System and method for distributed management of shared computers

• US 7,200,655 B2
• Filed: 11/12/2004
• Issued: 04/03/2007
• Est. Priority Date: 10/24/2000
• Status: Expired due to Term

• Current Assignee: Zhigu Holdings Limited
• Original Assignee: Microsoft Corporation
• Inventors: Tabbara, Bassam, Hunt, Galen C., Welland, Robert V., Hydrie, Aamer, Stutz, David S., Levi, Steven P.
• Primary Examiner(s): Vaughn, Jr.; William C.
• Assistant Examiner(s): Delgado; Michael
• Application Number:
  US10/987,229
• Publication Number:
  US 20050108381A1
• Time in Patent Office: 872 Days
• Field of Search: 709/220, 709222-225, 713/150
• US Class Current: 709/223
• CPC Class Codes: H04L 41/042 comprising distributed management centres cooperatively managing the network
• CPC Class Codes: H04L 41/0659 by isolating or reconfiguring faulty entities
• CPC Class Codes: H04L 41/0661 by reconfiguring faulty entities
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

A multi-tiered server management architecture is employed including an application development tier, an application operations tier, and a cluster operations tier. In the application development tier, applications are developed for execution on one or more server computers. In the application operations tier, execution of the applications is managed and sub-boundaries within a cluster of servers can be established. In the cluster operations tier, operation of the server computers is managed without concern for what applications are executing on the one or more server computers and boundaries between clusters of servers can be established. The multi-tiered server management architecture can also be employed in co-location facilities where clusters of servers are leased to tenants, with the tenants implementing the application operations tier and the facility owner (or operator) implementing the cluster operations tier.

Claims

1. A method comprising:

allowing a tenant to which a cluster of one or more computers at a facility have been leased to communicate with the one or more computers, wherein the allowing comprises establishing secure communications channels between the one or more computers and a corresponding tenant operations management console;

implementing cluster boundaries at the facility to prevent computers within the cluster from communicating with computers in another cluster, wherein the cluster boundaries are implemented at a first tier of a multi-tiered management architecture; and

allowing the tenant operations management console, implemented in a second tier of the multi-tiered management architecture, to establish sub-boundaries within the cluster.

2. A method as recited in claim 1, wherein the facility comprises a co-location facility.

3. A method as recited in claim 1, wherein each of the sub-boundaries within the cluster prevents one or more computers in the cluster from communicating with one or more other computers in the cluster.

4. A method as recited in claim 1, further comprising:

performing at least some management of the computers via a landlord operations management console; and

establishing secure communications channels between each of the one or more computers and the landlord operations management console.

5. A method as recited in claim 4, wherein the landlord operations management console is located at the facility.

6. A method as recited in claim 1, wherein the cluster includes one or more additional computers that have not been leased to the tenant.

7. A method as recited in claim 1, wherein the implementing cluster boundaries comprises adding one or more filters to each of the one or more computers in the cluster.

8. A method as recited in claim 6, wherein the implementing cluster boundaries further comprises including, in filters of each of the one or more computers, the addresses of the other computers at the facility that are not in the cluster.

9. A method as recited in claim 6, wherein allowing the tenant operations management console to establish sub-boundaries comprises allowing the tenant operations management console to establish sub-boundaries within the cluster to prevent one or more computers in the cluster from communicating with one or more other computers in the cluster.

10. A method as recited in claim 9, wherein allowing the tenant operations management console to establish sub-boundaries comprises allowing the tenant operations management console to add one or more additional filters to one or more computers in the cluster, wherein each of the one or more additional filters is at least as restrictive as the one or more filters added in implementing the cluster boundaries.

11. One or more computer-readable media having stored thereon instructions that, when executed b one or more processors cause the one or more processors to:

allow a tenant to which a cluster of one or more computers at a facility have been leased to communicate with the one or more computers, wherein to allow the tenant to communicate with the one or more computers is to establish secure communications channels between the one or more computers and a corresponding tenant operations management console;

implement cluster boundaries at the facility to prevent computers within the cluster from communicating with computers in another cluster, wherein the cluster boundaries are implemented at a first tier of a multi-tiered management architecture; and

wherein the instructions further cause the one or more processors to allow the tenant operations management console, implemented in a second tier of the multi-tiered management architecture, to establish sub-boundaries within the cluster.

12. One or more computer-readable media as recited in claim 11, wherein the facility comprises a co-location facility.

13. One or more computer-readable media as recited in claim 11, wherein each of the sub-boundaries within the cluster is to prevent one or more computers in the cluster from communicating with one or more other computers in the cluster.

14. One or more computer-readable media as recited in claim 11, wherein the instructions further cause the one or more processors to:

perform at least some management of the computers via a landlord operations management console; and

establish secure communications channels between each of the one or more computers and the landlord operations management console.

15. One or more computer-readable media as recited in claim 11, wherein to implement cluster boundaries is to add one or more filters to each of the one or more computers in the cluster.

16. One or more computer-readable media as recited in claim 14, wherein the landlord operations management console is located at the facility.

17. One or more computer-readable media as recited in claim 15, wherein to implement cluster boundaries is further to include, in filters of each of the one or more computers, the addresses of the other computers at the facility that are not in the cluster.

18. One or more computer-readable media as recited in claim 15, wherein the instructions further cause the one or more processors to:

allow the tenant operations management console to establish the sub-boundaries within the cluster to prevent one or more computers in the cluster from communicating with one or more other computers in the cluster.

19. One or more computer-readable media as recited in claim 18, wherein to allow the tenant operations management console to establish sub-boundaries is to allow the tenant operations management console to add one or more additional filters to one or more computers in the cluster, wherein each of the one or more additional filters is at least as restrictive as the one or more filters added in implementing the cluster boundaries.