SYSTEM AND METHOD FOR A CLOUD COMPUTING ABSTRACTION LAYER

• US 20110231899A1
• Filed: 01/19/2011
• Published: 09/22/2011
• Est. Priority Date: 06/19/2009
• Status: Active Grant

• Current Assignee: VideoLabs, Inc.
• Original Assignee: Servicemesh Incorporated (DXC Technology Company)
• Inventors: Pulier, Eric, Martinez, Frank
• Granted Patent: US 8,931,038 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/5072 Grid computing
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 41/5019 Ensuring fulfilment of SLA
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

According to one system of the invention, the system provides a cloud-computing service from a cloud-computing environment comprising a plurality of cloud-computing resources. The system may comprise: a management module configured to manage a cloud-computing resource of the plurality of cloud-computing resources as a cloud-computing service, wherein the cloud-computing service performs a computer workload; an adapter configured to connect to the cloud-computing resource to the system and translate a management instruction received from the management module into a proprietary cloud application program interface call for the cloud-computing resource; a cloud service bus configured to route the management instruction from the management module to the adapter; a consumption module configured to allow a user to subscribe the cloud-computing service; a planning module configured to plan the cloud-computing service; and a build module configured to build the cloud-computing service from the cloud-computing resource and publish the cloud-computing service to the consumption module.

Claims

1. A computer program product for a cloud-computing environment comprising a plurality of cloud-computing resources, the product comprising a computer-readable storage medium in which program instructions are stored, the program instructions configured to cause a computer system to perform the operations of:

providing a virtual private cloud configured to utilize a cloud-computing resource from the plurality of cloud-computing resources to perform a computer workload;

receiving a request to perform the computer workload within the virtual private cloud,

provisioning the cloud-computing resource from the plurality of cloud-computing resources;

deploying the cloud-computing resource within the virtual private cloud; and

using the cloud-computing resource to perform the computer workload.

2. The computer program product of claim 1, wherein provisioning the cloud-computing resource comprises:

locating an unreserved cloud-computing resource within the plurality of cloud-computing resources; and

reserving for the virtual private cloud the unreserved cloud-computing resource.

3. The computer program product of claim 1, the operations further comprising:

receiving a constraint for the cloud-computing resource or for the computer workload, wherein the cloud-computing resource is a cloud-computing resource; and

applying the constraint on the cloud-computing resource such that, when the cloud-computing resource is used to perform the computer workload, the cloud-computing resource'"'"'s operation is limited according to the constraint.

4. The computer program product of claim 1, the operations further comprising:

defining a security zone such that the security zone comprises the virtual private cloud; and

applying a security policy to the security zone such that, when the cloud-computing resource deployed in the virtual private cloud that is used to perform the computer workload, the cloud-computing resource'"'"'s operation or the computer workload'"'"'s performance is subject to the security policy.

5. The computer program product of claim 4, wherein the security zone is defined according to a physical location of the virtual private cloud'"'"'s usage, a network location of the virtual private cloud'"'"'s usage, or attribute of an organization associated with the virtual private cloud.

6. The computer program product of claim 4, wherein the security policy is an access policy, a read-permission policy, a write-permission policy, an edit-permission policy, a privacy-based policy, an encryption policy, or a cloud-computing resource utilization policy.

7. The computer program product of claim 1, the operations further comprising declaring a static network address for the computer workload.

8. The computer program product of claim 1, wherein where the cloud-computing resource is a cloud-computing resource and the cloud-computing resource is deployed under control of a virtual machine manager.

9. The computer program product of claim 1, the operations further comprising:

receiving at a central policy server a definition for a security policy, wherein the central policy server is configured to associate the security policy to the computer workdload or the cloud-computing resource performing the computer workload; and

pushing the security policy to the cloud-computing resource.

10. The computer program product of claim 1, wherein the cloud-computing resource is an infrastructure element, and the operations further comprising:

providing a user interface that allows a user to deploy or configure the infrastructure element;

setting, through the user interface, a policy to the infrastructure element; and

applying the policy to the infrastructure element when the infrastructure element is deployed within the virtual private cloud.

11. The computer program product of claim 10, the operations further comprising:

determining a reference design for the infrastructure element; and

deploying the infrastructure element in the virtual private cloud according to the reference design.

12. The computer program product of claim 1, the operations further comprising:

associating a policy with the computer workload to be performed within the virtual private cloud; and

applying the policy to the cloud-computing resource performing the computer workload during the computer workload'"'"'s performance.

13. The computer program product of claim 1, wherein receiving the request to perform the computer workload comprises:

receiving an application to be migrated to cloud-computing environment for execution; and

identifying the computer workload as necessary for executing the application.

14. The computer program product of claim 1, the operations further comprising:

using an adapter to connect the virtual private cloud to the cloud-computing resource;

using a metamodel data structure to store an association between a computer workload and a policy; and

pushing the metamodel data structure to the adapter such that, when the cloud-computing resource is deployed within the virtual private cloud to perform the computer workload, the adapter applies the policy to the computer workload or the cloud-computing resource performing the computer workload.

15. The computer program product of claim 14, the operations further comprising:

moving the computer workload from using the cloud-computing resource to using a second cloud-computing resource, wherein the second cloud-computing resource uses a second adapter to connect the virtual private cloud to the second cloud-computing resource; and

pushing the metamodel data structure to the second adapter such that when the second cloud-computing resource is deployed within the virtual private cloud to perform the computer workload, the second adapter applies the policy to the second cloud-computing resource performing the cloud computer workload.

16. The computer program product of claim 1, wherein the cloud-computing resource is a physical computing resource or a cloud-computing resource.

17. The computer program product of claim 1, wherein the cloud-computing resource is a storage resource, a network resource, an internal private resource, an external private resource, a secure public resource, a platform-as-a-service, and a software-as-a-service, or an infrastructure-as-a-service.

18. The computer program product of claim 1, wherein the cloud-computing resource is a hybrid cloud-computing resource comprising at least two of a physical resource, a virtualized resource, a private resource, a public resource, an internal resource, or an external resource.

19. The computer program product of claim 1, the operations further comprising identifying the cloud-computing resource for performing the computer workload.

20. The computer program product of claim 19, wherein identifying the cloud computing resource is based on a workload score determined by a scoring logic.

21. The computer program product of claim 20, wherein the scoring logic is based on a business attribute of the computer workload, a technical attribute of the computer workload, or an operational attribute of the computer workload.

22. The computer program product of claim 20, wherein the scoring logic is editable.

23. The computer program product of claim 20, wherein the scoring logic can be dynamically updated and combined to form specialized scoring plans for analyzing computer workloads.

24. The computer program product of claim 1, wherein the computer workload is scalable.

25. The computer program product of claim 1, wherein deploying the cloud-computing resource comprises deploying a pre-determined set of cloud-computing resources to optimize the computer workloads'"'"' performance.

26. The computer program product of claim 1, the operations further comprising setting a condition for the computer workload, wherein the condition determines if or when the cloud-computing resource can be deployed within the virtual private cloud to perform the computer workload.

27. A computer program product for a cloud-computing environment comprising a plurality of cloud-computing resources, the product comprising a computer-readable storage medium in which program instructions are stored, the program instructions configured to cause a computer system to perform the operations of:

receiving a computing workflow to be performed in the cloud-computing environment;

identifying a computer workload to perform the computing workflow;

associating a policy with the computer workload;

testing the computer workload in a pre-production virtual private cloud within the cloud-computing environment;

deploying the computer workload in a production virtual private cloud within the clouding-computing environment; and

applying the policy to the computer workload during the computer workload'"'"'s performance within the production virtual private cloud for consumption.

28. The computer program product of claim 27, wherein the identifying the computer workload to perform the computing workflow involves identifying a plurality of computer workloads to perform the computing workflow.

29. A system for providing a cloud-computing service from a cloud-computing environment comprising a plurality of cloud-computing resources, the system comprising:

a management module configured to manage a cloud-computing resource of the plurality of cloud-computing resources as a cloud-computing service, wherein the cloud-computing service performs a computer workload and the cloud-computing service comprises the cloud-computing resource;

an adapter configured to connect to the cloud-computing resource to the system and translate a management instruction received from the management module into a cloud application program interface call for the cloud-computing resource;

a cloud service bus configured to route the management instruction from the management module to the adapter;

a consumption module configured to allow a user to subscribe the cloud-computing service;

a planning module configured to plan the cloud-computing service; and

a build module configured to build the cloud-computing service from the cloud-computing resource and publish the cloud-computing service to the consumption module.

30. The system of claim 29, wherein the system provides a user interface configured to provide access to the system as a virtual private cloud.

31. The system of claim 29, the system further comprising policy engine module configured to enforce a policy on the cloud-computing service through the management module.

32. The system of claim 31, wherein the management module, through the adapter, monitors a cloud-computing resource of the cloud-computing service and provisions the cloud-computing resource according to the policy engine module.

33. The system of claim 29, wherein managing the cloud-computing service comprises provisioning the cloud-computing service for a virtual private cloud, releasing the cloud-computing service for the virtual private cloud, accounting for usage of the cloud-computing service in the virtual private cloud, or monitoring the cloud-computing service.

34. The system of claim 29, the system further comprising an identity management module configured to connect to an authentication system and authenticate the user for the cloud-computing service.

35. The system of claim 29, the system further comprising an encryption module configured to perform encryption services for the cloud-computing service.

36. The system of claim 29, the system further comprising a connection module configure to securely connect the cloud-computing service to a client network or a cloud provider network.

37. The system of claim 29, wherein the management module is further configured to collect and process cost and consumption data from a cloud computing resource provider and present that data, to a billing system through an application program interface.

38. The system of claim 29, the system further comprising a cloud model utilized by the adapter to translate the management instruction to the cloud API call.