Dynamic provisioning of virtual systems

• US 9,129,124 B2
• Filed: 04/12/2012
• Issued: 09/08/2015
• Est. Priority Date: 04/12/2012
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Jenne, Nathan
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): MALINOWSKI, WALTER J
• Application Number:
  US13/445,374
• Publication Number:
  US 20130275967A1
• Time in Patent Office: 1,244 Days
• Field of Search: 709/224, 709/226, 709/229, 718/1, 726/4
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

A method for dynamic provisioning of virtual systems includes, with a server system that hosts virtual systems, detecting a new virtual system on the server system, and with the server system, using a physical address of the new virtual system to perform network authentication on behalf of the new virtual system.

Claims

1. A method for dynamic provisioning of virtual systems, the method comprising:

with a server system that hosts virtual systems, detecting a new virtual system on said server system;

with said server system, using a physical address of said new virtual system to perform network authentication on behalf of said new virtual system by impersonating the physical address of said new virtual system; and

with said server system, sending an authentication request to an authentication server on behalf of said new virtual system, in which provisioning information received based on the authentication request is to be applied to a port connecting a neighboring network device to said server system.

2. The method of claim 1, further comprising, with said neighboring network device to said server system, receiving said provisioning information for said new virtual system from an authentication server.

3. The method of claim 2, with said neighboring network device, applying said provisioning information to said port connecting said neighboring network device to said server system.

4. The method of claim 1, wherein said new virtual system is a newly created virtual system.

5. The method of claim 1, wherein said new virtual system is transferred from a different server system that hosts virtual systems.

6. The method of claim 1, further comprising, with said server system, removing said new virtual system from said network in response to said new virtual system being removed from said server system.

7. The method of claim 1, further comprising, with said server system, transmitting and sending network traffic for said new virtual system by impersonating said physical address of said new virtual system.

8. A server system to host a number of virtual systems, the server system comprising:

at least one processor;

a memory communicatively coupled to the at least one processor, the memory comprising computer executable code that, when executed by the at least one processor, causes the at least one processor to;

detect a new virtual system on said server system;

use a physical address of said new virtual system to perform network authentication on behalf of said new virtual system by impersonating the physical address of said new virtual system; and

send, from said virtual server system, an authentication request to an authentication server on behalf of said new virtual system, in which;

a source of said authentication request is identified as said new virtual system based on said physical address of said new virtual system being indicated as a source of said authentication request; and

provisioning information received based on the authentication request is to be applied to a port connecting a neighboring network device to said server system.

9. The system of claim 8, wherein in response to said network authentication, said neighboring network device to said server system receives said provisioning information for said new virtual system.

10. The system of claim 9, wherein said neighboring network device is to apply said provisioning information to said port connecting said neighboring network device to said server system.

11. The system of claim 8, wherein said new virtual system is a newly created virtual system.

12. The system of claim 8, wherein said new virtual system is transferred from a different server system that hosts virtual systems.

13. The system of claim 8, wherein said processor is further to remove said new virtual system from said network in response to said new virtual system being removed from said server system.

14. The system of claim 8, wherein said processor is further to transmit and send network traffic for said new virtual system by impersonating said physical address of said new virtual system by tagging packets associated with said network traffic with the physical address of said new virtual system.

15. A method for dynamic provisioning of virtual systems, the method comprising:

with a server system that hosts virtual systems, detecting a new virtual system on said server system;

with said server system, transmitting an authentication request on behalf of said new virtual system, a data packet associated with said request indicating the source of the packet by the physical address of a virtual system running on said server system, in which provisioning information received based on the authentication request is to be applied to a port connecting a neighboring network device to said server system;

with said server system, transmitting data packets associated with said virtual system to a neighboring network device, said network device to allow transmission of data packets associated with said virtual system as a result of said authentication request.

16. The method of claim 15, further comprising, said neighboring network device receiving said provisioning information for said new virtual system from an authentication server.

17. The method of claim 16, with said neighboring network device, applying said provisioning information to said port connecting said neighboring network device to said server system.

18. The method of claim 15, wherein said new virtual system is transferred from a different server system that hosts virtual systems.

19. The method of claim 15, further comprising, with said server system, removing said new virtual system from said network in response to said new virtual system being removed from said server system.

20. The method of claim 15, further comprising, with said server system, transmitting and sending network traffic for said new virtual system by impersonating said physical address of said new virtual system.