System and method for a cloud computing abstraction layer

• US 8,931,038 B2
• Filed: 01/19/2011
• Issued: 01/06/2015
• Est. Priority Date: 06/19/2009
• Status: Active Grant

• Current Assignee: VideoLabs, Inc.
• Original Assignee: Servicemesh Incorporated (DXC Technology Company)
• Inventors: Pulier, Eric, Martinez, Frank, Hill, Duncan Christopher
• Primary Examiner(s): Gee, Jason K.
• Assistant Examiner(s): LWIN, MAUNG T
• Application Number:
  US13/009,774
• Publication Number:
  US 20110231899A1
• Time in Patent Office: 1,448 Days
• Field of Search: 726/1, 726/2
• US Class Current: 726/1
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/5072 Grid computing
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 41/5019 Ensuring fulfilment of SLA
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

According to one system of the invention, the system provides a cloud-computing service from a cloud-computing environment having a plurality of cloud-computing resources. The system may include a management module configured to manage a cloud-computing resource of the plurality of cloud-computing resources as a cloud-computing service, wherein the cloud-computing service performs a computer workload, an adapter configured to connect to the cloud-computing resource to the system and translate a management instruction received from the management module into a proprietary cloud application program interface call for the cloud-computing resource, a cloud service bus configured to route the management instruction from the management module to the adapter, a consumption module configured to allow a user to subscribe the cloud-computing service, a planning module configured to plan the cloud-computing service, and a build module configured to build the cloud-computing service from the cloud-computing resource.

Claims

1. A non-transitory computer readable medium comprising a plurality of cloud-computing resources, and comprising a computer-readable storage medium in which program instructions are stored, the program instructions configured to cause a computer system to perform the operations of:

providing a virtual private cloud configured to utilize a cloud-computing resource from the plurality of cloud-computing resources to perform a computer workload;

receiving a request to perform the computer workload within the virtual private cloud;

provisioning the cloud-computing resource from the plurality of cloud-computing resources based on at least one resource utilization indication, wherein the at least one resource utilization indication comprises a scoring logic further comprising at least two selected from the group consisting of a business attribute, an operational attribute and a technical attribute, wherein the group describes mission-critical requirements, legal obligation requirements, service level agreement (SLA) requirements, time of day availability requirements, and seasonality requirements;

deploying the cloud-computing resource within the virtual private cloud; and

using the cloud-computing resource to perform the computer workload.

2. The non-transitory computer readable medium of claim 1, wherein provisioning the cloud-computing resource comprises:

locating an unreserved cloud-computing resource within the plurality of cloud-computing resources; and

reserving for the virtual private cloud the unreserved cloud-computing resource.

3. The non-transitory computer readable medium of claim 1, the operations further comprising:

receiving a constraint for the cloud-computing resource or for the computer workload; and

applying the constraint on the cloud-computing resource such that, when the cloud-computing resource is used to perform the computer workload, the cloud-computing resource'"'"'s operation is limited according to the constraint.

4. The non-transitory computer readable medium of claim 1, the operations further comprising:

defining a security zone such that the security zone comprises the virtual private cloud; and

applying a security policy to the security zone such that, when the cloud-computing resource deployed in the virtual private cloud that is used to perform the computer workload, the cloud-computing resource'"'"'s operation or the computer workload'"'"'s performance is subject to the security policy.

5. The non-transitory computer readable medium of claim 4, wherein the security zone is defined according to a physical location of the virtual private cloud'"'"'s usage, a network location of the virtual private cloud'"'"'s usage, or attribute of an organization associated with the virtual private cloud.

6. The non-transitory computer readable medium of claim 4, wherein the security policy is an access policy, a read-permission policy, a write-permission policy, an edit-permission policy, a privacy-based policy, an encryption policy, or a cloud-computing resource utilization policy.

7. The non-transitory computer readable medium of claim 1, the operations further comprising declaring a static network address for the computer workload.

8. The non-transitory computer readable medium of claim 1, wherein where the cloud-computing resource is deployed under control of a virtual machine manager.

9. The non-transitory computer readable medium of claim 1, the operations further comprising:

receiving at a central policy server a definition for a security policy, wherein the central policy server is configured to associate the security policy to the computer workload or the cloud-computing resource performing the computer workload; and

pushing the security policy to the cloud-computing resource.

10. The non-transitory computer readable medium of claim 1, wherein the cloud-computing resource is an infrastructure element, and the operations further comprising:

providing a user interface that allows a user to deploy or configure the infrastructure element;

setting, through the user interface, a policy to the infrastructure element; and

applying the policy to the infrastructure element when the infrastructure element is deployed within the virtual private cloud.

11. The non-transitory computer readable medium of claim 10, the operations further comprising:

determining a reference design for the infrastructure element; and

deploying the infrastructure element in the virtual private cloud according to the reference design.

12. The non-transitory computer readable medium of claim 1, the operations further comprising:

associating a policy with the computer workload to be performed within the virtual private cloud; and

applying the policy to the cloud-computing resource performing the computer workload during the computer workload'"'"'s performance.

13. The non-transitory computer readable medium of claim 1, wherein receiving the request to perform the computer workload comprises:

receiving an application to be migrated to cloud-computing environment for execution; and

identifying the computer workload as necessary for executing the application.

14. The non-transitory computer readable medium of claim 1, the operations further comprising:

using an adapter to connect the virtual private cloud to the cloud-computing resource;

using a metamodel data structure to store an association between a computer workload and a policy; and

pushing the metamodel data structure to the adapter such that, when the cloud-computing resource is deployed within the virtual private cloud to perform the computer workload, the adapter applies the policy to the computer workload or the cloud-computing resource performing the computer workload.

15. The non-transitory computer readable medium of claim 14, the operations further comprising:

moving the computer workload from using the cloud-computing resource to using a second cloud-computing resource, wherein the second cloud-computing resource uses a second adapter to connect the virtual private cloud to the second cloud-computing resource; and

pushing the metamodel data structure to the second adapter such that when the second cloud-computing resource is deployed within the virtual private cloud to perform the computer workload, the second adapter applies the policy to the second cloud-computing resource performing the cloud computer workload.

16. The non-transitory computer readable medium of claim 1, wherein the cloud-computing resource is a physical computing resource or a cloud-computing resource.

17. The non-transitory computer readable medium of claim 1, wherein the cloud-computing resource is a storage resource, a network resource, an internal private resource, an external private resource, a secure public resource, a platform-as-a-service, and a software-as-a-service, or an infrastructure-as-a-service.

18. The non-transitory computer readable medium of claim 1, wherein the cloud-computing resource is a hybrid cloud-computing resource comprising at least two of a physical resource, a virtualized resource, a private resource, a public resource, an internal resource, or an external resource.

19. The non-transitory computer readable medium of claim 1, the operations further comprising identifying the cloud-computing resource for performing the computer workload.

20. The non-transitory computer readable medium of claim 19, wherein identifying the cloud computing resource is based on a workload score determined by the scoring logic.

21. The non-transitory computer readable medium of claim 20, wherein the scoring logic is based on the business attribute of the computer workload, the technical attribute of the computer workload, and the operational attribute of the computer workload.

22. The non-transitory computer readable medium of claim 20, wherein the scoring logic is editable.

23. The non-transitory computer readable medium of claim 20, wherein the scoring logic can be dynamically updated and combined to form specialized scoring plans for analyzing computer workloads.

24. The non-transitory computer readable medium of claim 1, wherein the computer workload is scalable.

25. The non-transitory computer readable medium of claim 1, wherein deploying the cloud-computing resource comprises deploying a pre-determined set of cloud-computing resources to optimize the computer workload'"'"'s performance.

26. The non-transitory computer readable medium of claim 1, the operations further comprising setting a condition for the computer workload, wherein the condition determines if or when the cloud-computing resource can be deployed within the virtual private cloud to perform the computer workload.

27. A non-transitory computer readable medium comprising a plurality of cloud-computing resources, and comprising a computer-readable storage medium in which program instructions are stored, the program instructions configured to cause a computer system to perform the operations of:

receiving a computing workflow to be performed in the cloud-computing environment;

identifying a computer workload to perform the computing workflows;

associating a policy with the computer workload, wherein the policy is at least partially based on at least one received resource utilization indication, wherein the at least one resource utilization indication comprises a scoring logic further comprising at least two selected from the group consisting of a business attribute, an operational attribute and a technical attribute, wherein the group describes mission-critical requirements, legal obligation requirements, SLA requirements, time of day availability requirements, and seasonality requirements;

testing the computer workload in a pre-production virtual private cloud within the cloud-computing environment;

deploying the computer workload in a production virtual private cloud within the clouding-computing environment; and

applying the policy to the computer workload during the computer workload'"'"'s performance within the production virtual private cloud for consumption.

28. The non-transitory computer readable medium of claim 27, wherein the identifying the computer workload to perform the computing workflow involves identifying a plurality of computer workloads to perform the computing workflow.

29. A system for providing a cloud-computing service from a cloud-computing environment comprising a plurality of cloud-computing resources, the system comprising:

a management engine configured to manage a cloud-computing resource of the plurality of cloud-computing resources as a cloud-computing service, wherein the cloud-computing service performs a computer workload and the cloud-computing service comprises the cloud-computing resource;

an adapter configured to connect to the cloud-computing resource to the system and translate a management instruction received from the management engine into a cloud application program interface call for the cloud-computing resource;

a cloud service bus configured to route the management instruction from the management engine to the adapter;

a consumption engine configured to allow a user to subscribe the cloud-computing service;

a planning engine configured to plan the cloud-computing service; and

a build engine configured to build the cloud-computing service from the cloud-computing resource and publish the cloud-computing service to the consumption engine;

wherein the build engine accesses at least one resource utilization indication from at least one user for use by the consumption engine;

wherein the at least one resource utilization indication comprises a scoring logic further comprising at least two selected from the group consisting of a business attribute, an operational attribute and a technical attribute, wherein the group describes mission-critical requirements, legal obligation requirements, SLA requirements, time of day availability requirements, and seasonality requirements.

30. The system of claim 29, wherein the system provides a user interface configured to provide access to the system as a virtual private cloud.

31. The system of claim 29, the system further comprising a policy engine configured to enforce a policy on the cloud-computing service through the management engine.

32. The system of claim 31, wherein the management engine, through the adapter, monitors a cloud-computing resource of the cloud-computing service and provisions the cloud-computing resource according to the policy engine module.

33. The system of claim 29, wherein managing the cloud-computing service comprises provisioning the cloud-computing service for a virtual private cloud, releasing the cloud-computing service for the virtual private cloud, accounting for usage of the cloud-computing service in the virtual private cloud, or monitoring the cloud-computing service.

34. The system of claim 29, the system further comprising an identity management engine configured to connect to an authentication system and authenticate the user for the cloud-computing service.

35. The system of claim 29, the system further comprising an encryption engine configured to perform encryption services for the cloud-computing service.

36. The system of claim 29, the system further comprising a connection engine configured to securely connect the cloud-computing service to a client network or a cloud provider network.

37. The system of claim 29, wherein the management engine is further configured to collect and process cost and consumption data from a cloud computing resource provider and present that data, to a billing system through an application program interface.

38. The system of claim 29, the system further comprising a cloud model utilized by the adapter to translate the management instruction to a cloud API call.