System for dynamic provisioning for secure, scalable, and extensible networked computer environments

• US 7,792,125 B2
• Filed: 01/18/2006
• Issued: 09/07/2010
• Est. Priority Date: 11/10/2000
• Status: Expired due to Fees

• Current Assignee: Veritas Technologies, LLC (Whitehouse Group Ltd.)
• Original Assignee: Symantec Operating Corporation (Gen Digital Inc.)
• Inventors: Lin, Chang, Blume, William, Miyamoto, Carleton, Bandhole, Jagadish
• Primary Examiner(s): LY, ANH VU H
• Application Number:
  US11/334,012
• Publication Number:
  US 20060114842A1
• Time in Patent Office: 1,693 Days
• Field of Search: None
• US Class Current: 370/400
• CPC Class Codes: H04L 12/1886 with traffic restrictions for efficiency improvement, e.g. involving subnets or subdomains
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A system and method for provisioning a virtual network is provided. Virtual networks can be automatically formed including switches in networks, such as local and private networks. Once the virtual networks are formed, virtual computing devices can be provisioned in place of physical computing devices that are connected to the switches. A system for provisioning a virtual network including a first virtual subnet and a second virtual subnet is provided. The system includes a first switch; a second switch; a first software process associated with first switch for provisioning the first virtual subnet; a second software process associated with the second switch for provisioning the second virtual subnet; and a communication link connecting the first switch and the second switch.

Claims

1. A computer-implemented method comprising:

identifying a first broadcast domain, wherein said identifying is performed by the computer,

a first virtual network comprises the first broadcast domain, and the first broadcast domain comprises at least one subnet; and

dynamically provisioning the first virtual network, wherein said dynamically provisioning comprises the computer transmitting an allocation request to allocate the at least one subnets; and

associating a first subnet daemon with a first subnet of the at least one subnets, wherein the first subnet daemon is configured to cause an associated network element to allocate the first subnet to the first virtual network.

2. The method of claim 1 further comprising:

receiving a request to dynamically provision the first virtual network.

3. The method of claim 2 wherein the request to dynamically provision the first virtual network comprises:

a network topography comprising a configuration of one or more broadcast domains including the first broadcast domain.

4. The method of claim 3 wherein the request to dynamically provision the first virtual network further comprises:

a list identifying one or more virtual devices coupled by the desired network topography.

5. The method of claim 2 wherein the request to dynamically provision the first virtual network is provided by a programmable interface.

6. The method of claim 2 wherein the request to dynamically provision the first virtual network is provided by a graphical user interface.

7. The method of claim 1 wherein the associated network element comprises:

a processor configured to execute one or more instructions to allocate the first subnet to the first virtual network, wherein the first subnet daemon comprises the one or more instructions.

8. The method of claim 1 further comprising:

transmitting said allocation request for the first subnet to the first subnet daemon.

9. The method of claim 8 further comprising:

identifying an administrative restriction associated with the first subnet daemon; and

performing said transmitting said allocation request using an administrative protocol associated with the administrative restriction.

10. The method of claim 1 further comprising:

allocating a first dynamic computing environment (DCE) comprising

the first virtual network, and

a first set of computing devices coupled by the first virtual network.

11. The method of claim 10 further comprising:

de-allocating the first DCE; and

allocating a second DCE comprising

a second virtual network, and

a second set of computing devices coupled by the second virtual network.

12. The method of claim 11 wherein said deallocating the first DCE comprises performing said de-allocation after expiration of a defined period of time.

13. A system comprising:

a processor configured to identify a first broadcast domain, wherein a first virtual network comprises the first broadcast domain, and the first broadcast domain comprises at least one subnet, and

dynamically provision the first virtual network, wherein said dynamically provisioning comprises generating an allocation request to allocate the at least one subnets; and

a first network line card coupled to the processor and the at least one subnets and configured to transmit the allocation request to the at least one subnets; and

the processor further configured to identify a first subnet daemon associated with a first subnet of the at least one subnets, wherein the first subnet daemon is configured to cause an associated network element to allocate the first subnet to the first virtual network.

14. The system of claim 13 further comprising:

the processor further configured to receive a request to dynamically provision the

first virtual network, wherein

the request to dynamically provision comprises a network topography comprising a configuration of one or more broadcast domains including the first broadcast domain.

15. The system of claim 13 further comprising:

the first network line card further configured to transmit said allocation request to the first subnet daemon.

16. The system of claim 13 further comprising:

the processor further configured to allocate a first dynamic computing environment (DCE), wherein the first dynamic computing environment comprises

the first virtual network, and

a first set of computing devices coupled by the first virtual network.

17. The system of claim 16 further comprising:

the processor further configured to

de-allocate the first DCE; and

allocate a second DCL comprising

a second virtual network, and

a second set of computing devices coupled by the second virtual network.

18. An apparatus comprising:

means for identifying a first broadcast domain, wherein a first virtual network comprises the first broadcast domain, and the first broadcast domain comprises at least one subnet;

means for dynamically provisioning the first virtual network, wherein said dynamically provisioning comprises generating an allocation request to allocate the at least one subnets; and

a first network line card coupled to the at least one subnets and configured to transmit the allocation request to the at least one subnets; and

means for identifying a first subnet daemon associated with a first subnet of the at least one subnets, wherein the first subnet daemon is configured to cause an associated network element to allocate the first subnet to the first virtual network.