Nutanix, Inc.
SECURITY-AWARE SCHEDULING OF VIRTUAL MACHINES IN A MULTI-TENANT INFRASTRUCTURE

Abstract:

Methods, systems and computer program products for computer cluster management. Multiple components are operatively interconnected to carry out operations for placing virtual machines onto a multi-tenant computing cluster, where the placement achieves adherence to a set of security requirements. Initially, data characterizing logical CPU resources of the multi-tenant computing cluster are gathered. Upon receipt of a request to place a virtual machine onto a node of the multi-tenant computing cluster, a set of security rules that are used to achieve the set of security requirements associated with the multi-tenant computing cluster are accessed. In accordance with the security rules the virtual machine is assigned to execute in a portion of the logical CPU resources. The virtual machine does not share logical CPU resources with any other tenant.