CLOUD COMPUTING GATEWAY, CLOUD COMPUTING HYPERVISOR, AND METHODS FOR IMPLEMENTING SAME

• US 20100027552A1
• Filed: 06/19/2009
• Published: 02/04/2010
• Est. Priority Date: 06/19/2008
• Status: Active Grant

• Current Assignee: VideoLabs, Inc.
• Original Assignee: Servicemesh Incorporated (DXC Technology Company)
• Inventors: Hill, Duncan Christopher
• Granted Patent: US 8,514,868 B2
• Time in Patent Office: Days
• US Class Current: 370/401
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 2009/4557 Distribution of virtual machine instances; Migration and load balancing
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/541 via adapters, e.g. between incompatible applications
• CPC Class Codes: G06F 9/547 Remote procedure calls [RPC]; Web services
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

Embodiments of the present invention provide a cloud gateway system, a cloud hypervisor system, and methods for implementing same. The cloud gateway system extends the security, manageability, and quality of service membrane of a corporate enterprise network into cloud infrastructure provider networks, enabling cloud infrastructure to be interfaced as if it were on the enterprise network. The cloud hypervisor system provides an interface to cloud infrastructure provider management systems and infrastructure instances that enables existing enterprise systems management tools to manage cloud infrastructure substantially the same as they manage local virtual machines via common server hypervisor APIs.

Claims

1. A cloud gateway system comprising:

an enterprise gateway system located in an enterprise network and comprising

a software installer configured to upload remote gateway software to a cloud provider network and to install the remote gateway software on a first virtual machine in the cloud provider network, and

a network services tool configured to establish a virtual private network between the enterprise gateway system and the first virtual machine and to provide plug-in network services having remote components; and

a remote gateway system located in the cloud provider network and comprising

a virtual machine connection tool configured to establish a secure connection between the first virtual machine and a second virtual machine in the cloud provider network, and

a remote network services tool configured to execute the remote components of the plug-in network services.

7. The cloud gateway system of claim 1, wherein the remote gateway system further comprises a virtual machine creation tool configured to create the second virtual machine in the cloud provider network.

8. The cloud gateway system of claim 1, further comprising a client access agent located on a mobile device.

9. The cloud gateway system of claim 8, wherein the client access agent comprises a mobile network services tool configured to establish a mobile virtual private network between the mobile device and the second virtual machine and to provide plug-in network services having remote components.

2-6. -6. (canceled)

10. A cloud hypervisor system comprising:

a set of front-end plug-ins, each configured to establish a pseudo-hypervisor instance and to translate a hypervisor API call received by the pseudo-hypervisor instance into an intermediate representation;

a service bus configured to route an intermediate representation to a back-end plug-in; and

a set of back-end plug-ins, each configured to translate an intermediate representation into a cloud API call.

11. The cloud hypervisor system of claim 10, wherein each front-end plug-in is further configured to place an intermediate representation on the service bus.

12. The cloud hypervisor system of claim 11, wherein each front-end plug-in is further configured to pass a destination parameter with each intermediate representation placed on the service bus.

13. The cloud hypervisor system of claim 12, wherein the destination parameter indicates a cloud provider network account.

14. The cloud hypervisor system of claim 12, wherein the destination parameter indicates a route to a back-end plug-in.

15. The cloud hypervisor system of claim 11, wherein each front-end plug-in is further configured to return a response code to a pseudo-hypervisor instance after placing an intermediate representation on the service bus.

16. The cloud hypervisor system of claim 10, wherein each front-end plug-in is further configured to generate an intermediate representation that can be understood by all of the back-end plug-ins.

17. The cloud hypervisor system of claim 10, wherein the pseudo-hypervisor instance is associated with an account at a cloud infrastructure provider.

18. The cloud hypervisor system of claim 10, wherein the service bus is further configured to return a result code to a pseudo-hypervisor instance after routing an intermediate representation.

19. The cloud hypervisor system of claim 10, wherein the service bus is further configured to return a result code to a pseudo-hypervisor instance upon a failure to complete the routing of an intermediate representation.

20. The cloud hypervisor system of claim 10, wherein each back-end plug-in corresponds to a cloud provider account.

21. The cloud hypervisor system of claim 10, further comprising a web console configured to plug into the service bus and graphically expose cloud infrastructure management functions.

22. The cloud hypervisor system of claim 10, further comprising a topology manager configured to plug into the service bus, wherein the topology manager includes an infrastructure topology creation tool and an infrastructure topology deployment tool.

23. A cloud hypervisor system comprising:

a pseudo-hypervisor creation tool configured to establish a pseudo-hypervisor instance;

an API call listening tool configured to listen for and receive hypervisor API calls;

a hypervisor API call translation tool configured to translate a hypervisor API call received by the API call listening tool into an intermediate representation;

a cloud API translation tool configured to translate an intermediate representation into a cloud API call; and

a routing tool configured to route an intermediate representation from the hypervisor API call translation tool to the cloud API translation tool.

24. A method for managing cloud infrastructure, the method comprising:

uploading remote gateway software from an enterprise network to a cloud provider network;

installing the remote gateway software on a first virtual machine in the cloud provider network;

establishing a virtual private network between the enterprise network and the first virtual machine;

establishing a secure connection between the first virtual machine and a second virtual machine in the cloud provider network; and

executing plug-in network services on the first virtual machine.

25. The method of claim 24, further comprising the steps of:

enabling a client access agent on a device outside the enterprise network and cloud provider network;

connecting the device to a public network; and

establishing a virtual private network between the device and one or both of the first virtual machine and the second virtual machine.

26. A method for communicating with cloud accounts, the method comprising:

establishing a pseudo-hypervisor instance on an enterprise network;

configuring the pseudo-hypervisor instance to receive a hypervisor API call from an enterprise systems management tool on the enterprise network;

translating a received hypervisor API call into an intermediate representation;

routing the intermediate representation to a back-end plug-in;

translating the intermediate representation into a cloud API call; and

transmitting the cloud API call to a cloud provider network for delivery to a cloud account.

27. The method of claim 26, further comprising the step of verifying successful execution of the cloud API call.

28. The method of claim 27, further comprising the step of reporting verification information concerning the cloud API call to the pseudo-hypervisor instance.

29. The method of claim 28, further comprising the step of translating the verification information into a hypervisor-specific result code.

30. The method of claim 29, further comprising the step of reporting the hypervisor-specific result code to an enterprise systems management tool.