Launching an instance in a virtual computing infrastructure

• US 8,977,679 B2
• Filed: 11/17/2011
• Issued: 03/10/2015
• Est. Priority Date: 06/15/2010
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Van Biljon, Willem Robert, Pinkham, Christopher Conway, Cloran, Russell Andrew, Gorven, Michael Carl, Divey, Brynmor K. B., Hoole, Quinton Robin, Kalele, Girish, Hardy, Alexandre
• Primary Examiner(s): Teixeira Moffat, Jonathan C
• Assistant Examiner(s): Hagos, Eyob
• Application Number:
  US13/299,287
• Publication Number:
  US 20130060839A1
• Time in Patent Office: 1,209 Days
• Field of Search: 709/203, 709/228
• US Class Current: 709/203
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 40/10 Tax strategies
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04M 15/66 Policy and charging system

Abstract

Launching an instance in cloud computing environment having a plurality of computing nodes is described. At a user'"'"'s home cloud system, a request is received from the user to launch an instance of an object. At the home cloud system, a designated remote cloud system is determined from a federated plurality of remote cloud systems based on the request. The request is translated into a format suitable for the designated remote cloud system. The translated request is communicated to the designated remote cloud system. The instance of the object is launched at the designated remote cloud.

Claims

1. A method of launching an instance in a multi-cloud computing environment having a plurality of computing nodes, the method comprising:

receiving, at a user'"'"'s home cloud system, a request from the user to launch an instance of an object;

determining, at the home cloud system, a designated remote cloud system from a federated plurality of remote cloud systems based on the request;

translating the request into a format suitable for the designated remote cloud system;

communicating the translated request to the designated remote cloud system;

launching the instance of the object at the designated remote cloud system by executing instructions from a launch plan that specifies an ideal state for the designated remote cloud system;

monitoring a current state of the designated remote cloud system to determine that one or more nodes in the designated remote cloud system have crashed;

determining, from the monitoring, that the current state differs from the ideal state due at least in part to the crash of the one or more nodes and due to a first quantity of instances of an image specified within the ideal state being greater than a second quantity of instances of the image currently being executed in the designated remote cloud system;

in response to determining that the current state differs from the ideal state due at least in part to the crash of the one or more nodes, performing instructions specified in the launch plan to cause the current state to match the ideal state, including executing a third quantity of new instances of the image within the designated remote cloud system, wherein the sum of the third quantity and the second quantity is at least as great as the first quantity.

2. The method of claim 1, wherein the federated plurality of remote cloud systems includes at least one public cloud system.

3. The method of claim 2, wherein the designated remote cloud system is a public cloud system.

4. The method of claim 1, wherein the launch plan includes instructions to launch a virtual machine instance.

5. The method of claim 1, wherein the launch plan includes instructions to launch an object by a computing node.

6. The method of claim 5, wherein the object is a machine image from which data is accessed.

7. The method of claim 5, wherein the object is executed code.

8. The method of claim 5, wherein the object is a data store.

12. The method of claim 1, further comprising:

receiving, from the user, a request to perform an action relative to the instance of the object in the designated remote cloud;

determining, based on user permissions stored within the user'"'"'s home cloud system, whether the user is authorized to perform the action;

in response to determining that the user is authorized to perform the action, generating a token within the user'"'"'s home cloud system and forwarding the token to the designated remote cloud for validation of the token and determination of whether performance of the action relative to the instance of the object is permitted.

9. A multi-cloud computing system, comprising:

a plurality of computing nodes; and

the system configured to;

receive, at a user'"'"'s home cloud system, a request from the user to launch an instance of an object;

determine, at the home cloud system, a designated remote cloud system from a federated plurality of remote cloud systems based on the request;

translate the request into a format suitable for the designated remote cloud system;

communicate the translated requested to the designated remote cloud system;

launch the instance of the object at the designated remote cloud system by executing instructions from a launch plan that specifies an ideal state for the designated remote cloud system;

monitor a current state of the designated remote cloud system to determine that one or more nodes in the designated remote cloud system have crashed;

determine, from the monitoring, that the current state differs from the ideal state due at least in part to the crash of the one or more nodes and due to a first quantity of instances of an image specified within the ideal state being greater than a second quantity of instances of the image currently being executed in the designated remote cloud system; and

in response to determining that the current state differs from the ideal state due at least in part to the crash of the one or more nodes, perform instructions specified in the launch plan to cause the current state to match the ideal state, including executing a third quantity of new instances of the image within the designated remote cloud system, wherein the sum of the third quantity and the second quantity is at least as great as the first quantity.

10. The system of claim 9 further comprising a virtualization layer configured to create a virtual computing environment on each of the plurality of computing nodes.

13. The system of claim 9, wherein the system is configured to:

receive, from the user, a request to perform an action relative to the instance of the object in the designated remote cloud;

determine, based on user permissions stored within the user'"'"'s home cloud system, whether the user is authorized to perform the action;

in response to determining that the user is authorized to perform the action, generate a token within the user'"'"'s home cloud system and forward the token to the designated remote cloud for validation of the token and determination of whether performance of the action relative to the instance of the object is permitted.

11. A non-transitory computer-readable storage medium storing instructions which, when performed by one or more processors, cause the one or more processors to perform operations comprising:

receiving, at a user'"'"'s home cloud system, a request from the user to launch an instance of an object;

determining, at the home cloud system, a designated remote cloud system from a federated plurality of remote cloud systems based on the request;

translating the request into a format suitable for the designated remote cloud system;

communicating the translated request to the designated remote cloud system;

launching the instance of the object at the designated remote cloud system by executing instructions from a launch plan that specifies an ideal state for the designated remote cloud system;

monitoring a current state of the designated remote cloud system to determine that one or more nodes in the designated remote cloud system have crashed;

determining, from the monitoring, that the current state differs from the ideal state due at least in part to the crash of the one or more nodes and due to a first quantity of instances of an image specified within the ideal state being greater than a second quantity of instances of the image currently being executed in the designated remote cloud system; and

in response to determining that the current state differs from the ideal state due at least in part to the crash of the one or more nodes, performing instructions specified in the launch plan to cause the current state to match the ideal state, including executing a third quantity of new instances of the image within the designated remote cloud system, wherein the sum of the third quantity and the second quantity is at least as great as the first quantity.

14. The non-transitory computer-readable storage medium of claim 11, wherein the instructions, when performed by the one or more processors, cause the one or more processors to perform operations comprising:

receiving, from the user, a request to perform an action relative to the instance of the object in the designated remote cloud;

determining, based on user permissions stored within the user'"'"'s home cloud system, whether the user is authorized to perform the action;

in response to determining that the user is authorized to perform the action, generating a token within the user'"'"'s home cloud system and forwarding the token to the designated remote cloud for validation of the token and determination of whether performance of the action relative to the instance of the object is permitted.