Cloud computing gateway, cloud computing hypervisor, and methods for implementing same

• US 8,514,868 B2
• Filed: 06/19/2009
• Issued: 08/20/2013
• Est. Priority Date: 06/19/2008
• Status: Active Grant

• Current Assignee: VideoLabs, Inc.
• Original Assignee: Servicemesh Incorporated (DXC Technology Company)
• Inventors: Hill, Duncan Christopher
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): HALIYUR, VENKATESH N
• Application Number:
  US12/488,424
• Publication Number:
  US 20100027552A1
• Time in Patent Office: 1,523 Days
• Field of Search: 370352-503, 709226-233
• US Class Current: 370/401
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 2009/4557 Distribution of virtual machine instances; Migration and load balancing
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/541 via adapters, e.g. between incompatible applications
• CPC Class Codes: G06F 9/547 Remote procedure calls [RPC]; Web services
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

Embodiments of the present invention provide a cloud gateway system, a cloud hypervisor system, and methods for implementing same. The cloud gateway system extends the security, manageability, and quality of service membrane of a corporate enterprise network into cloud infrastructure provider networks, enabling cloud infrastructure to be interfaced as if it were on the enterprise network. The cloud hypervisor system provides an interface to cloud infrastructure provider management systems and infrastructure instances that enables existing enterprise systems management tools to manage cloud infrastructure substantially the same as they manage local virtual machines via common server hypervisor APIs.

Claims

1. A cloud gateway system comprising:

an enterprise gateway system located in an enterprise network and comprising;

a software installer configured to upload remote gateway software to a cloud provider network and to install the remote gateway software on a first virtual machine in the cloud provider network, the cloud provider network comprising a plurality of virtual machines, and

a network services tool configured to establish a virtual private network between the enterprise gateway system and the first virtual machine and to provide plug-in network services having remote components and thereby establishing a pseudo-hypervisor instance in the cloud network; and

a remote gateway system located in the cloud provider network and comprising;

a virtual machine connection tool configured to establish a secure connection between the first virtual machine and a second virtual machine in the cloud provider network, and

a remote network services tool configured to execute the remote components of the plug-in network services.

2. The cloud gateway system of claim 1, wherein the remote gateway system further comprises a virtual machine creation tool configured to create the second virtual machine in the cloud provider network.

3. The cloud gateway system of claim 1, further comprising a client access agent located on a mobile device.

4. The cloud gateway system of claim 3, wherein the client access agent comprises a mobile network services tool configured to establish a mobile virtual private network between the mobile device and the second virtual machine and to provide plug-in network services having remote components.

5. A cloud hypervisor system comprising:

a processor;

a pseudo-hypervisor creation tool configured, using the processor, to establish a pseudo-hypervisor instance;

an API call listening tool configured, using the processor, to listen for and receive hypervisor API calls;

a hypervisor API call translation tool configured, using the processor, to translate a hypervisor API call received by the API call listening tool into an intermediate representation;

a cloud API translation tool configured, using the processor, to translate an intermediate representation into a cloud API call; and

a routing tool configured, using the processor, to route an intermediate representation from the hypervisor API call translation tool to the cloud API translation tool.

13. The cloud hypervisor system of claim 5, wherein the hypervisor API call translation tool is further configured to pass a destination parameter with an intermediate representation.

14. The cloud hypervisor system of claim 13, wherein the destination parameter indicates a cloud provider network account.

15. The cloud hypervisor system of claim 13, wherein the destination parameter indicates a route to the cloud API translation tool.

16. The cloud hypervisor system of claim 5, wherein the hypervisor API call translation tool is further configured to return a response code to a pseudo-hypervisor instance.

17. The cloud hypervisor system of claim 5, wherein the pseudo-hypervisor instance is associated with an account at a cloud infrastructure provider.

18. The cloud hypervisor system of claim 5, wherein the routing tool is further configured to return a result code to a pseudo-hypervisor instance after routing an intermediate representation.

19. The cloud hypervisor system of claim 5, wherein the routing tool is further configured to return a result code to a pseudo-hypervisor instance upon a failure to complete the routing of an intermediate representation.

20. The cloud hypervisor system of claim 5, wherein the cloud API translation tool corresponds to a cloud provider account.

21. The cloud hypervisor system of claim 5, further comprising a web console configured to plug into the routing tool and graphically expose cloud infrastructure management functions.

22. The cloud hypervisor system of claim 5, further comprising a topology manager configured to plug into the routing tool, wherein the topology manager includes an infrastructure topology creation tool and an infrastructure topology deployment tool.

6. A method for managing cloud infrastructure, the method comprising:

uploading remote gateway software from an enterprise network to a cloud provider network, the cloud provider network comprising a plurality of virtual machines;

installing the remote gateway software on a first virtual machine in the cloud provider network;

establishing a pseudo-hypervisor instance in the cloud network;

establishing a virtual private network between the enterprise network and the first virtual machine;

establishing a secure connection between the first virtual machine and a second virtual machine in the cloud provider network; and

executing plug-in network services on the first virtual machine.

7. The method of claim 6, further comprising the steps of:

enabling a client access agent on a device outside the enterprise network and cloud provider network;

connecting the device to a public network; and

establishing a virtual private network between the device and one or both of the first virtual machine and the second virtual machine.

8. A method for communicating with cloud accounts, the method comprising:

establishing a pseudo-hypervisor instance on an enterprise network;

configuring the pseudo-hypervisor instance to receive a hypervisor API call from an enterprise systems management tool on the enterprise network;

translating a received hypervisor API call into an intermediate representation;

routing the intermediate representation to a back-end plug-in;

translating the intermediate representation into a cloud API call; and

transmitting the cloud API call to a cloud provider network for delivery to a cloud account.

9. The method of claim 8, further comprising the step of verifying successful execution of the cloud API call.

10. The method of claim 9, further comprising the step of reporting verification information concerning the cloud API call to the pseudo-hypervisor instance.

11. The method of claim 10, further comprising the step of translating the verification information into a hypervisor-specific result code.

12. The method of claim 11, further comprising the step of reporting the hypervisor-specific result code to an enterprise systems management tool.