Cloud provider, service, and tenant classification in cloud computing

• US 9,729,406 B2
• Filed: 07/23/2015
• Issued: 08/08/2017
• Est. Priority Date: 04/30/2015
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Jeuk, Sebastian, Baker, Frederick Juergens, Salgueiro, Gonzalo
• Primary Examiner(s): Madamba, Glenford
• Application Number:
  US14/806,998
• Publication Number:
  US 20160323183A1
• Time in Patent Office: 747 Days
• Field of Search: 709226
• CPC Class Codes: H04L 2101/365 Application layer names, e.g. buddy names, unstructured names chosen by a user or home appliance name
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 2101/69 using geographic information, e.g. room number
• CPC Class Codes: H04L 41/5058 Service discovery by the service manager
• CPC Class Codes: H04L 41/5096 wherein the managed service relates to distributed or central networked applications
• CPC Class Codes: H04L 45/64 using an overlay routing layer
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 61/45 Network directories; Name-to-address mapping
• CPC Class Codes: H04L 61/50 Address allocation

Abstract

A cloud provider supports cloud-based services accessible to tenants of the cloud provider over a network. In the cloud provider, classification information including a cloud-identifier to identify the cloud provider, service-identifiers each to identify a respective one of the services, and tenant-identifiers each to identify a respective one of the tenants is maintained. The classification information is distributed within the cloud provider, including to the services, and may also be distributed outside of the cloud provider, to enable a respective tenant to exchange IP packets with, and thereby access, a respective service based on the classification information, wherein each IP packet includes the cloud-identifier, the service-identifier of the respective service, and the tenant-identifier of the respective tenant.

Claims

1. A method comprising:

at a cloud provider configured to support cloud-based services accessible to tenants of the cloud provider over a network;

maintaining classification information including a cloud-identifier to identify the cloud provider, service-identifiers each to a identify a respective one of the services, and tenant-identifiers each to identify a respective one of the tenants; and

distributing the classification information within the cloud provider, including to the services, to enable a respective tenant to exchange Internet Protocol (IP) packets with, and thereby access, a respective service based on the classification information, wherein each IP packet includes the cloud-identifier, the service-identifier of the respective service, and the tenant-identifier of the respective tenant.

2. The method of claim 1, wherein:

the maintaining includes updating the service-identifiers and the tenant-identifiers of the classification information each time a new service is added or an existing service is removed from the cloud provider and each time a new tenant is added or an existing tenant is removed.

3. The method of claim 1, wherein:

the cloud provider includes servers to host the services and network devices to provide connectivity between the services and the network; and

the distributing includes distributing the classification information to the network devices to enable the network devices to route IP packets between the respective service and the respective tenant based on the classification information distributed to the network devices and included in the IP packets.

4. The method of claim 3, further comprising, at one of the network devices:

receiving from the respective service an outbound IP packet destined for the respective tenant, and from the respective tenant an inbound IP packet destined for the respective service, each IP packet including the cloud provider identifier, the service-identifier of the respective service, and the tenant-identifier of the respective tenant; and

forwarding the outbound IP packet to the respective tenant and the inbound IP packet to the respective service.

5. The method of claim 1, wherein the cloud-identifier includes an identifier of a geographical region of the cloud provider, and a unique cloud provider identifier.

6. The method of claim 5, wherein the service-identifier includes a cloud provider data center identifier, and an identifier of the services in the data center.

7. The method of claim 1, wherein each IP packet includes, in addition to source and destination IP addresses corresponding to the respective tenant and the respective service, an IP packet header field that includes the cloud-identifier, the respective service-identifier, and the respective tenant-identifier.

8. The method of claim 7, wherein each IP packet is an IP packet formatted according to IPv4 or IPv6.

9. An apparatus comprising:

a network interface unit to communicate with components in a cloud provider configured to support cloud-based services accessible to tenants of the cloud provider over a network; and

a processor coupled to the network interface unit and configured to;

maintain classification information including a cloud-identifier to identify the cloud provider, service-identifiers each to a identify a respective one of the services, and tenant-identifiers each to identify a respective one of the tenants; and

distribute the classification information within the cloud provider, including to the services, to enable a respective tenant to exchange Internet Protocol (IP) packets with, and thereby access, a respective service based on the classification information, wherein each IP packet includes the cloud-identifier, the service-identifier of the respective service, and the tenant-identifier of the respective tenant.

10. The apparatus of claim 9, wherein the processor is configured to maintain by:

updating the service-identifiers and the tenant-identifiers of the classification information each time a new service is added or an existing service is removed from the cloud provider and each time a new tenant is added or an existing tenant is removed.

11. The apparatus of claim 9, wherein:

the cloud provider includes servers to host the services and network devices to provide connectivity between the services and the network; and

the processor is configured to distribute by distributing the classification information to the network devices to enable the network devices to route IP packets between the respective service and the respective tenant based on the classification information distributed to the network devices and included in the IP packets.

12. The apparatus of claim 9, wherein the cloud-identifier includes an identifier of a geographical region of the cloud provider, and a unique cloud provider identifier.

13. The apparatus of claim 12, wherein the service-identifier includes a cloud provider data center identifier, and an identifier of the services in the data center.

14. The apparatus of claim 9, wherein each IP packet includes, in addition to source and destination IP addresses corresponding to the respective tenant and the respective service, an IP packet header field that includes the cloud-identifier, the respective service-identifier, and the respective tenant-identifier.

15. A non-transitory computer readable storage media encoded with instructions that, when executed by a processor of a management system in a cloud provider configured to support cloud-based services accessible to tenants of the cloud provider over a network, cause the processor to:

maintain classification information including a cloud-identifier to identify the cloud provider, service-identifiers each to a identify a respective one of the services, and tenant-identifiers each to identify a respective one of the tenants; and

distribute the classification information within the cloud provider, including to the services, to enable a respective tenant to exchange IP packets with, and thereby access, a respective service based on the classification information, wherein each IP packet includes the cloud-identifier, the service-identifier of the respective service, and the tenant-identifier of the respective tenant.

16. The computer readable storage media of claim 15, wherein the instructions to cause the processor to maintain include instructions to cause the processor to update the service-identifiers and the tenant-identifiers of the classification information each time a new service is added or an existing service is removed from the cloud provider and each time a new tenant is added or an existing tenant is removed.

17. The computer readable storage media of claim 15, wherein:

the cloud provider includes servers to host the services and network devices to provide connectivity between the services and the network; and

the instructions to cause the processor to distribute include instructions to cause the processor to distribute the classification information to the network devices to enable the network devices to route IP packets between the respective service and the respective tenant based on the classification information distributed to the network devices and included in the IP packets.

18. The computer readable storage media of claim 15, wherein the cloud-identifier includes an identifier of a geographical region of the cloud provider, and a unique cloud provider identifier.

19. The computer readable storage media of claim 18, wherein the service-identifier includes a cloud provider data center identifier, and an identifier of the services in the data center.

20. The computer readable storage media of claim 15, wherein each IP packet includes, in addition to source and destination IP addresses corresponding to the respective tenant and the respective service, an IP packet header field that includes the cloud-identifier, the respective service-identifier, and the respective tenant-identifier.