SECURELY MANAGING AND DIAGNOSING NETWORK MIDDLEBOXES

    公开(公告)号:US20190081912A1

    公开(公告)日:2019-03-14

    申请号:US15701396

    申请日:2017-09-11

    Applicant: VMware, Inc.

    Abstract: The disclosure provides an approach for managing and diagnosing middleboxes in a cloud computing system. In one embodiment, a network operations center, that is located remote to a virtualized cloud computing system and communicates with the cloud computing system via a wide area network, controls network middleboxes in the cloud computing system through a secure routing module inside a gateway of the cloud computing system. The secure routing module is configured to receive, from an authenticated management application and via a secure communication channel, packets intended for managing network middleboxes. In turn, the secure routing module establishes secure communication channels with the target middleboxes, translates the identified packets to protocols and/or application programming interfaces (APIs) of the target middleboxes, and transmits the translated packets to the target middleboxes.

    CENTRAL NAMESPACE CONTROLLER FOR MULTI-TENANT CLOUD ENVIRONMENTS

    公开(公告)号:US20180139174A1

    公开(公告)日:2018-05-17

    申请号:US15818584

    申请日:2017-11-20

    Applicant: VMware, Inc.

    Abstract: A centralized namespace controller allocates addresses in a distributed cloud infrastructure on-demand. Upon receiving a request to allocate addresses for a network to be provisioned by a cloud computing system included in the distributed cloud infrastructure, the centralized namespace controller allocates a network address that is unique within the distributed cloud infrastructure. Further, the centralized namespace controller allocates a range of virtual network interface cards (NIC) addresses that are unique within the network. The centralized namespace controller then allocates addresses from the range of virtual NIC addresses on an as-requested basis—when a virtual NIC is being created by the first cloud computing system on the network. Advantageously, by centralizing the allocation of addresses and dedicating independent NIC address ranges to different cloud computing systems, the centralized namespace controller enables stretched L2 networks between cloud computing systems while preventing duplicated addresses on the stretched networks.

    DATA CENTER WAN AGGREGATION TO OPTIMIZE HYBRID CLOUD CONNECTIVITY
    14.
    发明申请
    DATA CENTER WAN AGGREGATION TO OPTIMIZE HYBRID CLOUD CONNECTIVITY 审中-公开
    数据中心WAN综合优化混合云连通性

    公开(公告)号:US20170063673A1

    公开(公告)日:2017-03-02

    申请号:US14838537

    申请日:2015-08-28

    Applicant: VMware, Inc.

    Abstract: An example method of optimizing connectivity between data centers in a hybrid cloud system having a first data center managed by a first organization and a second data center managed by a second organization, the first organization being a tenant in the second data center. The method includes probing a wide area network (WAN) with test packets by varying an internet protocol (IP) flow tuple of the test packets across a set of IP flows. The method includes identifying a plurality of paths between a gateway of the first data center and another gateway of the second data center associated with the set of IP flows. The method further includes selecting an IP flow from the set of IP flows for an application executing in the first data center. The method further includes establishing a path-optimized connection between the gateway and the other gateway through the WAN having the selected IP flow for use by the application.

    Abstract translation: 一种优化具有由第一组织管理的第一数据中心和由第二组织管理的第二数据中心的混合云系统中的数据中心之间的连接性的示例性方法,所述第一组织是第二数据中心中的租户。 该方法包括通过在一组IP流中改变测试分组的因特网协议(IP)流元组来测试具有测试分组的广域网(WAN)。 该方法包括识别第一数据中心的网关与与该组IP流相关联的第二数据中心的另一个网关之间的多个路径。 该方法还包括从针对在第一数据中心中执行的应用的IP流集合中选择IP流。 该方法还包括通过具有所选择的IP流的WAN建立网关和另一网关之间的路径优化连接,供应用使用。

    DIAGNOSING REMOTE SITES OF A DISTRIBUTED CONTAINER ORCHESTRATION SYSTEM

    公开(公告)号:US20240176639A1

    公开(公告)日:2024-05-30

    申请号:US18153283

    申请日:2023-01-11

    Applicant: VMware, Inc.

    Abstract: An example method of diagnosing remote sites of a distributed container orchestration system includes: receiving, at a management cluster, definition of a test suite custom resource; detecting, by a test controller agent in a cluster of the remote sites, a diagnosis object in the management cluster created in response to the test suite custom resource; deploying, by the test controller agent in response to the diagnosis object, a first pod in the cluster; deploying, by the first pod, a second pod in a server of a first remote site of the remote sites; checking, by the second pod, configuration of the server that includes an additional pod executing alongside the second pod, at least one virtual machine (VM) in which the second pod and the additional pod execute, a hypervisor configured to support the at least one VM, and a hardware platform on which the hypervisor executes; and returning test data from the second pod to the first pod, the test data including results of the step of checking the configuration of the server.

    COORDINATED UPGRADE WORKFLOW FOR REMOTE SITES OF A DISTRIBUTED CONTAINER ORCHESTRATION SYSTEM

    公开(公告)号:US20240028322A1

    公开(公告)日:2024-01-25

    申请号:US17939713

    申请日:2022-09-07

    Applicant: VMware, Inc.

    CPC classification number: G06F8/65 G06F9/45558 G06F2009/4557

    Abstract: An example method of upgrading remote sites of a distributed container orchestration system includes: deploying, by upgrade software executing in a data center remote from the remote sites, a second container orchestration (CO) control plane executing concurrently with a first CO control plane, the second CO control plane having a second version different than a first version of the first CO control plane, the first CO control plane initially managing all of the remote sites; upgrading, by the upgrade software, CO support software of a first portion of the remote sites; adding, by the upgrade software, the first portion of the remote sites to a second CO cluster managed by the second CO control plane; and removing, by the upgrade software, the first portion of the remote sites from a first CO cluster managed by the first CO control plane.

Patent Agency Ranking