Network operations center and appliance host in a single machine

• US 10,061,917 B2
• Filed: 05/04/2015
• Issued: 08/28/2018
• Est. Priority Date: 05/04/2015
• Status: Active Grant

• Current Assignee: Benjamin Robert Gardner
• Original Assignee: Benjamin Robert Gardner
• Inventors: Gardner, Benjamin Robert
• Primary Examiner(s): Armouche, Hadi S
• Assistant Examiner(s): Naghdali, Khalil
• Application Number:
  US14/703,215
• Publication Number:
  US 20160328556A1
• Time in Patent Office: 1,212 Days
• Field of Search: 726 3
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls

Abstract

System and method of a single machine or cluster of machines acting as a single machine that simplifies and consolidates the hosting of appliances using virtualization, containers, and or any type of sandboxing to host virtual appliances, however, interconnecting these appliance nodes in a manner of having one centralized node acting as the security center, firewall appliance, and information distributer for not only the local virtual network(s), machines, appliances, but physical and foreign virtual networks which includes but is not limited to wireless connectivity and or whatever the current ubiquitous connectivity, as well as multiple sub-networks via single or multiple networking adapters; using these methods allows for a completely secure customized network environment with all the needed appliances for the intended use case.

Claims

1. A network operations center and appliance host in a single machine comprising:

a hypervisor host with networking capabilities consisting of a single external physical networking interface, virtual interfaces, virtual networks, virtual bridges;

one or more client hypervisor instances with virtual networking capabilities each containing an operating system and applications;

a central hypervisor instance containing an operating system and applications, consisting of internal virtual interfaces and external interfaces using device pass through mechanisms to said hypervisor host via external physical networking interface;

a security appliance operating within said central hypervisor instance;

wherein said hypervisor host using sandboxing mechanisms, positions said client hypervisor instances in a centralized manner using said virtual bridges and or said virtual networks interchangeably to said internal interfaces of said central hypervisor instance,

conversely, said central hypervisor instance through external interface device using pass through mechanisms to said hypervisor host via external physical networking interface allows for forming network connections with adjoining external networks,

whereby all external network communication flows through said security appliance and said hypervisor host via external physical network interface, and only through said security appliance and said hypervisor host via external physical network interface, on its way into or out of said hypervisor host,

whereby said central hypervisor instance dedicated as sole communication gateway and filter, provides network address translation, routing, bridging, DHCP, DNS, firewalling, and universal threat management, to and or from said client hypervisor instances,

wherein said central hypervisor instance provides network address translation, routing, bridging, DHCP, DNS, firewalling, and universal threat management services to said adjoining networks.