SYSTEM AND METHOD FOR INITIALIZING AND MAINTAINING A SERIES OF VIRTUAL LOCAL AREA NETWORKS CONTAINED IN A CLUSTERED COMPUTER SYSTEM

• US 20170170988A1
• Filed: 03/07/2016
• Published: 06/15/2017
• Est. Priority Date: 10/23/2007
• Status: Active Grant

• Current Assignee: VirtuDataCenter Holdings LLC
• Original Assignee: VirtuDataCenter Holdings LLC
• Inventors: Mazarick, Michael Emory
• Granted Patent: US 9,749,149 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/465 wherein a single frame includes a plurality of VLAN tags
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 47/78 Architectures of resource allocation
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

A system and method for sharing network resources, the system comprising at least one network switch, at least one computing device comprising at least one network connection and at least one storage device containing software capable of initializing and maintaining: (i) a management local area network (MLAN) comprising a virtual or physical firewall; and (ii) a plurality of client virtual local area networks (VLANs), wherein each client VLAN comprises a virtual firewall and a plurality of network resources. In one implementation, the present invention comprises an encrypted folder storing at least an encryption key accessible by customer/client to utilize/add at least additional virtual resources of the networkable computing devices deprived of configuration second time with zero cost and downtime (after initial configuration is already performed). The customer/client having legitimate encryption keys to access the virtual resources can further change at least configuration of the virtual resources.

Claims

1. A system for organizing and managing network resources, the system comprising:

at least one network switch;

at least one computing device comprising;

at least one management console to interface with at least one client;

at least one network connection; and

at least one storage device containing software capable of initializing and maintaining;

a management local area network (MLAN) comprising a firewall; and

a plurality of client virtual local area networks (VLANs), wherein each client VLAN comprises a virtual firewall and a plurality of network resources;

wherein the plurality of network resources are virtual resources determined, and allocated via a selection mechanism using at least a resource factor, on at least one networkable computing devices, the resource factor includes at least cost to allocate and initialize the virtual resources or network latency, or functioning of the virtual resources, or any combination thereof for allocation of the virtual resources; and

wherein the storage device further comprising;

at least an encrypting folder configured to store at least encryption keys.

3. The system according to claim 1, wherein the encryption keys are accessible by customers/clients connected via the network switch to the system.

4. The system according to claim 1, wherein the storage device is further configured to:

utilize/add at least additional virtual resources of the networkable computing devices deprived of configuration time with zero cost and downtime; and

/or

change at least configuration of the virtual resources determined with zero cost and downtime.

5. The system according to claim 1, wherein the storage device is further configured to:

communicate the determination of the virtual resources on the networkable computing devices to at least client/customer connected via network switch;

receive the client/customer information regarding the virtual resources determined;

initialize and maintain the virtual resources by allocation based on the client/customer information received.

6. The system according to claim 1, wherein the storage device is hosted by at least a cloud service provider or at least a server or any combination thereof.

7. The system according to claim 1, wherein the storage device is further configured to receive at least one request into the system via management console, the request is preferably received remotely and preferably associated with rules that limit the request.

8. The system according to claim 1, wherein the storage device further comprising:

at least virtual machine monitor (VMM) configured to determine the virtual resources on the networkable computing devices.

9. The system according to claim 1, wherein the storage device further configured to generate at least a report associated with the virtual resources.

10. The system according to claim 9, wherein the report generated is displayed using the management console.

11. The system according to claim 1, wherein at least some of the plurality of the network resources comprise virtual resources.

14. The system according to claim 1, further configured to determine a location for instantiating the virtual resources on the networkable computing devices.

29. The system according to claim 8, wherein the storage device further comprises:

at least one virtual machine monitor (VMM) configured to determine the virtual resources on the networkable computing devices.

30. The system according to claim 29, wherein the storage device further comprises:

at least a cost to allocate and initialize the virtual resources, or network latency, or functioning of the virtual resources, or the resource factor for allocation of the virtual resources or any combination thereof.

32. The system according to claim 29, further comprises

generating at least a report associated with the virtual resources, the report generated is displayed using the management console.

33. The system according to claim 32, wherein the report further comprises

including information associated with the resource factor for the allocation of the virtual resources, or any combination thereof for allocating the virtual resources.

2. (canceled)

12. (canceled)

13. (canceled)

15. (canceled)

16. (canceled)

17. (canceled)

18. A method for organizing and managing network resources, the method comprising:

initializing a management local area network (MLAN) comprising a firewall;

adding a plurality of client virtual local area networks (VLANs), wherein each client VLAN comprises a virtual firewall and a plurality of network resources;

maintaining MLAN and clients VLANs; and

wherein the plurality of the network resources are virtual resources determined, and allocated via a selection mechanism using at least a resource factor, on at least one networkable computing devices, the resource factor includes at least cost to allocate and initialize the virtual resources or network latency, or functioning of the virtual resources, or any combination thereof for allocation of the virtual resources;

further comprising;

storing at least encryption keys accessible by customers/clients.

20. The method according to claim 18, further comprising:

utilizing/adding at least additional virtual resources of the networkable computing devices deprived of configuration time with zero cost and downtime; and

/or

changing at least configuration of the virtual resources determined time with zero cost and downtime.

21. The method according to claim 18, further comprising:

communicating the determination of the virtual resources on the networkable computing devices to at least client/customer connected via network switch;

receiving the client/customer information regarding the virtual resources determined;

initializing and maintain the virtual resources by allocation based on the client/customer information received.

22. The method according to claim 18, further comprising receiving at least one request into the system via management console, the request is preferably received remotely and preferably associated with rules that limit the request.

23. The method according to claim 18, further comprising determining, using at least virtual machine monitor (VMM), the virtual resources on the networkable computing devices.

24. The method according to claim 18, further comprising generating at least a report associated with the virtual resources, the report generated is displayed using the management console.

25. The method according to claim 18, further comprising including at least cost to allocate the resource and initialize the virtual resources, or network latency, or functioning of the virtual resources, or any combination thereof for allocating the virtual resources.

27. The method according to claim 18, further comprising:

determining a location for instantiating the virtual resources on the networkable computing devices.

31. The method according to claim 18, wherein the report further comprises:

generating at least a report associated with the virtual resources, the report generated is displayed using the management console

Or including at least a cost to allocate the resource and initialize the virtual resources, or network latency, or functioning of the virtual resources, or information associated with the resource factor for the allocation of the virtual resources, or any combination thereof for allocating the virtual resources.

19. (canceled)

26. (canceled)

28. (canceled)

34. A method for organizing and managing network resources, the system comprising:

initializing a management local area network (MLAN) comprising a firewall;

adding a plurality of client virtual local area networks (VLANs), wherein each client VLAN comprises a virtual firewall and a plurality of network resources;

maintaining MLAN and clients VLANs;

determining the plurality of network resources on the networkable computing devices;

determining a location for instantiating the plurality of network resources;

wherein the plurality of network resources are virtual resources determined, and allocated via a selection mechanism using at least a resource factor, on at least one networkable computing devices, the resource factor includes at least cost to allocate and initialize the virtual resources, or network latency, or functioning of the virtual resources, or any combination thereof for allocation of the virtual resources.