	US 12,267,253 B2
	Data plane techniques for substrate managed containers
Quintin Lee, Seattle, WA (US); Amr Mohamed AbdelHamid, Snohomish, WA (US); Balbir Singh, Canberra (AU); and Olga Kechina, Kirkland, WA (US)
Assigned to Oracle International Corporation, Redwood Shores, CA (US)
Filed by Oracle International Corporation, Redwood Shores, CA (US)
Filed on May 23, 2024, as Appl. No. 18/672,907.
Application 18/672,907 is a continuation of application No. 18/457,335, filed on Aug. 28, 2023, granted, now 12,034,647.
Claims priority of provisional application 63/381,715, filed on Oct. 31, 2022.
Claims priority of provisional application 63/402,024, filed on Aug. 29, 2022.
Prior Publication US 2024/0314088 A1, Sep. 19, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 47/78 (2022.01); G06F 9/455 (2018.01); H04L 41/0806 (2022.01); H04L 41/0895 (2022.01); H04L 47/80 (2022.01); H04L 61/5007 (2022.01)

CPC H04L 47/781 (2013.01) [G06F 9/45558 (2013.01); H04L 41/0806 (2013.01); H04L 41/0895 (2022.05); H04L 47/803 (2013.01); H04L 61/5007 (2022.05)]

20 Claims

1. A computer-implemented method, comprising:

receiving, by a container runtime interface of a container orchestration system, a request to deploy a container to a computing node, the request being received from a deployment orchestrator that is configured to provide virtual-machine-based virtualization and container-based virtualization within a cloud computing environment;

allocating, by the container networking interface of the container orchestration system, an Internet Protocol (IP) address for the container;

selecting, by the container runtime interface, a container runtime from a first container runtime or a second container runtime based at least in part on determining an isolation type for the container, the first container runtime being selected as the container runtime based on determining a first isolation type for the container, the second container runtime being selected as the container runtime based on determining a second isolation type for the container; and

executing, by the container runtime, the container, the container being isolated within a micro-virtual machine when the first container runtime is selected as the container runtime, the container being isolated based at least in part on a namespace when the second container runtime is selected as the container runtime.