TECHNIQUES FOR CLOUD CONTROL AND MANAGEMENT

• US 20110010339A1
• Filed: 10/29/2009
• Published: 01/13/2011
• Est. Priority Date: 07/09/2009
• Status: Active Grant

• Current Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: McClain, Carolyn B., Wipfel, Robert A., Carter, Stephen R.
• Granted Patent: US 8,966,017 B2
• Time in Patent Office: Days
• US Class Current: 707/610
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: G06F 16/254 Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 47/782 Hierarchical allocation of resources, e.g. involving a hierarchy of local and centralised entities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Techniques for cloud control and management are provided. The control, creation, and management of workloads in distributed infrastructures are coordinated via a master Configuration Management Database (CMDB). The master CMDB is also used to unify the multiple distributed infrastructures so that the workloads are rationalized. Moreover, data centers are coordinated with the distributed infrastructures so the configuration settings and policies included in the master CMDB are enforced and synchronized throughout the network.

Claims

1. A method implemented and residing within a computer-readable storage medium that is executed by one or more processors of a network to perform the method, comprising:

configuring a master configuration management database (CMDB) with master configuration settings and master policies for construction, management, and deployment of workloads assigned to distributed computing resources of a network; and

interfacing a plurality of sub CMDB'"'"'s with the master CMDB to coordinate sub configuration settings and sub policies with the master configuration settings and the master policies of the master CMDB, each sub CMDB controlling a particular set of the computing resources defining a particular distributed computing infrastructure.

2. The method of claim 1, wherein configuring further includes configuring the master CMDB to assist in enforcing identity-based security for each distributed computing infrastructure.

3. The method of claim 2, wherein configuring further includes configuring the master CMDB to permit security specific to each distributed computing infrastructure to be maintained and enforced independent of the identity-based security within each distributed computing infrastructure.

4. The method of claim 1, wherein configuring further includes configuring the master CMDB to permit each distributed computing infrastructure to control creation, deployment, and management of each distributed computing infrastructure'"'"'s workloads as long as the sub policies and sub configuration settings are in compliance with the master policies and master configuration settings.

5. The method of claim 1, wherein configuring further includes configuring the master CMDB to permit the distributed computing infrastructures to establish trust relationships with one another to cooperate with the workloads as long as the master policies and master configuration settings are not violated.

6. The method of claim 1 further comprising, configuring one or more of the distributed computing infrastructures to keep the data center policies and data center configuration settings in synchronization with some of the sub policies and sub configuration settings of the one or more distributed computing infrastructures.

7. The method of claim 6, wherein configuring the one or more of the distributed computing infrastructures further includes one or more of:

providing a first mapping schema to permit exchange of changes in the sub policies, sub configuration settings, data center policies, and data center configuration settings between the one or more distributed computing infrastructures and the data center, the sub policies and the sub configuration settings in a different format from that which is associated with the data center polices and the data center configuration settings; and

providing a second mapping schema to permit exchange of changes in the sub policies, sub configuration settings, master policies, and master configuration settings between the one or more distributed computing infrastructures and the master CMDB in a different format from that which is associated with the master policies and the master configuration settings.

8. The method of claim 7 further comprising, keeping the master configuration settings and master policies in separate and independent synchronization with some of the sub policies and sub configuration settings of the one or more distributed computing infrastructures.

9. The method of claim 7 further comprising, ensuring that the synchronization between the one or more distributed computing infrastructures and the data center remain in compliance with the master configuration settings and the master policies of the master CMDB and separately also ensuring that any independent synchronization between the one or more distributed computing infrastructures and the master CMDB remain in compliance with the data center policies and data center configuration settings.

10. The method of claim 7 further comprising, permitting the data center to share one or more the computing resources managed within the one or more distributed computing infrastructures.

11. A method implemented and residing within a computer-readable storage medium that is executed by one or more processors of a network to perform the method, comprising:

interfacing a data center configuration management database (CMDB) for a data center with a second CMDB defined for a distributed computing environment; and

dynamically keeping the data center CMDB in synchronization with selective portions of the second CMDB.

12. The method of claim 11, wherein interfacing further includes using a mapping schema to translate information included in a data center schema for the data center CMDB with information included in a second schema for the second CMDB.

13. The method of claim 12, wherein using further includes performing one or more transformations defined in the mapping schema to translate when the information in the data center schema is disparate from the information in the second schema.

14. The method of claim 11, wherein interfacing further includes configuring the data center to share one or more computing resources controlled in the distributed computing environment.

15. The method of claim 11, wherein interfacing further includes interfacing the second CMDB with a master CMDB, the master CMDB enforcing compliance with an Infrastructure as a Service (IaaS) provider can enforcing the compliance on the second CMDB and one or more third CMDB'"'"'s.

16. The method of claim 15, wherein interfacing the second CMDB further includes configuring the master CMDB to be notified when conflicts arise with the master CMDB in view of changes between the data center CMDB and the second CMDB, and configuring the data center CMDB to be notified when conflicts arise with the data center CMDB in view of changes between the master CMDB and the second CMDB.

17. A multiprocessor-implemented system, comprising:

a distributed processing environment compliance service implemented in a computer-readable storage medium and to execute on one or more processors of a network; and

a plurality of processing environment compliance services implemented in a computer-readable medium and to execute on one or more processors of the network;

the distributed processing environment compliance service configured to keep configuration settings and policies for a plurality of distributed processing environments in compliance with master configuration settings and master policies, each processing environment compliance service configured to manage a particular distributed processing environment and to interact with the distributed processing environment compliance service to stay in compliance and to enforce compliance on each distributed processing environment.

18. The system of claim 17, wherein the distributed processing environment compliance service and the plurality of processing environment compliance services are further configured to keep sub configuration settings and sub policies associated with each distributed processing environment in synchronization with one another.

19. The system of claim 17, wherein the distributed processing environment compliance service is configured to audit each of the distributed processing environments for compliance.

20. The system of claim 17, wherein distributed processing environment service and each of the processing environment compliance services are further configured to interact with an identity service to enforce identity-based security on each of the distributed processing environments.