ACCELERATED INSTANTIATION OF CLOUD RESOURCE

• US 20150106805A1
• Filed: 04/24/2014
• Published: 04/16/2015
• Est. Priority Date: 10/15/2013
• Status: Abandoned Application

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Puthalath, Hareesh, Melander, Bob
• Application Number:
  US14/261,141
• Publication Number:
  US 20150106805A1
• Time in Patent Office: Days
• US Class Current: 718/1
• CPC Class Codes: G06F 9/45537 Provision of facilities of other operating environments, e.g. WINE I/O emulation G06F13/105
• CPC Class Codes: G06F 9/5072 Grid computing
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 47/83 based on usage prediction

Abstract

The subject disclosure relates to a method for instantiating cloud resources that are provided as service virtual machines. In one embodiment, a cloud service management system maps each one of the multiple abstraction layer slots to a virtual context of a logical resource. The virtual context is hosted by a respective virtual machine that is part of a pool of virtual machines. The system identifies an available abstraction slot from the multiple abstraction layer slots and reserves the slot so that the corresponding virtual context of the logical resource can be served to a requesting device. The system then marks the available abstraction layer slot as unavailable. Systems and computer readable media are also provided.

Claims

1. A method comprising:

mapping each of a plurality of abstraction layer slots to a virtual context of a logical resource, wherein the virtual context is hosted by a respective virtual machine from among a pool of virtual machines;

identifying an available abstraction layer slot from among the plurality of abstraction layer slots;

reserving the available abstraction layer slot so that a corresponding virtual context of the logical resource can be served; and

marking the available abstraction layer slot as unavailable.

2. The method of claim 1, further comprising:

receiving a request from a device for the logical resource; and

assigning the available abstraction layer slot to the device.

3. The method of claim 1, wherein the logical resource is a virtual network resource.

4. The method of claim 3, wherein the logical network resource comprises one of a virtual firewall, a virtual router, a virtual private network (VPN), a virtual load balancer, a virtual wide area network (WAN) optimization platform, a virtual deep packet inspector, or a virtual traffic monitor.

5. The method of claim 1, wherein at least one of the plurality of abstraction layer slots is mapped to an entire virtual machine from among the pool of virtual machines.

6. The method of claim 1, further comprising:

determining an available slot count based on a number of available abstraction layer slots from among the plurality of abstraction layer slots;

when the available slot count lies outside a desired range, performing one of;

(i) provisioning at least one virtual machine and adding the at least one virtual machine to the pool of virtual machines, whereby one or more new virtual contexts hosted by the at least one virtual machine are mapped to one or more new available abstraction layer slots in the plurality of abstraction layer slots, or

(ii) removing at least one virtual machine from the pool of virtual machines, whereby one or more superfluous abstraction layer slots, mapped to virtual contexts hosted by the at least one virtual machine, are removed from the plurality of abstraction layer slots; and

adjusting the available slot count.

7. The method of claim 6, wherein the desired range comprises a lower bound and an upper bound, and wherein one of the lower bound or the upper bound is determined based on a target number of available abstraction layer slots.

8. The method of claim 1, further comprising:

raising a deficit flag when a number of available abstraction layer slots falls below a threshold; and

when the deficit flag is raised, adjusting the number of available abstraction layer slots by provisioning at least one additional virtual machine that hosts at least one new virtual context of the logical resource, the at least one new virtual context being mapped to at least one new abstraction layer slot in the plurality of abstraction layer slots.

9. The method of claim 1, wherein marking the available abstraction layer slot as unavailable yields an unavailable abstraction layer slot, the method further comprising:

releasing the unavailable abstraction layer slot so that the corresponding virtual context of the logical resource can be reserved at a later time; and

marking the unavailable abstraction layer slot as available.

10. The method of claim 9, wherein the unavailable abstraction layer slot is released when a deletion trigger event for the logical resource occurs.

11. A system comprising:

a processor;

a pool of virtual machines; and

a computer-readable medium storing instructions which, when executed by the processor, cause the processors to perform operations comprising;

mapping each of a plurality of abstraction layer slots to a virtual context of a logical resource, wherein the virtual context is hosted by a respective virtual machine from among the pool of virtual machines;

identifying an available abstraction layer slot from among the plurality of abstraction layer slots;

reserving the available abstraction layer slot so that a corresponding virtual context of the logical resource can be served; and

marking the available abstraction layer slot as unavailable.

12. The system of claim 11, wherein the computer-readable storage medium stores additional instructions which, when executed by the processor, cause the processor to perform the operations further comprising:

receiving a request from a device for the logical resource; and

assigning the available abstraction layer slot to the device.

13. The system of claim 11, wherein the logical resource is a logical network resource comprising one of a virtual firewall, a virtual router, a virtual private network (VPN), a virtual load balancer, a virtual wide area network (WAN) optimization platform, a virtual deep packet inspector, or a virtual traffic monitor.

14. The system of claim 11, wherein at least one of the plurality of abstraction layer slots is mapped to an entire virtual machine from among the pool of virtual machines.

15. The system of claim 11, wherein the computer-readable storage medium stores additional instructions which, when executed by the processor, cause the processor to perform the operations further comprising:

determining an available slot count based on a number of available abstraction layer slots from among the plurality of abstraction layer slots;

when the available slot count lies outside a desired range, performing one of;

(i) provisioning at least one virtual machine and adding the at least one virtual machine to the pool of virtual machines, whereby one or more new virtual contexts hosted by the at leas one virtual machine are mapped to one or more new available abstraction layer slots in the plurality of abstraction layer slots, or

(ii) removing at least one virtual machine from the pool of virtual machines, whereby one or more superfluous abstraction layer slots, mapped to virtual contexts hosted by the at least one virtual machine, are removed from the plurality of abstraction layer slots; and

adjusting the available slot count.

16. The system of claim 15, wherein the desired range comprises a lower bound and an upper bound, and wherein one of the lower bound or the upper bound is determined based on a target number of available abstraction layer slots.

17. A non-transitory computer-readable storage medium storing instructions which, when executed by a processor, cause the processor to perform operations comprising:

mapping each of a plurality of abstraction layer slots to a logical resource hosted by a virtual machine from among a pool of virtual machines;

identifying are available abstraction layer slot from among the plurality of abstraction layer slots;

reserving the available abstraction layer slot so that a corresponding logical resource can be served; and

marking the available abstraction layer slot as unavailable.

18. The on-transitory computer-readable storage medium of claim 17, storing additional instructions which, when executed by the processor, cause the processor to perform the operations further comprising:

raising a deficit flag when a number of available abstraction layer slots falls below a threshold; and

when the deficit flag is raised, adjusting the number of available abstraction layer slots by provisioning at least one additional virtual machine that hosts the logical resource, the logical resource being mapped to at least one new abstraction layer slot in the plurality of abstraction layer slots.

19. The non-transitory computer-readable storage medium of clan 17, wherein remarking the available abstraction layer slot as unavailable yields an unavailable abstraction layer slot, the non-transitory computer-readable storage medium storing additional instructions which, when executed by the processor, cause the processor to perform the operations further comprising:

releasing the unavailable abstraction layer slot so that the corresponding logical resource can be reserved at a later time; and

marking the unavailable abstraction layer slot as available.

20. The non-transitory computer-readable storage medium of claim 19, wherein the unavailable abstraction layer slot is released when a deletion trigger event for the logical resource occurs.