Method and system for migration of virtual machines and virtual applications between cloud-computing facilities through multiplexed secure tunnels

• US 9,389,893 B2
• Filed: 12/02/2013
• Issued: 07/12/2016
• Est. Priority Date: 08/13/2013
• Status: Active Grant

• Current Assignee: Vmware LLC (Broadcom, Inc.)
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Raghu, Jagannath
• Primary Examiner(s): Bullock, Jr., Lewis A
• Assistant Examiner(s): Dascomb, Jacob
• Application Number:
  US14/094,506
• Publication Number:
  US 20150052523A1
• Time in Patent Office: 953 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/4557 Distribution of virtual machine instances; Migration and load balancing
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/4856 resumption being on a different machine, e.g. task migration, virtual machine migration G06F9/5088 takes precedence
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 63/0272 Virtual private networks

Abstract

The current document discloses methods and systems for extending an internal network within a first cloud-computing facility to a second cloud-computing facility and deploying a virtual machine or virtual application previously running on a first cloud-computing facility within the context of the extended internal network in the second cloud-computing facility. The currently disclosed methods and systems which provide internal-network extension and redeployment of virtual machines and virtual applications, referred to as “stretch deploy,” allow a virtual machine or virtual application formerly executing on a first cloud-computing facility to resume execution on a second cloud-computing facility, using the computational and storage facilities of the second cloud-computing facility but depending on network support from the first cloud-computing facility, without changing IP and local network addresses and the network connectivity, based on those addresses, between the virtual machines and virtual applications and other local and remote computational entities with which the virtual machines and virtual applications communicate. Multiplexing multiple stretch deployed L2 networks over the same secure (SSL-VPN) tunnel, terminating on organization edges.

Claims

1. A cloud-connector subsystem that provides a stretch-deploy operation for moving one or more virtual machines and virtual applications, which execute in a source cloud-computing facility, to a target cloud-computing facility, where the one or more virtual machines and virtual applications resume executing, the cloud-connector subsystem comprising:

a cloud-connector node associated with the source cloud-computing facility;

a cloud-connector node associated with the target cloud-computing facility; and

a cloud-connector server that includes one or more processors, one or more memories, one or more data-storage devices, and computer instructions that, when executed on the one or more processors, control the cloud-connector server to provide, in cooperation with the cloud-connector nodes, a stretch-deploy operation that;

extends a first local virtual network within the source cloud-computing facility, to a second local virtual network, within the target cloud-computing facility, through a secure tunnel that supports multiple extended virtual networks, forming an extended local virtual network, by;

verifying the source cloud-computing facility and one or more virtual machines and virtual applications to be moved,

verifying the target cloud-computing facility,

creating a routed virtual application within the second local virtual network,

launching execution of the routed virtual application within the target cloud-computing facility, and

when a secure tunnel has not already been created between a first and second organization edge appliances, creating a secure tunnel between the first organization edge appliance, associated with the first local virtual network, and the second organization edge appliance, associated with the second local virtual network, and

moves the one or more virtual machines and virtual applications from executing on the source cloud-computing facility and communicating with other computational entities through the extended local virtual network using one or more network addresses to executing on the target cloud-computing facility and communicating with other computational entities through the extended local virtual network using the same one or more network addresses.

2. The cloud-connector subsystem of claim 1 wherein the one or more one or more virtual machines and virtual applications comprises one of:

a single virtual machine;

two or more virtual machines;

a single virtual application including a single virtual machine; and

a single virtual application including two or more virtual machines.

3. The cloud-connector subsystem of claim 1,

wherein the first local virtual network is connected through a first internal edge appliance to a first organization virtual network within the source cloud computing facility that, in turn, is connected to an external network through the first organization edge appliance;

and

wherein the second local virtual network is connected through a second internal edge appliance to a second organization virtual network within the target cloud computing facility that, in turn, is connected to an external network through the second organization edge appliance.

4. The cloud-connector subsystem of claim 3 wherein the secure tunnel is an SSL VPN tunnel.

5. The cloud-connector subsystem of claim 3 wherein the cloud-connector subsystem verifies a cloud-computing facility by:

determining that those components of the cloud-computing facility used in the stretch-deploy operation are present, configured, and licensed; and

determining that the cloud-computing facility has sufficient storage capacity for instantiating a temporary virtual application.

6. The cloud-connector subsystem of claim 1, wherein the stretch-deploy operation moves the one or more virtual machines by executing a copy phase, the copy phase comprising:

creating a first temporary virtual application in the source cloud-computing facility;

moving the one or more virtual machines to the first temporary virtual application;

generating a virtual application template corresponding to the temporary virtual application; and

copying the virtual application template to the target cloud-computing facility.

7. The cloud-connector subsystem of claim 1, wherein the stretch-deploy operation moves the one or more virtual machines by executing a deployment phase, the deployment phase comprising:

creating a second temporary virtual application in the target cloud-computing facility from the virtual application template copied to the target cloud-computing facility; and

moving the one or more virtual machines from the second temporary virtual application to the routed virtual application in the target cloud-computing facility.

8. A method that relocates one or more virtual machines and virtual applications connected to a first local virtual network within a source cloud-computing facility to a target cloud-computing facility, the method comprising:

a cloud-connector node associated with the source cloud-computing facility;

a cloud-connector node associated with the target cloud-computing facility; and

a cloud-connector server that includes one or more processors, one or more memories, one or more data-storage devices, and computer instructions that, when executed on the one or more processors, control the cloud-connector server to provide, in cooperation with the cloud-connector nodes, a stretch-deploy operation that;

extends a first local virtual network within the source cloud-computing facility, to a second local virtual network, within the target cloud-computing facility, through a secure tunnel that supports multiple extended virtual networks, forming an extended local virtual network, by;

verifying the source cloud-computing facility and one or more virtual machines and virtual applications to be moved,

verifying the target cloud-computing facility,

creating a routed virtual application within the second local virtual network,

launching execution of the routed virtual application within the target cloud-computing facility, and

when a secure tunnel has not already been created between a first and second organization edge appliances, creating a secure tunnel between the first organization edge appliance, associated with the first local virtual network, and the second organization edge appliance, associated with the second local virtual network, and

moves the one or more virtual machines and virtual applications from executing on the source cloud-computing facility and communicating with other computational entities through the extended local virtual network using one or more network addresses to executing on the target cloud-computing facility and communicating with other computational entities through the extended local virtual network using the same one or more network addresses.

9. The method of claim 8, wherein the one or more one or more virtual machines and virtual applications comprises one of:

a single virtual machine;

two or more virtual machines;

a single virtual application including a single virtual machine; and

a single virtual application including two or more virtual machines.

10. The method of claim 8,

wherein the first local virtual network is connected through a first internal edge appliance to a first organization virtual network within the source cloud computing facility that, in turn, is connected to an external network through the first organization edge appliance;

and

wherein the second local virtual network is connected through a second internal edge appliance to a second organization virtual network within the target cloud computing facility that, in turn, is connected to an external network through the second organization edge appliance.

11. The method of claim 10 wherein the secure tunnel is one of:

an SSL VPN tunnel; and

an IPsec tunnel.

12. The method of claim 8, wherein verifying a cloud-computing facility further comprises:

determining that those components of the cloud-computing facility used in the stretch-deploy operation are present, configured, and licensed; and

determining that the cloud-computing facility has sufficient storage capacity for instantiating a temporary virtual application.

13. The method of claim 8, wherein the stretch-deploy operation moves the one or more virtual machines by executing a copy phase, the copy phase comprising:

creating a first temporary virtual application in the source cloud-computing facility;

moving the one or more virtual machines to the first temporary virtual application;

generating a virtual application template corresponding to the temporary virtual application; and

copying the virtual application template to the target cloud-computing facility.

14. The method of claim 8, wherein the stretch-deploy operation moves the one or more virtual machines by executing a deployment phase, the deployment phase comprising:

creating a second temporary virtual application in the target cloud-computing facility from the virtual application template copied to the target cloud-computing facility; and

moving the one or more virtual machines from the second temporary virtual application to the routed virtual application in the target cloud-computing facility.

15. Computer instructions stored within a non-transitory physical data-storage device that, when executed on one or more processors within a cloud-connector subsystem, control the cloud-connector subsystem to relocate one or more virtual machines and virtual applications connected to a first local virtual network within a source cloud-computing facility to a target cloud-computing facility by:

using a cloud-connector node associated with the source cloud-computing facility;

using a cloud-connector node associated with the target cloud-computing facility; and

providing, in cooperation with the cloud-connector nodes, a stretch-deploy operation that;

extends a first local virtual network within the source cloud-computing facility, to a second local virtual network, within the target cloud-computing facility, through a secure tunnel that supports multiple extended virtual networks, forming an extended local virtual network, by;

verifying the source cloud-computing facility and one or more virtual machines and virtual applications to be moved,

verifying the target cloud-computing facility,

creating a routed virtual application within the second local virtual network,

launching execution of the routed virtual application within the target cloud-computing facility, and

when a secure tunnel has not already been created between a first and second organization edge appliances, creating a secure tunnel between the first organization edge appliance, associated with the first local virtual network, and the second organization edge appliance, associated with the second local virtual network, and

moves the one or more virtual machines and virtual applications from executing on the source cloud-computing facility and communicating with other computational entities through the extended local virtual network using one or more network addresses to executing on the target cloud-computing facility and communicating with other computational entities through the extended local virtual network using the same one or more network addresses.

16. The computer instructions of claim 15,

wherein the first local virtual network is connected through a first internal edge appliance to a first organization virtual network within the source cloud computing facility that, in turn, is connected to an external network through the first organization edge appliance;

and

wherein the second local virtual network is connected through a second internal edge appliance to a second organization virtual network within the target cloud computing facility that, in turn, is connected to an external network through the second organization edge appliance.