Techniques for cloud control and management

• US 10,560,330 B2
• Filed: 08/14/2017
• Issued: 02/11/2020
• Est. Priority Date: 07/09/2009
• Status: Active Grant

• Current Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Original Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Inventors: Wipfel, Robert A., Carter, Stephen R, McClain, Carolyn B.
• Primary Examiner(s): Jean, Frantz B
• Application Number:
  US15/675,966
• Publication Number:
  US 20170346696A1
• Time in Patent Office: 911 Days
• Field of Search: 709200
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: G06F 16/254 Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 47/782 Hierarchical allocation of resources, e.g. involving a hierarchy of local and centralised entities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Techniques for cloud control and management are provided. The control, creation, and management of workloads in distributed infrastructures are coordinated via a master Configuration Management Database (CMDB). The master CMDB is also used to unify the multiple distributed infrastructures so that the workloads are rationalized. Moreover, data centers are coordinated with the distributed infrastructures so the configuration settings and policies included in the master CMDB are enforced and synchronized throughout the network.

Claims

1. A method, comprising:

logically organizing hardware and storage disbursed over a network into virtualization layers as workloads, each workload representing a different and an independent processing environment as a unique data center, and each data center including data-center specific security and data-center controlled resources;

maintaining a configuration management database that identifies each data center along with that data center'"'"'s;

configuration settings, data center-specific security, and data-center controlled resources;

deploying each data center over the network for processing; and

monitoring each data center while permitting each data center to independently manage that data center'"'"'s;

configuration settings, data center-specific security, and data-center controlled resources unless during independent management any particular data center violates master policies maintained in the configuration management database.

2. The method of claim 1, wherein logically organizing further includes maintaining at least one data center as a cloud processing environment over the network.

3. The method of claim 1, wherein logically organizing further includes maintaining at least one data center for storage processing that is available for use by other ones of the data centers.

4. The method of claim 1, wherein logically organizing further includes maintaining at least one data center as a self-contained processing environment.

5. The method of claim 1, wherein logically organizing further includes maintaining at least one data center as an Internet-as-a-Service (IaaS) architecture.

6. The method of claim 1, wherein monitoring further includes enforcing the master policies as conditions detected from the independent processing of the data centers over the network, with the conditions linked to automated processing actions to process when the conditions evaluate to true.

7. The method of claim 1, wherein monitoring further includes providing a mechanism for at least two data centers to share some resources with one another.

8. The method of claim 1, wherein monitoring further includes permitting each data center to create and deploy additional sub data centers, wherein permitting further includes enforcing the master policies against the sub data centers during operation of the sub data centers.

9. The method of claim 1 further comprising, providing the configuration management database to the data centers for each data center to enforce identity-based security during operation of the data centers.

10. A system, comprising:

a network-based server;

a network-management interface that executes on the network-based server and is accessible to a plurality of independent and disparate processing environments over a network; and

a configuration repository accessible from the network-based server;

wherein the processing environments are deployed over the network and each processing environment is configured to independently manage that processing environment'"'"'s;

processing-specific resources and processing-specific security, and wherein the network-management interface maintains configuration settings and policies for the processing environments and ensures that master policies of the configuration repository are not violated by any of the processing environments during operation of the processing environments over the network.

11. The system of claim 10, wherein the processing environments are self-contained processing environments, each configured to process over the network as an independent and self-contained processing environment.