API gateway for network policy and configuration management with public cloud

• US 10,469,314 B2
• Filed: 10/17/2018
• Issued: 11/05/2019
• Est. Priority Date: 06/08/2015
• Status: Active Grant

• Current Assignee: Infoblox Incorporated
• Original Assignee: Infoblox Incorporated
• Inventors: Ennis, Jr., James D., Bhatt, Mehul Jayantilal, Voss, John Charles
• Primary Examiner(s): Won, Michael
• Application Number:
  US16/162,915
• Publication Number:
  US 20190140895A1
• Time in Patent Office: 384 Days
• CPC Class Codes: G06F 9/54 Interprogram communication
• CPC Class Codes: G06F 9/541 via adapters, e.g. between incompatible applications
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5076 Update or notification mechanisms, e.g. DynDNS
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Techniques for providing an API gateway for network policy and configuration management with public cloud are disclosed. In some embodiments, a system, process, and/or computer program product for an API gateway for network policy and configuration management with public cloud includes receiving a native or extended public cloud application programming interface (API) request at the API gateway; processing the public cloud API request; extracting data from the request for use in other API calls; and, in some cases, translating the public cloud API request into a native public cloud API request with or without adding parameters or properties to and/or substituting new values for parameters in the public cloud API request (e.g., in some cases modifying the public cloud API request can include inserting additional parameters/properties, such as instance IP address that was not present in the initial API request); and sending the native public cloud API request to the public cloud environment.

Claims

1. A system, comprising:

a processor of an application programming interface (API) gateway for network policy and configuration management with a public cloud environment, wherein the processor is configured to;

intercept an extended public cloud API request at the API gateway;

search a data store using an extensible attribute (EA) as a parameter in the extended public cloud API request;

obtain a next available Internet protocol (IP) address for a network matching a virtual private cloud (VPC) subnet identifier (ID) EA;

process the extended public cloud API request and translate the extended public cloud API request into a native public cloud API request that specifies the IP address; and

send the native public cloud API request to the public cloud environment for processing; and

a memory coupled to the processor and configured to provide the processor with instructions.

2. The system recited in claim 1, wherein the API gateway inspects, processes, and modifies the extended public cloud API request to generate the native public cloud API request.

3. The system recited in claim 1, wherein the API gateway is implemented on an appliance.

4. The system recited in claim 1, wherein the API gateway is implemented on an appliance, and wherein the appliance includes an IP address appliance and/or a Domain Name System (DNS) record management appliance.

5. The system recited in claim 1, wherein the API gateway is implemented on a cloud platform appliance, and wherein the cloud platform appliance includes a virtual IP address appliance and/or a Domain Name System (DNS) record management appliance.

6. The system recited in claim 1, wherein the API gateway is implemented on a cloud platform appliance, and wherein the cloud platform appliance is configured as a primary cloud platform appliance for receiving cloud requests from a global cloud manager.

7. The system recited in claim 1, wherein the public cloud API request is related to a resource in the public cloud environment, and wherein the resource in the public cloud environment is associated with a virtual resource.

8. The system recited in claim 1, wherein the public cloud API request is related to a resource in the public cloud environment, and wherein the resource in the public cloud environment is associated with a physical resource.

9. The system recited in claim 1, wherein the public cloud API request includes metadata that is not supported by the native API(s) for the public cloud environment.

10. The system recited in claim 1, wherein the public cloud API request indicates whether a resource is a newly added resource in the public cloud environment, a deleted resource in the public cloud environment, or a modified resource in the public cloud environment.

11. The system recited in claim 1, wherein the processor is further configured to:

parse and extract the EA included in the extended public cloud API request.

12. The system recited in claim 1, wherein the processor is further configured to:

parse and extract the EA included in the extended public cloud API request; and

determine the network matching the VPC subnet ID EA or a Classless Inter-Domain Routing (CIDR) block.

13. The system recited in claim 1, wherein the processor is further configured to:

communicate with a grid master or a cloud member that is authoritative for an object associated with the public cloud API request.

14. A method, comprising:

intercepting an extended public cloud API request at an API gateway for network policy and configuration management with a public cloud environment;

searching a data store using an extensible attribute (EA) as a parameter in the extended public cloud API request;

obtaining a next available Internet protocol (IP) address for a network matching a virtual private cloud (VPC) subnet identifier (ID) EA;

processing the extended public cloud API request and translating the extended public cloud API request into a native public cloud API request that specifies the IP address; and

sending the native public cloud API request to the public cloud environment for processing.

15. The method of claim 14, further comprising:

parsing and extracting the EA included in the extended public cloud API request.

16. The method of claim 14, further comprising:

parsing and extracting the EA included in the extended public cloud API request; and

determining the network matching the VPC subnet ID EA or a Classless Inter-Domain Routing (CIDR) block.

17. The method of claim 14, further comprising:

communicating with a grid master or a cloud member that is authoritative for an object associated with the public cloud API request.

18. The method of claim 14, wherein the API gateway inspects, processes, and modifies the extended public cloud API request to generate the native public cloud API request.

19. The method of claim 14, wherein the API gateway is implemented on an appliance, and wherein the appliance includes an IP address appliance and/or a Domain Name System (DNS) record management appliance.

20. The method of claim 14, wherein the API gateway is implemented on a cloud platform appliance, and wherein the cloud platform appliance includes a virtual IP address appliance and/or a Domain Name System (DNS) record management appliance.

21. The method of claim 14, wherein the API gateway is implemented on a cloud platform appliance, and wherein the cloud platform appliance is configured as a primary cloud platform appliance for receiving cloud requests from a global cloud manager.

22. The method of claim 14, wherein the public cloud API request is related to a resource in the public cloud environment, and wherein the resource in the public cloud environment is associated with a virtual resource.

23. The method of claim 14, wherein the public cloud API request is related to a resource in the public cloud environment, and wherein the resource in the public cloud environment is associated with a physical resource.

24. The method of claim 14, wherein the public cloud API request includes metadata that is not supported by the native API(s) for the public cloud environment.

25. The method of claim 14, wherein the public cloud API request indicates whether a resource is a newly added resource in the public cloud environment, a deleted resource in the public cloud environment, or a modified resource in the public cloud environment.

26. A computer program product, the computer program product being embodied in a tangible non-transitory computer readable storage medium and comprising computer instructions for:

intercepting an extended public cloud API request at an API gateway for network policy and configuration management with a public cloud environment;

searching a data store using an extensible attribute (EA) as a parameter in the extended public cloud API request;

obtaining a next available Internet protocol (IP) address for a network matching a virtual private cloud (VPC) subnet identifier (ID) EA;

processing the extended public cloud API request and translating the extended public cloud API request into a native public cloud API request that specifies the IP address; and

sending the native public cloud API request to the public cloud environment for processing.

27. The computer program product recited in claim 26, further comprising computer instructions for:

parsing and extracting the EA included in the extended public cloud API request.

28. The computer program product recited in claim 26, further comprising computer instructions for:

parsing and extracting the EA included in the extended public cloud API request; and

determining the network matching the VPC subnet ID EA or a Classless Inter-Domain Routing (CIDR) block.

29. The computer program product recited in claim 26, further comprising computer instructions for:

communicating with a grid master or a cloud member that is authoritative for an object associated with the public cloud API request.

30. The computer program product recited in claim 26, wherein the API gateway inspects, processes, and modifies the extended public cloud API request to generate the native public cloud API request.

31. The computer program product recited in claim 26, wherein the API gateway is implemented on an appliance, and wherein the appliance includes an IP address appliance and/or a Domain Name System (DNS) record management appliance.

32. The computer program product recited in claim 26, wherein the API gateway is implemented on a cloud platform appliance, and wherein the cloud platform appliance includes a virtual IP address appliance and/or a Domain Name System (DNS) record management appliance.

33. The computer program product recited in claim 26, wherein the API gateway is implemented on a cloud platform appliance, and wherein the cloud platform appliance is configured as a primary cloud platform appliance for receiving cloud requests from a global cloud manager.

34. The computer program product recited in claim 26, wherein the public cloud API request is related to a resource in the public cloud environment, and wherein the resource in the public cloud environment is associated with a virtual resource.

35. The computer program product recited in claim 26, wherein the public cloud API request is related to a resource in the public cloud environment, and wherein the resource in the public cloud environment is associated with a physical resource.

36. The computer program product recited in claim 26, wherein the public cloud API request includes metadata that is not supported by the native API(s) for the public cloud environment.

37. The computer program product recited in claim 26, wherein the public cloud API request indicates whether a resource is a newly added resource in the public cloud environment, a deleted resource in the public cloud environment, or a modified resource in the public cloud environment.