Cloud computing gateway, cloud computing hypervisor, and methods for implementing same

• US 9,973,474 B2
• Filed: 03/07/2017
• Issued: 05/15/2018
• Est. Priority Date: 06/19/2008
• Status: Active Grant

• Current Assignee: VideoLabs, Inc.
• Original Assignee: CSC Agility Platform, Inc. (DXC Technology Company)
• Inventors: Hill, Duncan Christopher
• Primary Examiner(s): Chery, Dady
• Application Number:
  US15/452,032
• Publication Number:
  US 20170180324A1
• Time in Patent Office: 434 Days
• Field of Search: 370254, 370392, 370401, 370503, 370390, 709226-233
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 2009/4557 Distribution of virtual machine instances; Migration and load balancing
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/541 via adapters, e.g. between incompatible applications
• CPC Class Codes: G06F 9/547 Remote procedure calls [RPC]; Web services
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

Embodiments of the present invention provide a cloud gateway system, a cloud hypervisor system, and methods for implementing same. The cloud gateway system extends the security, manageability, and quality of service membrane of a corporate enterprise network into cloud infrastructure provider networks, enabling cloud infrastructure to be interfaced as if it were on the enterprise network. The cloud hypervisor system provides an interface to cloud infrastructure provider management systems and infrastructure instances that enables existing enterprise systems management tools to manage cloud infrastructure substantially the same as they manage local virtual machines via common server hypervisor APIs.

Claims

1. A computer-implemented method for managing cloud infrastructure, the method comprising:

establishing an enterprise network, wherein one or more network end-user devices are connected to the enterprise network;

connecting an enterprise gateway appliance to the enterprise network;

establishing a secure virtual private network between the enterprise gateway appliance and at least a first enterprise virtual machine in a cloud provider network, wherein the establishing further comprises;

establishing a connection between the enterprise gateway appliance and at least one remote gateway node in the cloud provider network, wherein the secure virtual private network is established between the enterprise gateway appliance, the remote gateway node, and the first enterprise virtual machine; and

causing one or more network service plug-ins to execute in the cloud provider network.

2. The computer-implemented method of claim 1, wherein the enterprise gateway appliance provides remote gateway software to the remote gateway node.

3. The computer-implemented method of claim 1, wherein the remote gateway node establishes a secure encrypted connection to at least the first enterprise virtual machine.

4. The computer-implemented method of claim 3, wherein the remote gateway node causes a virtual private network agent to execute on at least the first enterprise virtual machine.

5. The computer-implemented method of claim 1, wherein one or more corresponding network service plug-ins are also connected to the enterprise gateway appliance.

6. The computer-implemented method of claim 5, wherein the network service plug-ins provide intrusion detection services and intrusion prevention services.

7. The computer-implemented method of claim 6, wherein establishing the secure virtual private network further comprises:

enabling a client access agent on the end-user device; and

connecting the end-user device to a public network.

8. The computer-implemented method of claim 1, the method further comprising:

determining that an end-user device is outside the enterprise network and the cloud provider network; and

establishing a secure virtual private network between the end-user device and at least the first enterprise virtual machine.

9. A system comprising:

at least one processor; and

a memory storing instructions configured to instruct the at least one processor to perform;

establishing an enterprise network, wherein one or more network end-user devices are connected to the enterprise network;

connecting an enterprise gateway appliance to the enterprise network;

establishing a secure virtual private network between the enterprise gateway appliance and at least a first enterprise virtual machine in a cloud provider network,

wherein the establishing further causes the system to perform;

establishing a connection between the enterprise gateway appliance and at least one remote gateway node in the cloud provider network, wherein the secure virtual private network is established between the enterprise gateway appliance, the remote gateway node, and the first enterprise virtual machine; and

causing one or more network service plug-ins to execute in the cloud provider network.

10. The system of claimer 9, wherein the enterprise gateway appliance provides remote gateway software to the remote gateway node.

11. The system of claimer 9, wherein the remote gateway node establishes a secure encrypted connection to at least the first enterprise virtual machine.

12. A non-transitory computer storage medium storing computer-executable instructions that, when executed, cause a computer system to perform a computer-implemented method comprising:

establishing an enterprise network, wherein one or more network end-user devices are connected to the enterprise network;

connecting an enterprise gateway appliance to the enterprise network;

establishing a secure virtual private network between the enterprise gateway appliance and at least a first enterprise virtual machine in a cloud provider network, wherein the establishing further causes the computer system to perform;

establishing a connection between the enterprise gateway appliance and at least one remote gateway node in the cloud provider network, wherein the secure virtual private network is established between the enterprise gateway appliance, the remote gateway node, and the first enterprise virtual machine; and

causing one or more network service plug-ins to execute in the cloud provider network.

13. The non-transitory computer storage medium of claim 12, wherein the enterprise gateway appliance provides remote gateway software to the remote gateway node.

14. The non-transitory computer storage medium of claim 12, wherein the remote gateway node establishes a secure encrypted connection to at least the first enterprise virtual machine.