Inter-cloud broker for hybrid cloud networks

• US 10,129,177 B2
• Filed: 05/23/2016
• Issued: 11/13/2018
• Est. Priority Date: 05/23/2016
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Chang, David Wei-Shen, Yang, Chiang Han, Anantha, Murali, Vinchurkar, Shashank
• Primary Examiner(s): Nano, Sargon
• Application Number:
  US15/161,897
• Publication Number:
  US 20170339070A1
• Time in Patent Office: 904 Days
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/5006 Creating or negotiating SLA contracts, guarantees or penalties
• CPC Class Codes: H04L 47/829 Topology based
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/562 Brokering proxy services

Abstract

A cloud broker gateway interfaces with an enterprise network and one or more public cloud networks, including a first public cloud and a second public cloud. The cloud broker gateway receives a request for one or more computing resources from a tenant associated with the enterprise network, and directs the request to the first public cloud based on a brokerage policy for the tenant. The cloud broker gateway receives a response indicating the first public cloud cannot provide the one or more computing resources, and redirects the request to the second public cloud based on the brokerage policy for the tenant. The cloud broker gateway also establishes a hybrid cloud that provides access to the one or more computing resources between the second public cloud and the enterprise network.

Claims

1. A method, comprising:

providing a cloud broker gateway that interfaces with an enterprise network and one or more public clouds, the one or more public clouds include at least a first public cloud and a second public cloud;

receiving, by the cloud broker gateway, a request from a tenant associated with the enterprise network for one or more computing resources;

directing, by the cloud broker gateway, the request to the first public cloud based on a brokerage policy for the tenant;

receiving, by the cloud broker gateway, a response indicating the first public cloud cannot provide the one or more computing resources;

redirecting, by the cloud broker gateway, the request to the second public cloud based on the brokerage policy for the tenant when the response indicates the first public cloud cannot provide the one or more computing resources; and

establishing, by the cloud broker gateway, a hybrid cloud that provides access to the one or more computing resources between the second public cloud and the enterprise network, the cloud broker gateway configured to act as a proxy for the tenant to dynamically secure the one or more computing resources.

2. The method of claim 1, further comprising:

receiving, by the cloud broker gateway, a second response indicating the second public cloud can provide the one or more computing resources.

3. The method of claim 2, wherein establishing the hybrid cloud further comprises securing the one or more computing resources for the tenant from the second public cloud.

4. The method of claim 1, wherein the response indicating the first public cloud cannot provide the one or more computing resources includes a representational state transfer (REST) return code.

5. The method of claim 1, further comprising:

mapping, by the cloud broker gateway, one or more representational state transfer (REST) return codes to a trigger event that causes the cloud broker gateway to redirect the request to one of the one or more public clouds, and

wherein the response indicating the first public cloud cannot provide the one or more computing resources includes at least one REST return code.

6. The method of claim 1, further comprising:

receiving, by the cloud broker gateway, one or more tenant credentials for at least the first public cloud and the second public cloud,

wherein, directing the request to the first public cloud further comprises, directing the request to the first public cloud using the one or more tenant credentials for the first public cloud, and

wherein, redirecting the request to the second public cloud, further comprises redirecting the request to the public second public cloud using the one or more tenant credentials for the second public cloud.

7. The method of claim 1, further comprising:

receiving, by the cloud broker gateway, a second request from the tenant associated with the enterprise network for at least one additional computing resource;

determining, by the cloud broker gateway, the hybrid cloud is established between the second public cloud and the enterprise network; and

directing, by the cloud broker gateway, the second request to the second public cloud based on an affinity policy when the hybrid cloud is established between the second public cloud and the enterprise network.

8. The method of claim 1, further comprising:

registering, by the cloud broker gateway, a shared tenant account to access resources at least at the first public cloud;

receiving, by the cloud broker gateway, a charge for the shared tenant account, the charge indicates services provided by the first public cloud over a time period;

determining consumption statistics for each tenant associated with the shared tenant account, the consumption statistics; and

generating, by the cloud broker gateway, an invoice for each tenant, the invoice for each tenant corresponds to the consumptions statics for said each tenant.

9. The method of claim 1,

registering, by the cloud broker gateway, an individual tenant account for accessing resources at least at the first public cloud;

receiving, by the cloud broker gateway, a charge for the individual tenant account, the charge indicates services provided by the first public cloud over a time period; and

generating, by the cloud broker gateway, an invoice for a tenant associated with the individual tenant account based on the charge.

10. The method of claim 1, further comprising:

determine a priority for selecting the public cloud service providers based on a tenant preference; and

incorporate the priority in the brokerage policy for the tenant.

11. The method of claim 1, further comprising:

receiving, by the cloud broker gateway, a termination request from the tenant regarding the one or more computing resources; and

terminating, by the cloud broker gateway, the hybrid cloud in response to the termination request.

12. A cloud broker gateway device configured to act as a proxy for a tenant to dynamically secure one or more computing resources on behalf of the tenant, the device comprising:

one or more network interfaces to communicate with an enterprise network and one or more public clouds, the one or more public clouds include at least a first public cloud and a second public cloud;

a processor coupled to the network interfaces and adapted to execute one or more processes; and

a memory configured to store a process executable by the processor, the process, when executed, is operable to;

receive a request from the tenant associated with the enterprise network for the one or more computing resources;

direct the request to the first public cloud based on a brokerage policy for the tenant;

receive a response indicating the first public cloud cannot provide the one or more computing resources;

redirect the request to the second public cloud based on the brokerage policy for the tenant when the response indicates the first public cloud cannot provide the one or more computing resources; and

establish a hybrid cloud that provides access to the one or more computing resources between the second public cloud and the enterprise network.

13. The cloud broker gateway device of claim 12, wherein the process, when executed by the processor, is further operable to:

receive a second response indicating the second public cloud can provide the one or more computing resources.

14. The cloud broker gateway device of claim 13, wherein the process to establish the hybrid cloud is further operable to secure the one or more computing resources for the tenant from the second public cloud.

15. The cloud broker gateway device of claim 12, wherein the response indicating the first public cloud cannot provide the one or more computing resources includes a representational state transfer (REST) return code.

16. The cloud broker gateway device of claim 12, wherein the process, when executed by the processor, is further operable to:

map one or more representational state transfer (REST) return codes to a trigger event, the trigger event causes the cloud broker gateway device to redirect the request to one of the one or more public clouds, and

wherein the response indicating the first public cloud cannot provide the one or more computing resources includes at least one REST return code.

17. The cloud broker gateway device of claim 12, wherein the process, when executed by the processor, is further operable to:

receive one or more tenant credentials for at least the first public cloud and the second public cloud,

wherein, directing the request to the first public cloud further comprises, directing the request to the first public cloud using the one or more tenant credentials for the first public cloud, and

wherein, redirecting the request to the second public cloud network, further comprises redirecting the request to the second public cloud using the one or more tenant credentials for the second public cloud.

18. The cloud broker gateway device of claim 12, wherein the process, when executed by the processor, is further operable to:

receive a second request from the tenant associated with the enterprise network for at least one additional computing resource;

determine the hybrid cloud is established between the second public cloud and the enterprise network; and

direct the second request to the second public cloud based on the hybrid cloud established between the second public cloud and the enterprise network.

19. A tangible, non-transitory, computer-readable media having software encoded thereon, the software, when executed by a processor, operable to:

receive, by a cloud broker gateway that interfaces with an enterprise network and one or more public cloud networks, a request from a tenant associated with the enterprise network for one or more computing resources;

direct the request to a first public cloud of the one or more networks based on a brokerage policy for the tenant;

receive a response indicating the first public cloud cannot provide the one or more computing resources;

redirect the request to a second public cloud of the one or more public clouds based on the brokerage policy for the tenant when the response indicates the first public cloud cannot provide the one or more computing resources; and

establish a hybrid cloud that provides access to the one or more computing resources between the second public cloud and the enterprise network, the cloud broker gateway configured to act as a proxy for the tenant to dynamically secure the one or more computing resources.

20. The tangible, non-transitory, computer-readable media of claim 19, wherein, the software, when executed by a processor, is operable to:

map one or more representational state transfer (REST) return codes to a trigger event that causes the cloud broker gateway to redirect the request to one of the one or more public cloud networks, and

wherein the response indicating the first public cloud cannot provide the one or more computing resources includes at least one REST return code.