SECURE CHANNEL FOR CLOUD DEPLOYMENT UNIT

• US 20200137029A1
• Filed: 10/29/2018
• Published: 04/30/2020
• Est. Priority Date: 10/29/2018
• Status: Active Application

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Inventors: Sakthievel, Thavamaniraja, Ganesan, Vinnarasu, Manickam, Siva Subramaniam
• Application Number:
  US16/173,035
• Publication Number:
  US 20200137029A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 43/045 for graphical visualisation of monitoring data
• CPC Class Codes: H04L 43/062 related to network traffic
• CPC Class Codes: H04L 43/08 Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection

Abstract

In some examples, a method includes receiving access credentials for a deployment unit (DU) of a remote cloud service; and establishing a secure channel with the DU using the access credentials for monitoring of the DU. In some examples, the secure channel is established through the use of an on-demand port forwarding container.

Claims

1. A method comprising:

receiving access credentials for a deployment unit (DU) of a remote cloud service; and

establishing a secure channel with the DU using the access credentials for monitoring of the DU,

wherein the secure channel is established through the use of an on-demand port forwarding container.

2. The method of claim 1,

wherein the DU runs a monitoring service, and

wherein the secure channel is to interface with the monitoring service to receive monitoring data for the DU.

3. The method of claim 1, wherein the access credentials are received from a remote account manager associated with the remote cloud service.

4. The method of claim 1, wherein the access credentials are a first set of access credentials, the DU is a first DU, the remote cloud service is a first remote cloud service, the secure channel is a first secure channel, and the port forwarding container is a first port forwarding container, further comprising:

receiving a second set of access credentials for a second DU of a second remote cloud service; and

establishing a second secure channel with the second DU using the second set of access credentials for monitoring of the second DU,

wherein the second secure channel is established through the use of a second on-demand port forwarding container, and

wherein the first and second secure channels are to receive monitoring data from their respective DUs.

5. The method of claim 4, further comprising:

displaying the monitoring data received from the first and second secure channels.

6. The method of claim 1, wherein the on-demand port forwarding container dynamically chooses a new available port for each monitoring query.

7. The method of claim 1, further comprising:

deleting the port forwarding container when a monitoring query request is completed.

8. The method of claim 1, wherein the secure channel is to receive monitoring data for the DU without the use of a permanent session.

9. The method of claim 1, wherein the secure channel is to receive monitoring data for the DU in the form of cluster, node, and/or pod-level metrics.

10. The method of claim 1, wherein the secure channel is established through the use of a command provided to a container-orchestration system that creates a data connection from a remote client to a cloud service.

11. The method of claim 1, wherein the method does not rely on central storage.

12. A non-transitory machine readable storage medium having stored thereon machine readable instructions to cause a computer processor to:

create a first port forwarding container to establish a first secure channel with a first monitoring service running on a first cloud deployment unit (DU);

create a second port forwarding container to establish a second secure channel with a second monitoring service running on a second cloud DU;

receive monitoring data for the first DU from the first monitoring service; and

receive monitoring data for the second DU from the second monitoring service.

13. The medium of claim 12, wherein the medium readable instructions are to cause a computer processor to:

display monitoring data for the first and second DU on a single dashboard.

14. A system comprising:

a processing resource; and

a memory resource storing machine readable instructions to cause the processing resource to;

receive access credentials for a deployment unit (DU) of a remote cloud service; and

use a port forwarding container to establish a secure channel with the DU.

15. The system of claim 14, wherein the memory resource is to cause the processing resource to receive monitoring data for the DU from a monitoring service running on the DU.