PROTOCOLS

PRIORITY CLAIM

[0001] This application claims priority to U.S. Application Serial No. 15/459,725 filed on March 15, 2017.

TECHNICAL FIELD

[0002] This disclosure relates to compute node systems and more particularly to compute node management protocols.

BACKGROUND

[0003] Distributed computing systems arranged as clusters of compute nodes help solve computational problems of increasing technical complexity. For example, computational problems can involve the application of sophisticated algorithms (e.g., artificial intelligence- based algorithms) to large data sets to uncover patterns in data. In view of increasing problem complexity, computational requirements for such systems have also significantly increased. [0004] Currently most algorithm-based solutions work by spreading the load among compute nodes of varying capabilities. However, managing these disparate mechanisms requires significant thought and planning both before implementation and when capacity changes occur. Additionally, inefficient utilization of resources can arise as the clusters of machines grow.

BRIEF DESCRIPTION OF THE DRAWINGS

[0005] The present invention will be understood more fully from the detailed description given below and from the accompanying drawings of various embodiments of the present invention, which, however, should not be taken to limit the present invention to the specific embodiments, but are for explanation and understanding only.

[0006] FIG. 1 is a block diagram illustrating a computing environment according to an embodiment.

[0007] FIG. 2 is a block diagram illustrating compute nodes advertising their technical capabilities.

[0008] FIG. 3 is a block diagram illustrating analysis of compute node attributes.

[0009] FIG. 4 is a block diagram illustrating analysis of network latency characteristics and processing environment characteristics.

[0010] FIG. 5 is a flow chart depicting an operational scenario involving compute nodes advertising their capabilities.

[0011] FIG. 6 is a flow chart depicting an operational scenario involving allocation of compute node resources for solving computational problems.

[0012] FIG. 7 is a block diagram illustrating a protocol data structure for facilitating management of compute node resources.

[0013] FIG. 8 is a block diagram depicting an exemplary embodiment of an on-demand multi-tenant database system.

DETAILED DESCRIPTION

[0014] The subject matter described herein discloses apparatuses, systems, techniques and articles that provide user access to compute node processing capability, such as for using artificial intelligence-based (AI-based) compute nodes to solve complex problems. In some examples, apparatuses, systems, techniques and articles disclosed herein provide a protocol for managing large-scale implementations of AI-based compute nodes. In some examples, systems and methods disclosed herein analyze algorithm-related processing attributes of compute nodes to determine which Al-based components are most suited for solving a computational problem.

[0015] FIG. 1 and the following discussion are intended to provide a brief, general description of a non-limiting example of an example environment in which the embodiments described herein may be implemented. Those of ordinary skill in the art will appreciate that the embodiments described herein may be practiced with other computing environments.

[0016] FIG. 1 depicts at 100 an exemplary embodiment of a system for managing AI processing components 102. The AI processing components 102 are used to solve complex computations problems and operate on a cluster of servers, called compute nodes 104. The compute nodes 104 communicate with each other to make a set of services provided by the AI processing components 102 available to clients.

[0017] When a large multi-user cluster needs to access and process large amounts of data, task scheduling can pose a technical challenge, especially in a heterogeneous cluster with a complex application environment. An example of such a heterogeneous environment can include some compute nodes using CPU (central processing unit) resources, while others may use ASIC (Application Specific Integrated Circuit), FPGA (Field Programmable Gate Array), or GPU (Graphical Processor Unit) resources to solve specific computational problems. As an illustration, compute node 1 at 108 has three dedicated ASICs in this example for handling a map reduction function that is attached to a PCI (Peripheral Component Interconnect) bus, while compute node 2 at 108 uses a CPU-implemented machine learning algorithm for analyzing DNA sequencing.

[0018] The system 100 provides an AI management protocol 110 to assist in managing implementations of the Al-based compute nodes 104 for processing large amounts of data.

The AI management protocol 102 allows for leverage of available computational resources provided by the AI-based compute nodes 104. More specifically, the AI management protocol 1 10 provides for the utilization of ASIC, FPGA, GPU, CPU, and other devices for the purpose of solving large complex mathematical problems in the AI space.

[0019] Compute nodes 104 use the AI management protocol 110 to exchange information over data communication network(s) 1 12 with each other about their respective hardware/software problem-solving capabilities. Based on such information from the compute nodes 104, the protocol manager 1 14 handles computational problem requests 1 16 by determining which of the system's AI resources should handle the requests 1 16.

[0020] Data communication network(s) 1 12 interconnect the compute nodes 104 so that a set of processing services can be available through the distributed AI-based computing applications. The data communication network(s) 112 handling the exchange of information among the compute nodes 106 may be any digital or other communications network capable of transmitting messages or data between devices, systems, or components. In certain embodiments, the data communication network(s) 112 includes a packet switched network that facilitates packet-based data communication, addressing, and data routing. The packet switched network could be, for example, a wide area network, the Internet, or the like. In various embodiments, the data communication network(s) 112 includes any number of public or private data connections, links or network connections supporting any number of communications protocols. The data communication network(s) 1 12 may include the

Internet, for example, or any other network based upon TCP/IP or other conventional protocols. In various embodiments, the data communication network(s) 112 could also incorporate Ethernet or Infiniband communication links (where Ethernet and Infiniband are trademarks) as well as a wireless and/or wired telephone network, such as a cellular communications network for communicating with mobile phones, personal digital assistants, and/or the like. The data communication network(s) 112 may also incorporate any sort of wireless or wired local and/or personal area networks, such as one or more IEEE 802.3, IEEE 802.16, and/or IEEE 802.11 networks, and/or networks that implement a short range (e.g., Bluetooth) protocol. For the sake of brevity, conventional techniques related to data transmission, signaling, network control, and other functional aspects of the systems (and the individual operating components of the systems) may not be described in detail herein.

[0021] FIG. 2 depicts compute nodes 104 advertising their technical capabilities by providing node processing attributes data 200 for use in properly assigning computational problems to resources within the system 100. The protocol manager 1 14 includes advertising processing functionality 200 to manage the node processing attributes data 202 sent by the compute nodes 104. The advertising processing process 202 stores the technical capabilities of the compute nodes 104 and exchanges the information with other compute nodes 104 within the system 100. In this manner, the protocol manager 114 provides a service for self- discovery of compute nodes 104 in an artificial intelligence cluster and advertisement of technical capabilities within the cluster.

[0022] The node processing attributes data 200 can include different types of information about the problem-solving capabilities associated with the compute nodes 104. For example, the node processing attributes data 200 can indicate specific algorithms that a particular compute node can handle. The AI management protocol 1 10 can also be configured to support multiple algorithm compute resources per node. The algorithm compute resources can constitute many different types of AI algorithms. For example, the system 100 may have neural network algorithms, support vector machine algorithms, genetic algorithms, etc.

[0023] The algorithm capability information helps address the problem of using specialized hardware such as ASICs (which can solve predetermined algorithms with great speed but are limited to a single problem) and non-specialized hardware such as CPUs (which can handle a wide variety of tasks but at a much lower speed). An example of compute nodes using specialized hardware includes an FPGA-based system for particle detection in antiproton physics experiments. In this example system, FPGA-based compute nodes are equipped with multi-Gbit/s bandwidth capability for particle event analysis. More specifically, the compute nodes perform pattern recognition for ring-imaging Cherenkov detectors, cluster searching, etc. Moreover, FPGAs such as the XILINX Virtex 4 FX series provide high speed connectivity via RocketIO as well as via GBit Ethernet. The following reference provides additional information and is hereby incorporated herein for all purposes: W. Kuhn et al, "FPGA - Based Compute Nodes for the PANDA Experiment at FAIR," IEEE Xplore, April 2007, DOI: 10.1109/RTC.2007.4382729. Many other types of cluster architectures can be used, such as the hardware systems and communication pathways described in U.S. Patent No. 9,325,593 (entitled "Systems, methods, and devices for dynamic resource monitoring and allocation in a cluster system") which is hereby incorporated herein for all purposes.

[0024] The node processing attributes data 200 indicates the algorithm capability of a compute node by using an algorithm ID which is shared throughout the cluster. With shared algorithm IDs, each algorithm capable of being performed by the cluster is advertised throughout the cluster along with a metric identifying speed with which the algorithm can be solved. For example, the capabilities of ASICs for a single algorithm within the cluster and the capabilities of CPUs for multiple algorithms can be communicated consistently throughout the system 100 with such IDs.

[0025] FIG. 3 depicts that the protocol manager 114 not only handles the advertising of technical capabilities of the compute nodes 104 but also analyzes those capabilities at 300 so that component assignment process 302 can properly determine the compute nodes to handle the computational problem. Component assignment process 302 recognizes that a computational problem can typically be solved in different ways by computer hardware or software. By examining the particular computational problem request with the analysis performed by attribute analysis process 300, the component assignment process 302 can determine which components of hardware and software within the system 100 can solve the problem most efficiently.

[0026] It should be understood that the protocol manager 114 can be configured in many different ways. For example, a distribution compute node (as well as a backup) can be assigned to operate as the protocol manager 114. Such a compute node knows the capabilities and costs of each machine on the network.

[0027] FIG. 4 provides an example of attributes that the attribute analysis process 300 can analyze for consideration by the component assignment process 302 in determining resource allocation. For example, the compute nodes 104 can advertise through the AI management protocol 110 their respective processing capabilities, which algorithms they can handle, and load and health information about the compute nodes. The protocol manager 114 includes additional functionality to analyze such information. For example, node analysis process 400 can assess health and node failure information from the compute nodes 104 by determining whether a compute node passes algorithm health checks for each AI compute resource it has.

As an illustration, if a compute node has three dedicated ASICs for handling a map reduction function attached to its PCI bus and if one of the ASICs fails, then the compute node can either remove itself entirely from the cluster, or may continue to advertise itself in a degraded state to the cluster based on how the AI management protocol 110 has been configured.

[0028] Load analysis process 410 assesses the loads of the compute nodes 104. According to the AI management protocol 110, each algorithm has a specific load metric that is generated by executing an algorithmic sample or proof against the hardware and is measured in microseconds. The proof may vary based on the type of hardware used in the system 100. For example, an ASIC will typically be faster than a GPU which typically will be faster than a CPU. This can then be combined with a system load metric to generate the final system load metric, thereby allowing the protocol manager 114 to customize load per hardware profile as well as have control over which machines are utilized first or last.

[0029] The protocol manager 1 14 can further include network latency analysis process 402. Network latency analysis process 402 calculates a network distance vector from a known requestor point. This analysis includes measuring the compute nodes 104 in an AI cluster with respect to the latency to the known requestor point within the data center. For example, when an external end user is initiating the request, the compute nodes closest to the external gateway router may be considered faster candidates by the network latency analysis functionally 402 for smaller compute problems. This helps identify when nodes in a DR (Disaster Recovery) data center may be utilized, and when it would be more efficient to send work to them based on network latency and expected utilization.

[0030] FIGS. 5 and 6 provide operational scenarios where compute nodes advertise their capabilities which will be used for allocating compute node resources to solve a computational problem. In the operational scenario of FIG. 5, a protocol manager implements an AI management protocol for the compute nodes by using distribution points for the exchange of problem-solving node capabilities. More specifically, compute nodes obtain at process block 500 information about the IP address of the protocol manager after the protocol manager initially starts up. In this example, the protocol manager uses a primary distribution point (PDP) and a secondary distribution point (SDP) for information exchange. These addresses are subsequently used at predetermined times (e.g., every 30 minutes, etc.) for the broadcast of a full table of learned node capabilities. This ensures that all machines on the network are in sync and aware of the capabilities of other machines on the network.

[0031] For purposes of advertising capabilities on a network link, the following multicast IP addresses can be used: Primary Distribution Point: 224.0.0.240, UDP 849; and Secondary Distribution Point 224.0.0.241, UDP 849. The flexibility of the AI management protocol is provided in part by distribution points scaling to new types of hardware that can be implemented in the future beyond the use of the fastest type of hardware available today (e.g., ASICs).

[0032] In this operational scenario, the compute nodes are part of the same local multicast network, however, it should be understood that other configurations can be used. For example, through multicast routing and MPBGP (Multiprotocol BGP), the functionality can be extended across multiple sites.

[0033] At process block 502, each machine passes along information about the preconfigured problem types and costs they have learned to all of their adjacent machines. In this operational scenario, the machines are configured with common problem identifiers for standardizing communication of their problem-solving capabilities with each other.

[0034] A compute node communicates with the PDP and then sends to the PDP the list of capabilities for which it is configured. The PDP adds this information at process block 504 to a node information table and provides the machines with a full list of the capabilities of the machines on the network at process block 506. At this point, the machines are ready to begin processing requests sent by the distribution point as indicated at process block 508.

[0035] FIG. 6 provides an operational scenario where an external requesting computer has a computational problem that requires significant resources to solve. At process block 600, the request from the external requesting computer is sent to a preconfigured virtual IP address. A load balancer is used at process block 602 to send the problem to the current active distribution point. Load balancing ensures that a single node does not become overwhelmed by always having specific problems routed to it simply because it has the fastest hardware.

[0036] At process block 604, the distribution point then uses its problem routing table to determine which compute node(s) should be used. The algorithm ID can determine which resources can handle the computational problem. In this operational scenario, machines operating according to the AI management protocol within the network have a unique ID for each type of calculation that they are to perform. For example, machines with a CPU can have a wildcard (e.g., an "*") in the field for algorithm type because they can solve any type of algorithm, albeit at a higher cost. Machines that cannot handle the computational problem are removed from consideration.

[0037] Process block 604 further considers other additional factors, such as an algorithm speed cost metric and a network cost metric for determining which resource(s) have the lowest cost for handling a computational problem. The lowest cost computation can be done in many different ways, such as by using Dijkstra's algorithm to find the least costly path to reach a goal.

[0038] As known generally in the art, Dijkstra's algorithm assigns costs for traversing different paths to reach a goal. Within the specific operational scenario of FIG. 6, the following algorithm costs can be used as costs in Dijkstra's algorithm for assessing node resources: ASIC=100; FPGA=200; GPU=300; and CPU=400. These values indicate the total time to process a computational problem as measured in milliseconds. A lower value is preferred for solving a computational problem and it allows Dijkstra's algorithm to natively choose the lowest value. It also allows for the manipulation of these values in case system engineers need to manipulate these values for specific purposes.

[0039] Dijkstra's algorithm can use other costs, such as a network cost. A network cost is based on the total cost of transmitting the algorithm from the currently active distribution point to the worker compute node as measured in milliseconds. In this way, network latency and its effect on the problem being solved are taken into account. For example, the protocol manager may determine for simpler computational problems that it is less costly to route the problem to a GPU that is physically closer to the source than a remotely located ASIC where the network latency time would exceed the performance gains by routing the problem to the ASIC. The distribution point can use Dijkstra's algorithm to compute the shortest path through the network between themselves and a remote router or network destination for selecting the most suitable worker compute node.

[0040] After the resource(s) are determined at process block 604, the computational problem is sent at process block 606 to the compute node or nodes that are adequately suited for processing this type of problem. Upon receipt of the problem by a worker compute node, the worker compute node uses its resources to solve the problem and return the results at process block 608 to the external requesting computer.

[0041] FIG. 7 depicts that the AI management protocol 110 can use a protocol data structure 700 to manage compute nodes 104. In one embodiment, the protocol data structure 700 can use a multi-tiered data structure to store and analyze the node processing attributes data 200 and other information of the compute nodes as shown at 702. For example, the protocol data structure 700 can include algorithm IDs, load information, and health and node status information as shown at 702 for the compute node 1 data field. This allows, among other things, for the protocol manager 114 to identify information that is missing from one or more compute nodes.

[0042] While examples have been used to disclose the invention and also to enable any person of ordinary skill in the art to make and use the invention, the patentable scope of the invention is defined by claims, and may include other examples that occur to those of ordinary skill in the art. Accordingly, the examples disclosed herein are to be considered non-limiting.

[0043] As an example of the wide scope of the systems and methods disclosed herein, the compute node interfaces used to exchange information with neighbor machines may be configured in different ways. In cases where only two machines are operating with the AI management protocol, the two routers know that they are the only "advertisements" on the link, and they exchange capability information with each other. In this case ether machines can perform the role of the distribution point.

[0044] In the case of a production network, many different machines may be on a network segment. To minimize the amount of network traffic on production links, the protocol manager elects a primary distribution machine (as well as a backup) who learns the capabilities and costs of each machine within the network.

[0045] As another example of the wide scope of the systems and methods disclosed herein, systems and methods can be configured to allow for self-discovery of compute node services in an AI cluster and advertisement of capabilities within the cluster. With such capability, the amount of personnel needed to manage AI clusters is reduced while ensuring the most efficient use of resources by the AI cluster. This supports high availability and fault tolerance as well as supports built-in health checks to ensure accuracy based on predetermined algorithm proofs. [0046] The systems and methods as disclosed herein can be configured to allow for utilization of DR (Disaster Recovery) hardware when it is efficient to do so based on predetermined calculations (e.g., network latency vs. algorithm execution time vs. type and quantity of hardware available). Further, it can support authentication to prevent unauthorized devices from joining the cluster.

[0047] As yet another example of the wide scope of the systems and methods disclosed herein, many different types of components can constitute a heterogeneous processing environment, such as Central Processing Units (CPUs), Graphics processing Units (GPUs), Field Programmable Gate Array (FPGAs), Application Specific Integrated Circuits (ASICs), etc. A CPU is a general purpose processor. It is general purpose in the sense that it is designed to perform a wide variety of operations. Although a CPU may perform many tasks, the performance achieved may not be sufficient for more computationally intensive applications.

[0048] A GPU is designed to accelerate creation of images for a computer display. While a CPU typically consists of a few cores optimized for sequential serial processing, a GPU typically consists of thousands of smaller, more efficient cores designed for handling multiple tasks simultaneously. They are designed to perform functions such as texture mapping, image rotation, translation, shading, etc. They may also support operations (e.g., motion compensation, etc.) for accelerated video decoding.

[0049] An FPGA differs from a CPU or GPU in the sense that it is not a processor in itself because it does not run a program stored in the program memory. An FPGA can be considered as a set of reconfigurable digital logic circuits suspended in a large number of programmable inter-connects. A typical FPGA may also have dedicated memory blocks, digital clock manager, I/O banks and other features which vary across different vendors and models. Because they can be configured after manufacturing at the costumer's end, they can be used to implement any logic function (including but not limited to a processor core). This makes them ideal for re-configurable computing and application specific processing.

[0050] An ASIC is a chip that is designed for a single purpose and can only perform a specific function such as solving a mathematical problem. An advantage to ASICs is that they are considerably faster than any other solution for solving the problem that they are designed to solve. A disadvantage is that they are single purpose in that they can only be used to solve the problem for which they were built. This can make them useful for a specific problem, however for any other type of problem, they may be unusable.

[0051] The systems and methods disclosed herein may also be provided on many different types of computer-readable storage media including computer storage mechanisms (e.g., non- transitory media, such as CD-ROM, diskette, RAM, flash memory, computer's hard drive, etc.) that contain instructions (e.g., software) for use in execution by a processor to perform the operations and implement the systems described herein.

[0052] Still further, systems and methods can be implemented in many different types of environments, such as compute nodes and other computing devices described herein having memories configured to store one or more pieces of data, either temporarily, permanently, send-permanently, or a combination thereof. Further, a memory may include volatile memory, non-volatile memory, or a combination thereof and may be distributed across multiple devices. In various embodiments, compute nodes and computing devices may include storage medium configured to store data in a semi-permanent or substantially permanent form. In various embodiments, the storage medium may be integrated into memory. [0053] FIG. 8 depicts another example of an environment where users can use the systems and methods described herein. FIG. 8 depicts an exemplary embodiment of users operating within an on-demand multi-tenant database system 800. The illustrated multi-tenant system

800 of FIG. 8 includes a server 802 that dynamically creates and supports virtual applications

828 based upon data 832 from a common database 830 that is shared between multiple tenants, alternatively referred to herein as a multi-tenant database. Data and services generated by the virtual applications 828 are provided via a network 845 to any number of client devices 840, as desired. Each virtual application 828 is suitably generated at run-time

(or on-demand) using a common application platform 810 that securely provides access to the data 832 in the database 830 for each of the various tenants subscribing to the multi-tenant system 800. In accordance with one non-limiting example, the multi-tenant system 800 is implemented in the form of an on-demand multi-tenant customer relationship management

(CRM) system that can support any number of authenticated users of multiple tenants.

[0054] As used herein, a "tenant" or an "organization" should be understood as referring to a group of one or more users or entities that shares access to common subset of the data within the multi-tenant database 830. In this regard, each tenant includes one or more users associated with, assigned to, or otherwise belonging to that respective tenant. To put it another way, each respective user within the multi-tenant system 800 is associated with, assigned to, or otherwise belongs to a particular tenant of the plurality of tenants supported by the multi-tenant system 800. Tenants may represent customers, customer departments, business or legal organizations, and/or any other entities that maintain data for particular sets of users within the multi -tenant system 800 (i.e., in the multi -tenant database 830). For example, the application server 802 may be associated with one or more tenants supported by the multi-tenant system 800. Although multiple tenants may share access to the server 802 and the database 830, the particular data and services provided from the server 802 to each tenant can be securely isolated from those provided to other tenants (e.g., by restricting other tenants from accessing a particular tenant's data using that tenant's unique organization identifier as a filtering criterion). The multi-tenant architecture therefore allows different sets of users to share functionality and hardware resources without necessarily sharing any of the data 832 belonging to or otherwise associated with other tenants.

[0055] The multi-tenant database 830 is any sort of repository or other data storage system capable of storing and managing the data 832 associated with any number of tenants. The database 830 may be implemented using any type of conventional database server hardware. In various embodiments, the database 830 shares processing hardware 804 with the server 802. In other embodiments, the database 830 is implemented using separate physical and/or virtual database server hardware that communicates with the server 802 to perform the various functions described herein. In an exemplary embodiment, the database 830 includes a database management system or other equivalent software capable of determining an optimal query plan for retrieving and providing a particular subset of the data 832 to an instance of virtual application 828 in response to a query initiated or otherwise provided by a virtual application 828. The multi-tenant database 830 may alternatively be referred to herein as an on-demand database, in that the multi-tenant database 830 provides (or is available to provide) data at run-time to on-demand virtual applications 828 generated by the application platform 810.

[0056] In practice, the data 832 may be organized and formatted in any manner to support the application platform 810. In various embodiments, the data 832 is suitably organized into a relatively small number of large data tables to maintain a semi-amorphous "heap"-type format. The data 832 can then be organized as needed for a particular virtual application 828. In various embodiments, conventional data relationships are established using any number of pivot tables 834 that establish indexing, uniqueness, relationships between entities, and/or other aspects of conventional database organization as desired. Further data manipulation and report formatting is generally performed at run-time using a variety of metadata constructs.

Metadata within a universal data directory (UDD) 836, for example, can be used to describe any number of forms, reports, workflows, user access privileges, business logic and other constructs that are common to multiple tenants. Tenant-specific formatting, functions and other constructs may be maintained as tenant-specific metadata 838 for each tenant, as desired. Rather than forcing the data 832 into an inflexible global structure that is common to all tenants and applications, the database 830 is organized to be relatively amorphous, with the pivot tables 834 and the metadata 838 providing additional structure on an as-needed basis. To that end, the application platform 810 suitably uses the pivot tables 834 and/or the metadata 838 to generate "virtual" components of the virtual applications 828 to logically obtain, process, and present the relatively amorphous data 832 from the database 830.

[0057] The server 802 is implemented using one or more actual and/or virtual computing systems that collectively provide the dynamic application platform 810 for generating the virtual applications 828. For example, the server 802 may be implemented using a cluster of actual and/or virtual servers operating in conjunction with each other, typically in association with conventional network communications, cluster management, load balancing and other features as appropriate. The server 802 operates with any sort of conventional processing hardware 804, such as a processor 805, memory 806, input/output features 807 and the like.

The input/output features 807 generally represent the interface(s) to networks (e.g., to the network 845, or any other local area, wide area or other network), mass storage, display devices, data entry devices and/or the like. The processor 805 may be implemented using any suitable processing system, such as one or more processors, controllers, microprocessors, microcontrollers, processing cores and/or other computing resources spread across any number of distributed or integrated systems, including any number of "cloud-based" or other virtual systems. The memory 806 represents any non-transitory short or long term storage or other computer-readable media capable of storing programming instructions for execution on the processor 805, including any sort of random access memory (RAM), read only memory (ROM), flash memory, magnetic or optical mass storage, and/or the like. The computer- executable programming instructions, when read and executed by the server 802 and/or processor 805, cause the server 802 and/or processor 805 to create, generate, or otherwise facilitate the application platform 810 and/or virtual applications 828 and perform one or more additional tasks, operations, functions, and/or processes described herein. It should be noted that the memory 806 represents one suitable implementation of such computer-readable media, and alternatively or additionally, the server 802 could receive and cooperate with external computer-readable media that is realized as a portable or mobile component or application platform, e.g., a portable hard drive, a USB flash drive, an optical disc, or the like.

[0058] The application platform 810 is any sort of software application or other data processing engine that generates the virtual applications 828 that provide data and/or services to the client devices 840. In a typical embodiment, the application platform 810 gains access to processing resources, communications interfaces and other features of the processing hardware 804 using any sort of conventional or proprietary operating system 808. The virtual applications 828 are typically generated at run-time in response to input received from the client devices 840. For the illustrated embodiment, the application platform 810 includes a bulk data processing engine 812, a query generator 814, a search engine 816 that provides text indexing and other search functionality, and a runtime application generator 820. Each of these features may be implemented as a separate process or other module, and many equivalent embodiments could include different and/or additional features, components or other modules as desired.

[0059] The runtime application generator 820 dynamically builds and executes the virtual applications 828 in response to specific requests received from the client devices 840. The virtual applications 828 are typically constructed in accordance with the tenant-specific metadata 838, which describes the particular tables, reports, interfaces and/or other features of the particular application 828. In various embodiments, each virtual application 828 generates dynamic web content that can be served to a browser or other client program 842 associated with its client device 840, as appropriate.

[0060] The runtime application generator 820 suitably interacts with the query generator 814 to efficiently obtain multi-tenant data 832 from the database 830 as needed in response to input queries initiated or otherwise provided by users of the client devices 840. In a typical embodiment, the query generator 814 considers the identity of the user requesting a particular function (along with the user's associated tenant), and then builds and executes queries to the database 830 using system-wide metadata 836, tenant specific metadata 838, pivot tables 834, and/or any other available resources. The query generator 814 in this example therefore maintains security of the common database 830 by ensuring that queries are consistent with access privileges granted to the user and/or tenant that initiated the request. In this manner, the query generator 814 suitably obtains requested subsets of data 832 accessible to a user and/or tenant from the database 830 as needed to populate the tables, reports or other features of the particular virtual application 828 for that user and/or tenant.

[0061] Still referring to FIG. 8, the data processing engine 812 performs bulk processing operations on the data 832 such as uploads or downloads, updates, online transaction processing, and/or the like. In many embodiments, less urgent bulk processing of the data 832 can be scheduled to occur as processing resources become available, thereby giving priority to more urgent data processing by the query generator 814, the search engine 816, the virtual applications 828, etc.

[0062] In exemplary embodiments, the application platform 810 is utilized to create and/or generate data-driven virtual applications 828 for the tenants that they support. Such virtual applications 828 may make use of interface features such as custom (or tenant-specific) screens 824, standard (or universal) screens 822 or the like. Any number of custom and/or standard objects 826 may also be available for integration into tenant-developed virtual applications 828. As used herein, "custom" should be understood as meaning that a respective object or application is tenant-specific (e.g., only available to users associated with a particular tenant in the multi-tenant system) or user-specific (e.g., only available to a particular subset of users within the multi-tenant system), whereas "standard" or "universal" applications or objects are available across multiple tenants in the multi -tenant system. For example, a virtual CRM application may utilize standard objects 826 such as "account" objects, "opportunity" objects, "contact" objects, or the like. The data 832 associated with each virtual application 828 is provided to the database 830, as appropriate, and stored until it is requested or is otherwise needed, along with the metadata 838 that describes the particular features (e.g., reports, tables, functions, objects, fields, formulas, code, etc.) of that particular virtual application 828. For example, a virtual application 828 may include a number of objects 826 accessible to a tenant, wherein for each object 826 accessible to the tenant, information pertaining to its object type along with values for various fields associated with that respective object type are maintained as metadata 838 in the database 830. In this regard, the object type defines the structure (e.g., the formatting, functions and other constructs) of each respective object 826 and the various fields associated therewith.

[0063] Still referring to FIG. 8, the data and services provided by the server 802 can be retrieved using any sort of personal computer, mobile telephone, tablet or other network- enabled client device 840 on the network 845. In an exemplary embodiment, the client device 840 includes a display device, such as a monitor, screen, or another conventional electronic display capable of graphically presenting data and/or information retrieved from the multi- tenant database 830. Typically, the user operates a conventional browser application or other client program 842 executed by the client device 840 to contact the server 802 via the network 845 using a networking protocol, such as the hypertext transport protocol (HTTP) or the like. The user typically authenticates his or her identity to the server 802 to obtain a session identifier ("SessionID") that identifies the user in subsequent communications with the server 802. When the identified user requests access to a virtual application 828, the runtime application generator 820 suitably creates the application at run time based upon the metadata 838, as appropriate. As noted above, the virtual application 828 may contain Java, ActiveX, or other content that can be presented using conventional client software running on the client device 840; other embodiments may simply provide dynamic web or other content that can be presented and viewed by the user, as desired.

[0064] A data item, such as a knowledge article, stored by one tenant (e.g., one department in a company) may be relevant to another tenant (e.g., a different department in the same company. One way of providing a user in another tenant domain with access to the article is to store a second instance of the article in the tenant domain of the second tenant. The apparatus, systems, techniques and articles described herein provide another way of providing a user in another tenant domain with access to the article without wasting resources by storing a second copy.