TECHNIQUES TO ISOLATING A PORTION OF AN ONLINE COMPUTING SERVICE

• US 20180314514A1
• Filed: 06/27/2018
• Published: 11/01/2018
• Est. Priority Date: 06/03/2014
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Garg, Nakul, Stern, Ricardo, Mahapatro, Neelamadhaba, Chen, Rui, Wilde, Michael, Jeffries, Charles
• Granted Patent: US 10,691,445 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 11/3664 Environments for testing or debugging software
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/656 while running
• CPC Class Codes: H04L 41/5032 Generating service level reports
• CPC Class Codes: H04L 43/55 Testing of service level quality, e.g. simulating service usage

Abstract

Techniques to isolating a portion of an online computing service are described. The following description may refer to the isolated portion as a deployment unit configured with a complete build of the online computing service. In one embodiment, after applying one or more changes to the complete build, the deployment unit may be used for testing these changes using end-to-end tests. In another embodiment, the deployment unit may be dedicated to a specific group of tenants that require at least some isolation from other tenants. Other embodiments are described and claimed.

Claims

1. An apparatus, comprising:

a processor;

a set of memory units; and

a management application operative on the processor, the management application to route production traffic away from a deployment unit wherein the deployment unit comprises servers for running an endpoint protection service instance over a network for a plurality of endpoints, migrate the deployment unit from the deployment unit to another endpoint, apply a change to the deployment unit to produce a new deployment unit, generate a new endpoint protection service instance for the new deployment unit, and route at least a portion of the production traffic to the new deployment unit based upon testing the new endpoint protection service instance with simulated transactions.

2. The apparatus of claim 1 further comprising a deployment component arranged to direct a discovery component to process routing data and route the production traffic away from the deployment unit.

3. The apparatus of claim 1 further comprising a validation component arranged to initiate simulated transactions with the modified deployment unit.

4. The apparatus of claim 1 further comprising a discovery component to route the production traffic to the other endpoint.

5. The apparatus of claim 1 further comprising a discovery component to route a portion of the production traffic to the other endpoint and another portion of the production traffic to the production endpoint.

6. The apparatus of claim 1, wherein the deployment component is operative to apply a change to at least one computing role of a mailbox protection service for execution on the deployment unit, and create a new mailbox protection service instance.

7. The apparatus of claim 6, wherein the deployment component is operative to roll back the change to the at least one computing role.

8. The apparatus of claim 1, wherein the deployment component is operative to isolate production traffic associated with a subset of a plurality of users associated with the production traffic to the modified deployment unit.

9. The apparatus of claim 1, wherein the deployment component is operative to arrange the deployment unit to be a dedicated service instance to handle production traffic from a subset of a plurality of users associated with the production traffic.

10. A computer-implemented method, comprising:

routing production traffic away from a deployment unit comprising servers for running an endpoint protection service instance, over a network, for a plurality of endpoints;

migrating the deployment unit from the deployment unit to another endpoint;

applying a change to the deployment unit to produce a new deployment unit;

generating a new endpoint protection service instance for the new deployment unit; and

routing at least a portion of the production traffic to the new deployment unit based upon testing the new endpoint protection service instance with simulated transactions.

11. The computer-implemented method of claim 10, comprising analyzing results from testing the new endpoint protection service.

12. The computer-implemented method of claim 10, comprising rolling back the change to the deployment unit.

13. The computer-implemented method of claim 10, comprising modifying an inter-role configuration between the servers for the deployment unit.

14. The computer-implemented method of claim 10, comprising executing tests of the new deployment unit using simulated transactions.

15. The computer-implemented method of claim 10, comprising configuring a set of computing roles into a deployment unit, the set of computing roles comprising a complete build of the endpoint protection service, applying a change to the set of computing roles to produce a new build of the endpoint protection service, and testing the new build of the endpoint protection service.

16. The computer-implemented method of claim 10, comprising isolating a portion of production traffic associated with the new deployment unit.

17. At least one computer-readable storage medium comprising instructions that, when executed, cause a system to:

process routing data to route production traffic away from one or more deployment units corresponding to online mailbox protection in which the one or more deployment units comprise a set of computing roles for running a mailbox protection service for a plurality of mailbox users;

upgrade the mailbox protection service to produce a new mailbox protection service; and

initiate testing of the new mailbox protection service using simulated mailbox transactions.

18. The computer-readable storage medium of claim 17, comprising instructions that when executed cause the system to:

modify the routing data to migrate the one or more deployment units from a production endpoint to a test endpoint.

19. The computer-readable storage medium of claim 17, comprising instructions that when executed cause the system to:

process resource capacity data to isolate a portion of the production traffic to a deployment unit

20. The computer-readable storage medium of claim 17, comprising instructions that when executed cause the system to:

modify the routing data to route the production traffic back to the one or more deployment services.