System and method for reducing cloud IP address utilization using a distributor registry

• US 9,122,533 B2
• Filed: 11/05/2009
• Issued: 09/01/2015
• Est. Priority Date: 03/13/2009
• Status: Active Grant

• Current Assignee: Novell Incorporated (Open Text Corporation)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Allen, Jared Patrick, McClain, Carolyn Bennion, Carter, Stephen R., Burch, Lloyd Leon, Olds, Dale Robert
• Primary Examiner(s): GREENE, JOSEPH L
• Application Number:
  US12/613,112
• Publication Number:
  US 20100235526A1
• Time in Patent Office: 2,126 Days
• Field of Search: 709/229
• US Class Current: 1/1
• CPC Class Codes: G06F 9/505 considering the load
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

System and method for providing cloud computing services are described. In one embodiment, the system comprises a cloud computing environment comprising resources for supporting cloud workloads, each cloud workload having associated therewith an internal cloud address; and a routing system disposed between external workloads of an external computing environment and the cloud workloads, the routing system for directing traffic from an external cloud address to the internal cloud addresses of the cloud workloads. The routing system comprises a virtual router configured to function as a network address translator (“NAT”); a distributor connected between the virtual router and the cloud workloads; and a distributor registry accessible by the distributor for maintaining information comprising at least one of port mappings, cloud address mappings, and cloud workload configuration information.

Claims

1. A system for providing cloud computing services, the system comprising:

a cloud computing environment comprising a cloud infrastructure including a hardware layer having storage assets, processing assets and network assets for supporting cloud workloads and a routing system, each cloud workload having associated therewith an internal cloud address, wherein the routing system is disposed within the cloud infrastructure of the cloud computing environment, the routing system comprising;

a virtual router disposed within a first cloud of the cloud computing environment and configured to function as a network address translator (“

NAT”

);

a distributor disposed within a second cloud of the cloud computing environment different from the first cloud and connected between the virtual router and the cloud workloads, wherein the distributor receives cryptographic keys from the external workloads based on attestation by the virtual router of the first cloud and uses the cryptographic keys to establish a secure connection to route traffic between the external workloads and the cloud workloads; and

a distributor registry accessible by the distributor for maintaining information comprising port mappings, cloud address mappings, and cloud workload configuration information, wherein each of the cloud workloads communicates information comprising its internal cloud address and at least one port designation to the distributor, which logs the information in the distributor registry.

2. The system of claim 1 wherein the distributor maps at least one port designation to the cloud workloads via the internal cloud addresses.

3. The system of claim 1 further comprising a secure communications channel disposed between the cloud computing environment and the external computing environment.

4. The system of claim 1 wherein the information maintained by the distributor registry is available to the cloud workloads for enabling performance of at least one of clustering, remedial clustering, and cooperative computing and storage management operations.

5. The system of claim 1 wherein the routing system further comprises:

a plurality of virtual routers; and

a plurality of distributors each connected to a respective one of the plurality of virtual routers;

wherein the distributor registry is accessible by each one of the plurality of distributors.

6. A system for providing cloud computing services, the system comprising:

a cloud computing environment comprising a cloud infrastructure including a hardware layer having storage assets and processing assets for supporting cloud workloads each having associated therewith an internal cloud address; and

a routing system disposed within the cloud infrastructure of the cloud computing environment, the routing system comprising;

a virtual router disposed within a first cloud of the cloud computing environment and configured to function as a network address translator (“

NAT”

);

a distributor disposed within a second cloud of the cloud computing environment different from the first cloud and connected between virtual router of the first cloud and the cloud workloads, wherein the distributor of the second cloud receives cryptographic keys from the external workloads based on attestation by the virtual router of the first cloud; and

a distributor registry accessible by the distributor for maintaining information comprising at least one of port mappings, address mappings, and configuration information for each of the cloud workloads,

wherein the distributor of the second cloud uses the cryptographic keys to establish a secure connection to route traffic between the external workloads and the cloud workloads, and

wherein each of the cloud workloads communicates information comprising its internal address and at least one port designation to the distributor, which logs the information in the distributor registry.

7. The system of claim 6 wherein the distributor maps at least one port designation to the cloud workloads via the internal addresses.

8. The system of claim 6 wherein the information maintained by the registry means is available to the cloud workloads for enabling performance of at least one of clustering, remedial clustering, and cooperative computing and storage management operations.

9. The system of claim 6 wherein the routing system further comprises:

a plurality of virtual routers; and

a plurality of distributors each connected to a respective one of the plurality of virtual routers;

wherein the distributor registry is accessible by each one of the plurality of distributors.

10. A method of providing cloud computing services, the method comprising:

providing a cloud computing environment comprising a first cloud, a second cloud, and resources for supporting cloud workloads of the first cloud, each cloud workload of the first cloud having associated therewith an internal address; and

routing traffic between external workloads of an external computing environment to the cloud workloads of the first cloud, the routing comprising directing traffic from an external address to the internal cloud addresses and further comprising;

providing a virtual router disposed within the first cloud and configured to function as a network address translator (“

NAT”

);

providing a distributor disposed within the second cloud and connected between the virtual router and the cloud workloads of the first cloud, wherein the distributor of the second cloud establishes secure connections with the external workloads based on attestation by the virtual router of the first cloud to the validity of the distributor of the second cloud, and wherein the distributor of the second cloud establishes secure connections with the cloud workloads of the first cloud based on attestation by the virtual router of the first cloud to the validity of the cloud workloads of the first cloud;

providing a distributor registry accessible by the distributor of the second cloud for maintaining at least one of port mappings, address mappings, and cloud workload configuration information.

11. The method of claim 10 further comprising mapping at least one port designation to the cloud workloads via the internal cloud addresses.

12. The method of claim 10 further comprising establishing a secure communications channel between the cloud computing environment and the external computing environment.

13. The method of claim 10 further comprising making available to the cloud workloads the information maintained by the distributor registry for enabling the cloud workloads to perform at least one of clustering, remedial clustering, and cooperative computing and storage management operations.

14. The method of claim 10 wherein the routing further comprises:

providing a plurality of virtual routers;

providing a plurality of distributors each connected to a respective one of the virtual routers;

wherein the distributor registry is accessible by each one of the plurality of distributors.