USING NETWORK CONFIGURATION ANALYSIS TO IMPROVE SERVER GROUPING IN MIGRATION

• US 20180332109A1
• Filed: 05/11/2017
• Published: 11/15/2018
• Est. Priority Date: 05/11/2017
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: BRANCH, Joel W., NIDD, Michael Elton, PFITZMANN, Birgit Monika
• Granted Patent: US 10,419,393 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/0897 by horizontal or vertical scaling of resources, or by migrating entities, e.g. virtual resources or entities
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 67/1004 Server selection for load balancing
• CPC Class Codes: H04L 67/1038 Load balancing arrangements to avoid a single path through a load balancer

Abstract

Various embodiments manage the migration of servers. In one embodiment, a set of server-level dependency information is obtained for servers to be migrated from a source computing environment to a target computing environment. A set of network configuration data is obtained for a plurality of network devices associated with the servers. The set of server-level dependency information is updated to include one or more additional dependencies of at least one of the servers based on the set of network configuration data. Updating the set of server-level dependency information generates an updated set of dependency information. The servers are assigned to multiple migration groups based on the updated set of dependency information. The migration groups optimize cross-group dependencies among the migration groups.

Claims

1. A method, by at least one information processing system, for managing migration of a plurality of servers, the method comprising:

obtaining a set of server-level dependency information for servers to be migrated from a source computing environment to a target computing environment;

obtaining a set of network configuration data for a plurality of network devices associated with the servers;

updating the set of server-level dependency information to include one or more additional dependencies of at least one of the servers based on the set of network configuration data, the updating generating an updated set of dependency information; and

assigning the servers to a plurality of migration groups based on the updated set of dependency information, wherein the plurality of migration groups optimizes cross-group dependencies among the plurality of migration groups.

2. The method of claim 1, wherein updating the set of server-level dependency information comprises:

substituting network address translation (NAT) data obtained from the set of network configuration data into the set of server-level dependency information.

3. The method of claim 2, wherein substituting the NAT data comprises:

identifying a set of dependencies in the server-level dependency information each having endpoint pairs covered by a context of the NAT data; and

substituting the NAT data into the set of dependencies that has been identified.

4. The method of claim 1, further comprising:

determining that the network configuration data comprises a set of private internet protocol addresses that are not unique in the source computing environment; and

resolving the set of private internet protocol addresses to a set of server identifiers based on a network topology of the source computing environment.

5. The method of claim 4, wherein the network topology is derived from the network configuration data.

6. The method of claim 1, further comprising:

determining, from the network configuration data, at least one explicit positive firewall rule where source and destination endpoints identified in the explicit positive firewall rule are both single Internet Protocol addresses; and

including the at least one explicit positive firewall rule as a dependency within the updated set of dependency information.

7. The method of claim 1, further comprising:

analyzing the network configuration data;

determining, based on the analyzing, that at least one load balancer exists within the source computing environment;

identifying, based on the network configuration data a cluster of servers associated with the at least one load balancer; and

generating a migration recommendation for the cluster of servers based on the cluster of servers being one of distributed across computing environments or being local to the source computing environment.

8. The method of claim 1, wherein the plurality of network devices comprises one or more of a router, a load balancer, or a firewall.

9. An information processing system for managing migration of a plurality of servers, the information processing system comprising:

a memory;

a processor communicatively coupled to the memory; and

a migration management module communicatively coupled to the memory and the processor, wherein the migration management module is configured to perform a method comprising;

obtaining a set of server-level dependency information for servers to be migrated from a source computing environment to a target computing environment;

obtaining a set of network configuration data for a plurality of network devices associated with the servers;

updating the set of server-level dependency information to include one or more additional dependencies of at least one of the servers based on the set of network configuration data, the updating generating an updated set of dependency information; and

assigning the servers to a plurality of migration groups based on the updated set of dependency information, wherein the plurality of migration groups optimizes cross-group dependencies among the plurality of migration groups.

10. The information processing system of claim 9, wherein updating the set of server-level dependency information comprises:

substituting network address translation (NAT) data obtained from the set of network configuration data into the set of server-level dependency information.

11. The information processing system of claim 10, wherein substituting the NAT data comprises:

identifying a set of dependencies in the server-level dependency information each having endpoint pairs covered by a context of the NAT data; and

substituting the NAT data into the set of dependencies that has been identified.

12. The information processing system of claim 9, wherein the method further comprises:

determining that the network configuration data comprises a set of private internet protocol addresses that are not unique in the source computing environment; and

resolving the set of private internet protocol addresses to a set of server identifiers based on a network topology of the source computing environment.

13. The information processing system of claim 9, wherein the method further comprises:

determining, from the network configuration data, at least one explicit positive firewall rule where source and destination endpoints identified in the explicit positive firewall rule are both single Internet Protocol addresses; and

including the at least one explicit positive firewall rule as a dependency within the updated set of dependency information.

14. The information processing system of claim 9, wherein the method further comprises:

analyzing the network configuration data;

determining, based on the analyzing, that at least one load balancer exists within the source computing environment;

identifying, based on the network configuration data a cluster of servers associated with the at least one load balancer; and

generating a migration recommendation for the cluster of servers based on the cluster of servers being one of distributed across computing environments or being local to the source computing environment.

15. A computer program product for managing migration of servers, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor a computer to cause the computer to:

obtain a set of server-level dependency information for servers to be migrated from a source computing environment to a target computing environment;

obtain a set of network configuration data for a plurality of network devices associated with the servers;

update the set of server-level dependency information to include one or more additional dependencies of at least one of the servers based on the set of network configuration data, the updating generating an updated set of dependency information; and

assign the servers to a plurality of migration groups based on the updated set of dependency information, wherein the plurality of migration groups optimizes cross-group dependencies among the plurality of migration groups.

16. The computer program product of claim 15, wherein the program instructions cause the computer to update the set of server-level dependency information by:

substituting network address translation (NAT) data obtained from the set of network configuration data into the set of server-level dependency information.

17. The computer program product of claim 16, wherein the program instructions cause the computer to substitute the NAT data comprises by:

identify a set of dependencies in the server-level dependency information each having endpoint pairs covered by a context of the NAT data; and

substitute the NAT data into the set of dependencies that has been identified.

18. The computer program product of claim 15, wherein the program instructions further cause the computer to:

determining that the network configuration data comprises a set of private internet protocol addresses that are not unique in the source computing environment; and

resolving the set of private internet protocol addresses to a set of server identifiers based on a network topology of the source computing environment.

19. The computer program product of claim 15, wherein the program instructions further cause the computer to:

determine, from the network configuration data, at least one explicit positive firewall rule where source and destination endpoints identified in the explicit positive firewall rule are both single Internet Protocol addresses; and

include the at least one explicit positive firewall rule as a dependency within the updated set of dependency information.

20. The computer program product of claim 15, wherein the program instructions further cause the computer to:

analyze the network configuration data;

determine, based on the analyzing, that at least one load balancer exists within the source computing environment;

identify, based on the network configuration data a cluster of servers associated with the at least one load balancer; and

generate a migration recommendation for the cluster of servers based on the cluster of servers being one of distributed across computing environments or being local to the source computing environment.