MULTITENANT ACCESS TO MULTIPLE DESKTOPS ON HOST MACHINE PARTITIONS IN A SERVICE PROVIDER NETWORK

• US 20130235874A1
• Filed: 03/07/2012
• Published: 09/12/2013
• Est. Priority Date: 03/07/2012
• Status: Active Grant

• Current Assignee: Omnissa, LLC
• Original Assignee: Desktone Incorporated (Broadcom, Inc.)
• Inventors: Ringdahl, Kenneth, Davies, Charles, Biryukov, Andre
• Granted Patent: US 9,467,305 B2
• Time in Patent Office: Days
• US Class Current: 370/395.53
• CPC Class Codes: G06F 2209/504 Resource capping
• CPC Class Codes: G06F 9/45537 Provision of facilities of other operating environments, e.g. WINE I/O emulation G06F13/105
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/54 Organization of routing tables
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 49/70 Virtual switches
• CPC Class Codes: Y02D 10/00 Energy efficient computing, e.g. low power processors, power management or thermal management

Abstract

Routers and host machines can host desktops for two or more enterprises. A virtual local area network is established for each enterprise. Each virtual local area network is connected to a plurality of host machines for the enterprise, with each host machine supporting desktops for use by the enterprise. The desktops access computer resources on the enterprise network of the enterprise to which it is connected. Resources within a host machine are shared by having a virtual switch for each enterprise the host machine supports. The virtual switch for an enterprise is connected to the virtual local area network of the enterprise. Desktops in the host machine that are allocated to the enterprise are given network addresses that include the tag for that enterprise. Virtual desktops for different enterprises can be hosted on different partitions of the same host machine.

Claims

1. A computer system for supporting multiple enterprises in using virtual desktops hosted on a plurality of host machines, each enterprise having an enterprise computer network including computer resources, the service provider network comprising:

a virtual local area network for each enterprise, each virtual local area network being connected to a plurality of host machines for the enterprise, each host machine supporting desktops for use by the enterprise, the desktops accessing the computer resources on the enterprise network of the enterprise to which it is connected; and

a router connected to enterprise networks of the multiple enterprises and comprising a virtual router for each enterprise, including a distinct routing table for each enterprise, for routing traffic between the desktops hosted on the plurality of host machines and the computer resources on the enterprise networks

wherein one or more host machines includes a virtual switch for each of a plurality of the enterprises, wherein the virtual switch for an enterprise is connected to the virtual local area network of the enterprise and desktops in the host machine allocated to the enterprise.

2. The computer system of claim 1, further comprising a resource manager for managing allocation of host machines to enterprises and desktops to enterprises.

3. The computer system of claim 1, wherein each virtual local area network has an identifier, and wherein a desktop allocated to an enterprise on a host machine is tagged with the identifier of the virtual local area network of the enterprise.

4. The computer system of claim 2, wherein the resource manager, for each tenant, assigns a data center, VLAN identifier and quota.

5. The computer system of claim 4, wherein the resource manager identifies available host capacity and allocates host resources to a tenant.

6. The computer system of claim 2, wherein the resource manager maintains a mapping of organization identifier, vlan identifier and allocated resources.