a first software application that was executing on the firstvirtual machine60A when thesnapshot information64 was created. Thus, setting the state of the secondvirtual machine60B inblock523 may include initiating execution of the first software application on the second virtual machine and setting the execution state of the first software application on the second virtual machine to the state specified by theapplication state information65. Thus, the user may see the same open software applications on the second virtual machine and may continue to interact with the open software applications just as he was previously doing on the first virtual machine.

As another example, setting the state of the secondvirtual machine60B inblock523 may include storing the memory contents, e.g., program instructions and data, there were stored in the dynamic memory of the firstvirtual machine60A in the dynamic memory of the secondvirtual machine60B, using thememory state information67.

As another example, setting the state of the secondvirtual machine60B inblock523 may include setting the network communication state of the secondvirtual machine60B using the network state information66. For example, if the firstvirtual machine60A had a network connection open with a particular server computer then a corresponding network connection to the particular server computer may be opened on the secondvirtual machine60B.

As another example, setting the state of the secondvirtual machine60B inblock523 may include setting the user interface state of the secondvirtual machine60B using the userinterface state information68. For example, if a graphical user interface window was open on the user interface of the firstvirtual machine60A then an identical corresponding graphical user interface window may be opened on the user interface of the secondvirtual machine60B and positioned in the same place on the display.

FIG. 7C illustrates an example of a system which may implement the method ofFIG. 7B according to one embodiment. Thefirst server computer82A executes software implementing afirst virtualization platform63A. The firstvirtual machine60A executes within thefirst virtualization platform63A. In this example, the firstvirtual machine60A includes asoftware agent61. Thesoftware agent61 may be a software program that executes on the firstvirtual machine60A to create the snapshot information, as discussed above with reference to block517. For example, thesoftware agent61 may analyze the contents of the firstvirtual machine60A's memory or other information maintained by the firstvirtual machine60A in order to create the snapshot information representing the state of the firstvirtual machine60A. In other embodiments, the software that creates thesnapshot information64 inblock517 may not execute within the firstvirtual machine60A itself. For example, in some embodiments thesnapshot information64 may be created by thefirst virtualization platform63A, or another software program executing under control of thefirst virtualization platform63A.

Thesecond server computer82B executes software implementing asecond virtualization platform63B. The secondvirtual machine60B executes within thesecond virtualization platform63B. In this example, the secondvirtual machine60B includes asoftware agent62. Thesoftware agent62 may be a software program that executes on the secondvirtual machine60B in order to set the state of the secondvirtual machine60B using thesnapshot information64, as discussed above with reference to block523. For example, thesoftware agent62 may analyze thesnapshot information64 and use thesnapshot information64 to set the contents of the secondvirtual machine60B's memory or set other configuration or state information for the secondvirtual machine60B, e.g., in order to configure the state of a secondvirtual machine60B as described above.

In some embodiments an administrator may actively cause the execution of the virtual machine to be moved. For example, in some embodiments the method ofFIG. 7B may be performed in response to user input by the administrator. The administrator may communicate with management software through an administrative graphical user interface. For example, the graphical user interface may display a list of server computers in the server computer system. The administrator may select the first server computer from the displayed list. In response, the management software may display a list of all virtual machines on the first server computer. The administrator may select the first virtual machine from the displayed list. Similarly, the administrator may also interact with the administrative graphical user interface to select the second server computer to which the transfer the first virtual machine (or the second server computer on which a virtual machine corresponding to the first virtual machine should be created).

In other embodiments execution of the first virtual machine may automatically be transferred from the first server computer to the second server computer, e.g., may be transferred without an administrator requesting the transfer. For example, thesystem management software10 may cause virtual machines to be automatically transferred across server computers in order to increase the efficiency of resource utilization of server computers in the server computer system.

Consider an example in which an organization has a system that includes a first server computer at a location in California and a second server computer at a location in Japan. An employee E may be based at the location in California but may travel to Japan. The employee E may log into a thin client end user console80 at the Japan location, and the system may assign a virtual machine to him. The system may store information indicating that he is normally based in California and may assign a virtual machine hosted by the server computer at the California location to him. As another example, an exclusive virtual machine may be assigned to him, where the exclusive virtual machine is hosted by the server computer at the California location.

However, since the employee E is currently located in Japan, it may be more efficient if the virtual machine assigned to him were hosted by the server computer at the Japan location. With the transfer capability described above, an administrator or an automated algorithm may allow the virtual machine assigned to the user to be moved from the California location to the Japan location.

In other embodiments, additional variables may be considered, such as ensuring that the virtual machine is close to a database server, if the user needs to execute a database intensive application. Thus, in various embodiments, virtual machines may be moved across server computers in the system for any of various reasons, such as security, speed, efficiency or cost (e.g. minimizing expensive bandwidth) reasons.

Auto-Hibernation of Inactive Virtual Machines

In some embodiments, an end user may stop using the system but may not disconnect or log out from the system. If the user's virtual machine continues to execute, this may cause CPU power, memory, or other computing resources to be used unnecessarily.FIG. 8 is a flowchart diagram illustrating one embodiment of a method for automatically hibernating an inactive virtual machine.

As indicated in551, a first virtual machine may be assigned to a first user, e.g., in response to the user logging in to the system.

As indicated in553, the first user may stop using the first virtual machine after some period of time but may not disconnect from the first virtual machine. For example, the user may forget to log out of the system or may be called to another task.

As indicated in555, the system may detect that the first virtual machine assigned to the first user is no longer in active use. For example, the system may determine that no user input has been received from peripheral devices at the first user's console for a threshold period of time or may use other techniques to determine that the first virtual machine is not actively being used. In various embodiments, any of various algorithms or heuristics may be used to determine whether the first virtual machine is in active use. The threshold time period or other factors used to determine inactivity may be configured in response to user input by an administrator.

As indicated in557, in response to determining that the first virtual machine is not in active use, the system may cause the first virtual machine to be automatically hibernated. Hibernating the first virtual machine may free computing resources used by the first virtual machine so that they are available for use by active virtual machines.

In some embodiments, each user may be assigned a configuration variable that specifies whether the user is allowed to run disconnected virtual machines. A numeric value associated with the configuration variable may specify the number of simultaneous, disconnected virtual machines the user is allowed to run. For example, if a user has a value of 3 associated to him, the first 3 virtual machine sessions he creates and then disconnects will continue to run. If he runs a fourth session and disconnects then the fourth virtual machine may be automatically hibernated after an inactivity period.

Client-Side Execution

As described above, in some embodiments of the system, a user of a client computer may connect to a server computer on which a virtual machine is stored. The virtual machine may execute on the server computer under control of virtual machine host software (e.g., a hypervisor), and the client computer may provide input to the virtual machine and display output from the virtual machine using a communication protocol which enables communication between the client computer and the remote virtual machine.

In other embodiments it may be desirable to execute a virtual machine locally on a user's client computer. For example, in some embodiments the client computer may execute client software that includes a hypervisor or virtual machine host software which enables a virtual machine to be executed on the client computer.

A virtual machine is typically implemented using a virtual machine an image file. In order to execute the virtual machine, the hypervisor or virtual machine host software on the client computer needs to access the image file. However, the virtual machine image file may be stored on the server computer system such that the client computer system does not have file-level access to the virtual machine image file. For example, in some embodiments the client computer system may be a remote computer system that is not part of the server computer system's local network. The client computer system may not be able to join the server computer system's network in a way that provides the client computer system with direct access to files stored on the server computer system.

To overcome this problem, in some embodiments of the system, the server computer system may provide access to the virtual machine image file through standard communication protocols such as HTTP, HTTPS, or FTP in order to allow the client computer system to retrieve the virtual machine image file over a network. The use of such a standard communication protocol may enable the client computer system to obtain the virtual image file without joining the server computer system's network through a VPN, and may enable the file transfer to traverse firewalls. Once the virtual machine image file has been obtained, the client computer system can execute it locally, e.g., under control of a hypervisor or virtual machine host software.

FIG. 9 illustrates an example in which aclient computer system82A executes client software that is capable of performing a communication protocol such as HTTP, HTTPS, or FTP. As indicated by thearrow1, the client software may communicate with server-side software executing on aserver computer106A in order to retrieve the virtual machine image file from theserver computer106A.

In some embodiments the client software that retrieves the virtual machine image file may be embedded within a standard web browser program, such as Firefox or Internet Explorer. For example, the client software may be embedded in the web browser as a browser plug-in or ActiveX, Flash, AJAX or other dynamic control within the web browser. In this embodiment the user may simply enter a URL of the server computer system in the web browser in order to access a web page. The web page may include input fields allowing the user to input authentication information, such as a username and password or other information. Upon successfully authenticating the user, the server computer system may return another web page to the web browser which allows the user to select a desired virtual machine to be retrieved to the client computer. For example, in some embodiments the user may be presented with a list of available virtual machines that are associated with the user or to which the user has access. In other embodiments the virtual machine to be retrieved by the user may be predetermined, e.g., may have been configured by an administrator of the server computer system.

Once the determination of which virtual machine to retrieve has been made (either by the user selecting a desired virtual machine or by identifying a predetermined virtual machine for the user) the image file for the virtual machine may be streamed from theserver computer106A to theclient computer82A, e.g., using a standard protocol supported by the web browser such as HTTP, HTTPS, or FTP. As noted above, these protocols typically do not require a VPN tunnel to exist between theclient computer82A and theserver computer106A.

Once the client computer has received the virtual machine image file, it may instantiate the virtual machine and begin executing it, e.g., under control of a hypervisor. In some embodiments the hypervisor may be embedded in the web browser which the user uses to access the server computer and select the virtual machine image file.

In some embodiments the user of theclient computer82A may have previously connected to the server computer system and retrieved a full copy of the virtual machine image file. In some embodiments, if theclient computer82A subsequently reconnects to the server computer system, the system may utilize file differencing techniques so that only portions of the virtual machine image file that have changed since the previous transfer need to be transmitted to theclient computer82A. For example, theclient computer82A may communicate with theserver computer106A on which the virtual machine image file is stored in order to perform an initial transfer of the entire virtual machine image to theclient computer82A.

The virtual machine may then be executed on theclient computer82A. If any changes to the virtual machine are made then it may be desirable to update the copy of the virtual machine image file on theserver computer106A, as indicated byarrow2 inFIG. 9. Instead of transferring the entire virtual machine image file back to theserver computer106A, only the changed portions of the virtual machine image file may be transmitted. Thus, the file differencing techniques may be employed in both directions, either when transferring the virtual machine from theserver computer106A to theclient computer82A or vice versa.

In some embodiments the client software on theclient computer82A may include a feature that enables the user to select whether to execute a virtual machine locally on theclient computer82A or remotely on theserver computer106A and manages the virtual machine session and execution. For example, this feature may be exposed to the user as a simple button.

Assume that by default the system administrator has configured the virtual machine to be downloaded to the client and executed locally. While the virtual machine is executing on theclient computer82A, the user may click the “Run at Server” button. In response, the execution of the virtual machine may be paused, as indicated inblock901 ofFIG. 10. As indicated inblock903, an available server computer in the server computer system may be selected to execute the virtual machine. The virtual machine image file on the client computer may be migrated to the selected server computer and synchronized with the copy of the virtual machine image file already stored on the server computer system, as indicated inblock905. As described above, only the changed portions of the virtual machine image file need to be transferred across the network. The selected server computer may then begin executing the virtual machine and may establish a remote communication session with the client computer to enable the user to interact with the virtual machine remotely, e.g., through a remote communication protocol such as VNC, RDP, ICA, TDX, PCoIP, etc. Once the remote communication session has been established, the user may see the same virtual machine that was previously executing locally on theclient computer82A. For example, the user interface implemented by the virtual machine may appear on the display of theclient computer82A identically to (or very similar to) how it appeared before the virtual machine was migrated to the server computer system, with the same applications and user interface windows open, etc.

The “Run at client” feature is the inverse of the above functionality. Suppose that a virtual machine is currently executing on theserver computer106A. The user may then click the “Run at client” button in the client software on theclient computer82A. As indicated inblock921 ofFIG. 11, the execution of the virtual machine on theserver computer106A may be paused. The virtual machine may then be migrated to theclient computer82A, as indicated inblock923. If a previous version of the virtual machine is already stored on theclient computer82A, then the current version of the virtual machine may be synchronized with the previous version by transferring only the changed portions of the virtual machine image, as described above. Theclient computer82A may then begin executing the virtual machine, as indicated inblock925. For example, theclient computer82A may include a hypervisor or virtual machine host software operable to execute the virtual machine.

In some embodiments a virtual machine image file that has been transferred from the server computer system to the client computer may be encrypted. Encrypting the virtual machine image file may increase the security of the information in the virtual machine.

In some embodiments the client software may allow the user to specify various options affecting storage of a virtual machine image file that has been downloaded to the client computer. For example, the user may be able to specify that the virtual machine image file should be completely deleted from the client computer after the user's session with the virtual machine is finished. As another example, the user may be able to specify that the virtual machine image file should continue to be stored locally on the client computer, which may enable the amount of time required to synchronize with the most recent copy of the virtual machine to be reduced upon subsequent usage, as described above.

In some embodiments an administrator of the server computer system may be able override the user's configuration choices. For example, even if the user has configured virtual machine image files to persist on the local client computer, the administrator may set a server-side flag which causes the server computer to instruct the client software to always delete any downloaded virtual machines, or to delete particular virtual machines that have been downloaded.

In some embodiments and expiry date may be associated with a virtual machine that has been downloaded to and locally stored on the client computer. Once the expiry date of the virtual machine has been reached, the client software may automatically delete the virtual machine. In some embodiments the client software may use the time maintained by the server computer system clock in order to determine whether the expiry date has been reached, rather than using the local client computer system clock.

As described above, the client computer may execute client software that provides capabilities to authenticate the user to the server computer system, download a virtual machine image file from the server computer system, and execute the virtual machine on the client computer, e.g., (through an embedded hypervisor). The client software may also be configured to contact the server computer system when it starts and query for any commands that should be executed by the client software. As one example, the server computer system may command the client software to delete or purge a specific virtual machine stored locally on the client computer, or to delete or purge all locally stored virtual machines. As another example, the server computer system may command the client software to set a new expiry date for one or more of the virtual machines locally stored on the client computer. As another example, the server computer system may command the client software to download and install an update for the client software on the client computer. Even if the client software is not able to contact the server computer system, the client software may still use the previously configured expiry dates for all locally stored virtual machines and still purge the virtual machines if they have expired.

It is noted that various embodiments may further include receiving, sending or storing instructions and/or data implemented in accordance with the foregoing description upon a computer-accessible storage medium. Generally speaking, a computer-accessible storage medium may include any storage media accessible by a computer during use to provide instructions and/or data to the computer. For example, a computer-accessible storage medium may include storage media such as magnetic or optical media, e.g., one or more disks (fixed or removable), tape, CD-ROM, DVD-ROM, CD-R, CD-RW, DVD-R, DVD-RW, etc. Storage media may further include volatile or non-volatile memory media such as RAM (e.g. synchronous dynamic RAM (SDRAM), Rambus DRAM (RDRAM), static RAM (SRAM), etc.), ROM, Flash memory, non-volatile memory (e.g. Flash memory) accessible via a peripheral interface such as the Universal Serial Bus (USB) interface, etc. In some embodiments the computer may access the storage media via a communication means such as a network and/or a wireless link.

Although the embodiments above have been described in considerable detail, numerous variations and modifications will become apparent to those skilled in the art once the above disclosure is fully appreciated. It is intended that the following claims be interpreted to embrace all such variations and modifications.