SYSTEMS AND METHODS FOR DEPLOYING MICROSERVICES IN A NETWORKED MICROSERVICES SYSTEM

• US 20180121221A1
• Filed: 10/28/2016
• Published: 05/03/2018
• Est. Priority Date: 10/28/2016
• Status: Active Grant

• Current Assignee: Fortinet Inc.
• Original Assignee: ShieldX Networks, Inc. (Fortinet Inc.)
• Inventors: Ahuja, Ratinder Paul Singh, Nedbal, Manuel, Sreedhar, Rajiv
• Granted Patent: US 10,579,407 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 2009/4557 Distribution of virtual machine instances; Migration and load balancing
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 2009/45591 Monitoring or debugging support
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Systems and methods are described herein generally relating to network security, and in particular, embodiments described relate to systems and methods for deploying microservices in a networked microservices system. For example, a method is disclosed, which calls for receiving a request to instantiate a microservice, selecting a suitable virtual machine (VM), wherein the selecting comprises calculating the suitability of the virtual machine based on a property load and a property weight, deploying the microservice on the selected virtual machine, configuring the microservice to communicate with an interface microservice, and configuring the microservice to perform security processing on packets processed within a security service.

Claims

1. A method comprising:

receiving a request to instantiate a microservice;

selecting a suitable virtual machine (VM), wherein the selecting comprises calculating the suitability of the virtual machine based on a property load and a property weight;

deploying the microservice on the selected virtual machine;

configuring the microservice to communicate with an interface microservice; and

configuring the microservice to perform security processing on packets processed within a security service.

2. The method of claim 1, wherein the property load is associated with a server.

3. The method of claim 1, wherein the property load is associated with a VM.

4. The method of claim 1, wherein the selecting comprises calculating the suitability of the virtual machine based on a plurality of property loads and corresponding property weights, wherein the property loads comprise at least one property load associated with a server and at least one property load associated with a VM.

5. The method of claim 1, wherein the deploying the microservice includes creating a new microservice.

6. The method of claim 1, wherein the selected virtual machine has been instantiated before the receiving the request.

7. The method of claim 1, wherein the selected virtual machine is a newly instantiated virtual machine.

8. A system comprising:

a host machine comprising a memory and a processor core, the processor core to execute a hypervisor to create and run guest machines, and a plurality of guest machines having been created by the hypervisor, wherein the hypervisor is further to perform a process comprising;

receiving a request to instantiate a microservice;

selecting a suitable virtual machine by calculating the suitability of the virtual machine based on a server property value and a server property weight;

deploying the microservice on the selected virtual machine;

configuring the microservice to communicate with an interface microservice; and

configuring the microservice to perform security processing on packets processed within a security service.

9. The system of claim 8, wherein the property value comprises a server property value and the property weight comprises a corresponding service property weight.

10. The system of claim 8, wherein the property value comprises a VM property value and the property weight comprises a corresponding service property weight.

11. The system of claim 8, wherein the selecting comprises calculating the suitability of the virtual machine based on a plurality of property values and corresponding property weights, wherein the property values comprise at least one server property value and at least one VM property value.

12. The system of claim 8, wherein the deploying the microservice includes creating a new microservice.

13. The system of claim 8, wherein the selected virtual machine has been instantiated before the receiving the request.

14. The system of claim 8, wherein the selected virtual machine is a newly instantiated virtual machine.

15. A non-transitory computer-readable medium containing instructions that, when performed by a processor, cause the processor to perform a method comprising:

receiving a request to instantiate a microservice;

selecting a suitable virtual machine, wherein the selecting comprises calculating the suitability of the virtual machine based on a server property value and a server property weight;

deploying the microservice on the selected virtual machine;

configuring the microservice to communicate with an interface microservice; and

configuring the microservice to perform security processing on packets processed within a security service.

16. The non-transitory computer-readable medium of claim 15, wherein the selecting comprises calculating the suitability of the virtual machine based on a plurality of property values and corresponding property weights, wherein the property values comprise at least one server property value and at least one VM property value.

17. The non-transitory computer-readable medium of claim 15, wherein the deploying the microservice includes creating a new microservice.

18. The non-transitory computer-readable medium of claim 15, wherein the selected virtual machine has been instantiated before the receiving the request.

19. The non-transitory computer-readable medium of claim 15, wherein the deploying the microservice includes creating a new microservice.

20. The non-transitory computer-readable medium of claim 15, wherein the selected virtual machine has been instantiated before the receiving the request.