GOVERNING BARE METAL GUESTS

• US 20160080287A1
• Filed: 04/30/2013
• Published: 03/17/2016
• Est. Priority Date: 04/30/2013
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Mogul, Jeffrey Clifford, Santos, Jose Renato G., Turner, Yoshio, Lim, Kevin T.
• Granted Patent: US 10,728,171 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: G06F 9/45541 Bare-metal, i.e. hypervisor runs directly on hardware
• CPC Class Codes: H04L 47/829 Topology based
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Disclosed herein are a system, non-transitory computer readable medium, and method for governing communications of a bare metal guest in a cloud network. A network interface handles packets of data in accordance with commands by a control agent.

Claims

1. A system comprising:

a computer communicatively connected to a cloud network, the computer comprising a bare metal guest configuration;

a control agent which, if executed, instructs at least one processor to govern communication between the computer and resources of the cloud network; and

a network interface controller which, if executed, instructs at least one processor to route packets to and from the computer in accordance with commands from the control agent, the commands instructing at least one module in the controller.

2. The system of claim 1, wherein the at least one module comprises an access control list module, a rate limit module, an encapsulation module, and a decapsulation module.

3. The system of claim 1, wherein the network interface controller comprises a plurality of registers;

and the network interface controller, if executed, further instructs at least one processor to apportion the plurality of registers between the computer and the control agent.

4. The system of claim 1, wherein the control agent is a module of the network interface controller.

5. The system of claim 1, wherein the control agent is a module of a remote management engine.

6. A non-transitory computer readable medium having instructions therein which, if executed, cause at least one processor to:

establish a connection between a computer and a cloud network, the computer comprising a bare metal guest configuration;

allocate a first group of network interface registers to a control agent, the control agent being a module to govern communication between the computer and resources of the cloud network;

allocate a second group of the network interface registers to the computer; and

handle packets of data to and from the computer in accordance with instructions by the control agent.

7. The non-transitory computer readable medium of claim 6, wherein the instructions therein, If executed, cause at least one processor to handle the packets of data using an access control list module, a rate limit module, an encapsulation module, or a decapsulation module.

8. The non-transitory computer readable medium of claim 6, wherein the control agent is a module of the network interface.

9. The non-transitory computer readable medium of claim 6, wherein the instructions therein, if executed, instruct at least one processor to manage the bare metal guest configuration using a remote management engine.

10. The non-transitory computer readable medium of claim 9, wherein the control agent is a module of the remote management engine.

11. A method comprising

establishing, using at least one processor, a connection between a computer and a cloud network, the computer comprising a bare metal guest configuration;

apportioning, using at least one processor, a plurality of network interface registers between the computer and a control agent, the control agent being a module to govern communication between the computer and resources of the cloud network; and

routing, using at least one processor, packets of data to and from the computer in accordance with instructions by the control agent.

12. The method of claim 11, wherein routing the packets comprises, invoking, using at least one processor, an access control list module, a rate limit module, an encapsulation module, or a decapsulation module in accordance with instructions by the control agent.

13. The method of claim 11, wherein the control agent is a module of a network interface.

14. The method of claim 11, wherein the bare metal guest configuration is managed by a remote management engine.

15. The method of claim 14, wherein the control agent is a module of the remote management engine.