Techniques for cloud control and management

• US 9,736,026 B2
• Filed: 01/30/2015
• Issued: 08/15/2017
• Est. Priority Date: 07/09/2009
• Status: Active Grant

• Current Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Original Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Inventors: Wipfel, Robert A., Carter, Stephen R, McClain, Carolyn B.
• Primary Examiner(s): Jean, Frantz
• Application Number:
  US14/609,748
• Publication Number:
  US 20150207684A1
• Time in Patent Office: 928 Days
• Field of Search: 709203, 709219, 709220, 707694, 707756, 718 1, 726 1
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: G06F 16/254 Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 47/782 Hierarchical allocation of resources, e.g. involving a hierarchy of local and centralised entities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Techniques for cloud control and management are provided. The control, creation, and management of workloads in distributed infrastructures are coordinated via a master Configuration Management Database (CMDB). The master CMDB is also used to unify the multiple distributed infrastructures so that the workloads are rationalized. Moreover, data centers are coordinated with the distributed infrastructures so the configuration settings and policies included in the master CMDB are enforced and synchronized throughout the network.

Claims

1. A method, comprising:

managing resources of workloads through a configuration repository and when at least two resources communicate via a specific protocol defining that protocol in a setting within the configuration repository, and wherein managing further includes managing processing loads, memory loads, storage loads, and processing capabilities for each processing environment associated with the workloads, and wherein managing further includes permitting each processing environment to independently manage the workloads associated with that processing environment as long as independent management remains in compliance with the configuration repository; and

interfacing the resources and the workloads via settings defined in the configuration repository.

2. The method of claim 1 further comprising, obtaining a policy assigned to at least one of the resources and performing an action defined in the policy when the at least one of the resources is accessed.

3. The method of claim 2, wherein enforcing further includes overriding enforcement of at least one policy based on a different policy appearing at a higher level within the hierarchy of policies from that which the at least one policy appears.

4. The method of claim 1 further comprising, obtaining a hierarchy of policies relevant to the resources and enforcing each of the policies against the resources.

5. The method of claim 1 further comprising, obtaining security policies from the configuration repository and configuring each infrastructure associated with each of the resources with security enforcement in accordance with a particular security policy for that infrastructure.

6. The method of claim 1 further comprising, interfacing infrastructure configuration repositories associated with infrastructures of each of the resources with the configuration repository.

7. The method of claim 6, wherein interfacing further includes overriding policies defined in the infrastructure configuration repositories when those policies conflict with particular policies defined in the configuration repository.

8. The method of claim 6 further comprising, synchronizing at least some policies in the infrastructure configuration repositories with particular policies defined in the configuration repository.

9. The method of claim 6 further comprising, raising an audit even when at least one policy in the infrastructure configuration repositories conflict with at least one particular policy defined in the configuration repository.

10. The method of claim 6 further comprising, mapping policies defined in the infrastructure repositories represented in a first format to other policies defined in the configuration repository represented in a second format, wherein the first format and the second format are disparate formats from one another.

11. A method, comprising:

automatically interfacing a data center configuration repository associated with distributed infrastructures with infrastructure configuration repositories for each of the distributed infrastructures; and

automatically managing the distributed infrastructures as a data center through the interfaced configuration repositories, wherein automatically managing further includes defining a specific protocol between at least two distributed resources when those resources communicate with one another, the specific protocol defined by a setting in the data center configuration repository, and wherein automatically managing further includes managing processing loads, memory loads, storage loads, and processing capabilities for each distributed infrastructure, wherein automatically managing further includes permitting each data center to independently manage the distributed infrastructure associated with that data center as long as independent management does remains in compliance with the data center configuration repository.

12. The method of claim 11, wherein automatically interfacing further includes translating schema definitions defining the infrastructure configuration repositories to data center definitions defining the data center configuration repository.

13. The method of claim 11, wherein automatically interfacing further includes sharing at least one data center resource accessible from a data center infrastructure with each of the distributed infrastructures.

14. The method of claim 11, wherein automatically interfacing further includes overriding policies defined in the infrastructure configuration repositories when those policies conflict with data center policies defined in the data center configuration repository.

15. The method of claim 11, wherein automatically interfacing further includes configuring security policies defined in the data center configuration repository within each of the distributed infrastructures.

16. The method of claim 11, wherein configuring further includes defining audit events to be raised within each of the distributed infrastructures when the security policies are violated within the distributed infrastructures.

17. The method of claim 11, wherein managing further includes receiving notifications from each of the distributed infrastructures when conflicts between policies of the data center configuration repository conflict with other policies of the infrastructure configuration repositories.

18. The method of claim 17, wherein receiving further includes directing an automated action to be processed within the distributed infrastructures in response to the notifications relevant to the conflicts.

19. A system, comprising:

a data center server; and

a plurality of distributed processing environments configured to be accessible over a network;

wherein the data center server is configured to;

i) interface the distributed processing environments with one another, ii) manage the distributed processing environments as a single data center processing environment through a configuration repository, and manage processing loads, memory loads, storage loads, and processing capabilities for each distributed processing environment, and permit each distributed processing environment to independently manage an infrastructure of that distributed processing environment as long as independent management remains in compliance with the configuration repository, and iii) defining a communication protocol that at least two resources are to process to communication with one another from different ones of the distributed processing environment through a setting defined in the configuration repository.

20. The system of claim 19, wherein the data center server is further configured to:

iv) override any policy conflict that occurs between one or more of the distributed processing environments and the configuration repository.