Launching service applications using a virtual network management system

• US 8,266,264 B2
• Filed: 02/27/2007
• Issued: 09/11/2012
• Est. Priority Date: 07/06/2001
• Status: Expired due to Term

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Hasan, Taqi, Ganesan, Elango
• Primary Examiner(s): Chankong, Dohm
• Application Number:
  US11/679,653
• Publication Number:
  US 20070150597A1
• Time in Patent Office: 2,023 Days
• Field of Search: 709223-226, 709/220, 709/249
• US Class Current: 709/223
• CPC Class Codes: G06F 3/048 Interaction techniques based on graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/044 comprising hierarchical management structures
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 41/0883 Semiautomatic configuration, e.g. proposals from system
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A network service administration system including a plurality of service objects, a plurality of address objects; and a service configuration application for a multifunction appliance running on a client computer coupled to the appliance via a network. The service configuration application includes an interface allowing subscribers to configure at least a subset of application content services provided by the appliance and including a rule set implementing rules in ones of said application content services in said subset based on changes to configurations of any other of said application content services. Each of said service objects may comprise an individual network service definition.

Claims

1. A method for configuring a data center that has a plurality of geographically distributed facilities that provide network services to a plurality of different company subscribers, where the company subscribers share equipment of the data center including network devices that provide network services to the company subscribers, the method comprising:

executing a configuration engine that presents a user interface via computer network, wherein the user interface presents an administrative management hierarchy of topology objects that represents a virtual topology of the shared equipment of the data center for an individual one of the company subscribers as if the equipment were dedicated to the individual company subscriber, wherein the user interface allows an administrator for the individual company subscriber to manage a portion for that individual company subscriber of a data configuration of the data center, wherein the user interface includes filtering to present a view that allows the individual company subscriber to configure policies and services for the individual company subscriber independent of other ones of the company subscribers,

wherein the topology objects include a global data center object that represents the data center as a whole,

wherein the topology objects include a set of service objects that represent all the network services that are accorded to that individual company subscriber by the data center,

wherein the topology objects include a set of address objects having object properties that define address information for the network services provided by the data center to the subscribers,

wherein the topology objects include a set of facility objects that represent the distributed facilities of the data center, and

wherein the topology objects include a set of device objects that represent physical devices located at the facilities of the data center;

installing with the configuration engine a plurality of sets of rules that utilize the topology objects to provide the network services, wherein the plurality of sets of rules includes a corresponding set of rules for each of the network services that defines a configuration for the network service based on at least one of the service objects or at least one of the address objects, and further wherein at least one of the sets of rules is a set of implied rules that are applied across two or more of the network services;

receiving a configuration change to a first one of the network services;

in response to the configuration change to the first one of the network services, modifying an address object or a service object of at least one rule in the corresponding set of rules that defines the configuration of the first one of the network services;

automatically modifying a configuration of at least a second one of the network services when the modification to the address object or the service object is reflected in the set of implied rules;

launching a service application that operates within a context of one of the topology objects in the administrative management hierarchy,

wherein when the service application operates within the context of one of the topology objects, the service application uses data associated with the one of the topology objects and data associated with any topology object that is subordinate to the one of the topology objects within the administrative management hierarchy.

2. The method of claim 1, wherein when the service application operates within the context of the one of the topology objects, information generated by the service application applies only to the one of the topology objects.

3. The method of claim 1,

wherein launching a service application comprises launching the service application in a context of one of the device objects;

and

wherein the service application uses data that emanates from a physical device that the one of the device objects represents in order to present a status of the physical device.

4. The method of claim 1,

wherein launching a service application comprises launching the service application in a context of the global data center object;

and

wherein the service application uses data that emanates from all of the physical devices of the data center in order to present a status of the data center.

5. The method of claim 1,

wherein launching a service application comprises launching the service application in a context of a subscriber object associated with the individual company subscriber;

and

wherein the service application provides one of the network services in response to network packets associated with the individual company subscriber that the subscriber object represents.

6. The method of claim 5, wherein the network service comprises a network address translation service.

7. The method of claim 1, wherein launching a service application comprises launching the service application on one of the physical devices located at the facilities of the data center.

8. The method of claim 7, wherein launching a service application on one of the physical devices comprises sending a request to launch the service application over a computer network.

9. The method of claim 1,

wherein launching a service application comprises launching a management service module that operates in the context of the global data center object, and

wherein the management service module assists a configuration manager to launch other service applications in response to configuration input from the administrator.

10. The method of claim 8, wherein the management service module comprises an authentication manager that provides access control and regulated administrative privileges.

11. The method of claim 1, wherein one or more of service applications operate on a network management server.

12. The method of claim 1, wherein providing a user interface comprises presenting a graphical user interface.

13. The method of claim 12, wherein providing a graphical user interface comprises displaying the graphical user interface with a client device that receives the graphical user interface from a device that provides the graphical user interface.

14. The method of claim 1, wherein providing a graphical user interface comprises:

presenting a facility object in the set of facility objects as a root of the administrative management hierarchy; and

presenting one or more of the device objects as being subordinate to the facility object in the administrative management hierarchy.

15. The method of claim 1, wherein providing a graphical user interface comprises:

presenting a subscriber object as a root of the administrative management hierarchy; and

presenting one or more of the facility objects and one or more of the device objects as being subordinate to the subscriber object in the administrative management hierarchy.

16. The method of claim 1, wherein providing a graphical user interface comprises:

presenting a device object in the set of device objects as a root of the administrative management hierarchy; and

presenting one or more of the facility objects as being subordinate to the device object in the administrative management hierarchy.

17. The method of claim 1, wherein the administrator is an agent of the individual company subscriber.

18. The method of claim 17, wherein the service application is not launched unless the agent is attempting to launch the service application within a context of the individual company subscriber.

19. The method of claim 1,

wherein the administrator is an facility administrator for a particular facility of the network data center;

and

wherein the service application is not launched unless the facility administrator is attempting to launch the service application within a context of a one of the facility objects that is associated with the particular facility of the data center.

20. The method of claim 1, wherein the network services include at least one of the following:

Network address translation, virtual private networking, OSPF routing, Load balancing, or Firewall.

21. The method of claim 1, wherein the implied rules include a default rule set allowing administrative management of the network services provided by the data center.