Multitenant access to multiple desktops on host machine partitions in a service provider network

• US 9,467,305 B2
• Filed: 03/07/2012
• Issued: 10/11/2016
• Est. Priority Date: 03/07/2012
• Status: Active Grant

• Current Assignee: Vmware LLC (Broadcom, Inc.)
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Ringdahl, Kenneth, Davies, Charles, Biryukov, Andre
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Hsiung, Hai-Chang
• Application Number:
  US13/413,867
• Publication Number:
  US 20130235874A1
• Time in Patent Office: 1,679 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 2209/504 Resource capping
• CPC Class Codes: G06F 9/45537 Provision of facilities of other operating environments, e.g. WINE I/O emulation G06F13/105
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/54 Organization of routing tables
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 49/70 Virtual switches
• CPC Class Codes: Y02D 10/00 Energy efficient computing, e.g. low power processors, power management or thermal management

Abstract

Routers and host machines can host desktops for two or more enterprises. A virtual local area network is established for each enterprise. Each virtual local area network is connected to a plurality of host machines for the enterprise, with each host machine supporting desktops for use by the enterprise. The desktops access computer resources on the enterprise network of the enterprise to which it is connected. Resources within a host machine are shared by having a virtual switch for each enterprise the host machine supports. The virtual switch for an enterprise is connected to the virtual local area network of the enterprise. Desktops in the host machine that are allocated to the enterprise are given network addresses that include the tag for that enterprise. Virtual desktops for different enterprises can be hosted on different partitions of the same host machine.

Claims

1. A computer system for supporting multiple enterprises in using virtual desktops hosted on a plurality of host machines, each enterprise having an enterprise computer network including computer resources, the computer system comprising:

a first enterprise computer network of a first enterprise, the first enterprise computer network including first computer resources;

a second enterprise computer network of a second enterprise, the second enterprise computer network including second computer resources;

a virtual local area network (VLAN) for each of the first and second enterprise, each virtual local area network being connected to a plurality of host machines for the corresponding enterprise, each host machine supporting virtual desktops for use by the enterprise, the virtual desktops accessing the computer resources on the enterprise computer network of the enterprise to which it is connected; and

a router coupled to the first enterprise computer network, the second enterprise computer network, and a computer network implementing the VLAN for each enterprise, wherein the router comprises a virtual router for each of the first enterprise and the second enterprise, wherein each virtual router includes a distinct routing table for the corresponding enterprise, the virtual routers configured to route traffic between the virtual desktops hosted on the plurality of host machines and the computer resources on the respective first and second enterprise computer networks,

wherein the plurality of host machines includes a first host machine including virtual desktops associated with the first enterprise and the second enterprise, wherein the first host machine further includes a plurality of virtual switches including a first virtual switch coupled to the VLAN for the first enterprise and a second virtual switch coupled to the VLAN for the second enterprise, and wherein each virtual switch is associated with one or more virtual desktops of the corresponding enterprise hosted on the first host machine, and wherein the virtual desktops for the first host machine associated with the first enterprise are pinned to one or more first physical CPU'"'"'s and the virtual desktops for the first host machine associated with the second enterprise are pinned to one or more distinct second physical CPU'"'"'s.

2. The computer system of claim 1, further comprising a resource manager for managing allocation of host machines to enterprises and desktops to enterprises.

3. The computer system of claim 2, wherein the resource manager, for each tenant, assigns a data center, VLAN identifier and quota.

4. The computer system of claim 3, wherein the resource manager identifies available host capacity and allocates host resources to a tenant.

5. The computer system of claim 1, wherein each virtual local area network has an identifier, and wherein a desktop allocated to an enterprise on a host machine is tagged with the identifier of the virtual local area network of the enterprise.

6. The computer system of claim 1, wherein the resource manager maintains a mapping of organization identifier, VLAN identifier and allocated resources.

7. A computer program product comprising computer storage and computer program instructions stored on the computer storage, the computer program instructions configuring a computer system to support multiple enterprises including a first enterprise and a second enterprise in using virtual desktops hosted on a plurality of host machines, each enterprise having a corresponding enterprise computer network including computer resources, the computer program instructions further configuring the computer system to be comprising:

a virtual local area network (VLAN) for each of the first and second enterprises, each virtual local area network being connected to a plurality of host machines for the corresponding enterprise, each host machine supporting virtual desktops for use by the enterprise, the virtual desktops accessing the computer resources on the enterprise computer network of the enterprise to which it is connected; and

a router coupled to the first enterprise computer network, the second enterprise computer network, and a computer network implementing the VLAN for each enterprise, wherein the router comprises a virtual router for each of the first enterprise and the second enterprise, wherein each virtual router includes a distinct routing table for the corresponding enterprise, the virtual routers configured to route traffic between the virtual desktops hosted on the plurality of host machines and the computer resources on the respective enterprise computer networks,

wherein the plurality of host machines includes a first host machine including virtual desktops associated with the first enterprise and the second enterprise, wherein the first host machine further includes a plurality of virtual switches including a first virtual switch coupled to the VLAN for the first enterprise and a second virtual switch coupled to the VLAN for the second enterprise, and wherein each virtual switch is associated with one or more virtual desktops of the corresponding enterprise hosted on the first host machine, and wherein the virtual desktops for the first host machine associated with the first enterprise are pinned to one or more first physical CPU'"'"'s and the virtual desktops for the first host machine associated with the second enterprise are pinned to one or more distinct second physical CPU'"'"'s.

8. The computer program product of claim 7, wherein the computer program instructions further configure the computer system to be comprising a resource manager for managing allocation of host machines to enterprises and desktops to enterprises.

9. The computer program product of claim 8, wherein the computer program instructions further configure the resource manager, for each tenant, to assign a data center, VLAN identifier and quota.

10. The computer program product of claim 9, wherein the computer program instructions further configure the resource manager to identify available host capacity and allocate host resources to a tenant.

11. The computer program product of claim 7, wherein the computer program instructions further configure the computer system such that each virtual local area network has an identifier, and wherein a desktop allocated to an enterprise on a host machine is tagged with the identifier of the virtual local area network of the enterprise.

12. The computer program product of claim 7, wherein the computer program instructions further configure the resource manager to maintain a mapping of organization identifier, VLAN identifier and allocated resources.

13. A computer system configured to connect virtual desktops to a plurality of enterprise computer networks for multiple enterprises, each enterprise computer network including computer resources, the computer system comprising:

a plurality of host machines, each host machine being configured to host a plurality of virtual desktops, each virtual desktop being allocated to an enterprise of the multiple enterprises and configured to access the computer resources on the enterprise computer network of the enterprise to which the virtual desktop is configured to access;

a virtual local area network (VLAN) for each enterprise, each virtual local area network being connected to the plurality of host machines for the corresponding enterprise; and

a router connected to two or more enterprise computer networks of the multiple enterprises and comprising a virtual router for each enterprise, wherein each virtual router includes a distinct routing table for each enterprise of the two or more enterprises, the virtual routers configured to route traffic between the virtual desktops allocated to the enterprise hosted on the plurality of host machines and the computer resources on the respective two or more enterprise computer networks;

wherein the plurality of host machines includes a first host machine including virtual desktops associated with two or more enterprises, wherein the first host machine includes a plurality of virtual switches including a first virtual switch coupled to the VLAN for the first enterprise and a second virtual switch coupled to the VLAN for the second enterprise, and wherein each virtual switch of the first host machine is associated with one or more virtual desktops allocated to the corresponding enterprise hosted on the first host machine, and wherein the virtual desktops for the first host machine associated with the first enterprise are pinned to one or more first physical CPU'"'"'s and the virtual desktops for the first host machine associated with the second enterprise are pinned to one or more distinct second physical CPU'"'"'s.

14. The computer system of claim 13, further comprising a resource manager operating on a computer and configured to manage allocation of host machines to enterprises and desktops to enterprises.

15. The computer system of claim 14, wherein the resource manager, for each tenant, is further configured to assign a data center, VLAN identifier and quota.

16. The computer system of claim 15, wherein the resource manager is further configured to identify available host capacity and is further configured to allocate host resources to a tenant.

17. The computer system of claim 13, wherein the resource manager is further configured to maintain a mapping in memory of an organization identifier, VLAN identifier and allocated resources.

18. The computer system of claim 13, wherein each virtual local area network has an identifier, and wherein a desktop allocated to an enterprise on a host machine is tagged with the identifier of the virtual local area network of the enterprise.

19. The computer system of claim 18, wherein the resource manager is further configured to maintain a mapping of organization identifier, VLAN identifier and allocated resources.

20. The computer system of claim 19, wherein the resource manager is further configured to identify available host capacity and is further configured to allocate host resources to a tenant.