Cluster federation and trust in a cloud environment

    公开(公告)号:US10185497B2

    公开(公告)日:2019-01-22

    申请号:US15627101

    申请日:2017-06-19

    摘要: An improved scalable object storage system allows multiple clusters to work together. In one embodiment, a trust and federation relationship is established between a first cluster and a second cluster. This is done by designating a first cluster as a trust root. The trust root receives contact from another cluster, and the two clusters exchange cryptographic credentials. The two clusters mutually authenticate each other based upon the credentials, and optionally relative to a third information service, and establish a service connection. Services from the remote cluster are registered as being available to the cluster designated as the trust root. Multi-cluster gateways can also be designated as the trust root, and joined clusters can be mutually untrusting. Two one-way trust and federation relationships can be set up to form a trusted bidirectional channel.

    METHODS AND SYSTEMS OF DISTRIBUTED TRACING
    2.
    发明申请

    公开(公告)号:US20180203794A1

    公开(公告)日:2018-07-19

    申请号:US15918121

    申请日:2018-03-12

    IPC分类号: G06F11/36 G06F8/70 G06F11/32

    摘要: A system and methods are provided for distributed tracing in a distributed application. In one embodiment, a method includes observing a plurality of messages sent and received among components of the distributed application, generating a probabilistic model of a call flow from observed messages of the distributed system, and constructing a call flow graph based on the probabilistic model for the distributed application. Distributed tracing may include observing messages by performing the subscription-based observation techniques and operations to receive, message traces describing messages being communicated among components of the distributed application. In this regard, the tracing service may merge message traces from different instrumentation points with message traces obtained by observing message queues to generate a probabilistic model and call flow graph. A distributed application developer or other relevant user may benefit in efficiently and effectively tracking down a cause of an abnormal behavior or analyzing performance profiles.

    Software-defined multinetwork bridge

    公开(公告)号:US09967111B2

    公开(公告)日:2018-05-08

    申请号:US13843591

    申请日:2013-03-15

    IPC分类号: G06F15/16 H04L12/46

    CPC分类号: H04L12/46 H04L12/462

    摘要: An example system for bridging between networks includes a first server that launches a first virtual machine in a first network. The system includes a first network controller that is coupled to the first network and sends a request for a bridge between the first network and a second network. The system also includes a second server that launches a second virtual machine in the second network. The system further includes a second network controller that is coupled to the second network, receives the request for the bridge, and in response to the request, creates the bridge between the first and second networks. The bridge enables the first virtual machine in the first network to communicate with the second virtual machine in the second network.

    Methods and systems of distributed tracing

    公开(公告)号:US09916232B2

    公开(公告)日:2018-03-13

    申请号:US14839533

    申请日:2015-08-28

    IPC分类号: G06F11/36 G06F11/32 G06F9/44

    摘要: A system and methods are provided for distributed tracing in a distributed application. In one embodiment, a method includes observing a plurality of messages sent and received among components of the distributed application, generating a probabilistic model of a call flow from observed messages of the distributed system, and constructing a call flow graph based on the probabilistic model for the distributed application. Distributed tracing may include observing messages by performing the subscription-based observation techniques and operations to receive, message traces describing messages being communicated among components of the distributed application. In this regard, the tracing service may merge message traces from different instrumentation points with message traces obtained by observing message queues to generate a probabilistic model and call flow graph. A distributed application developer or other relevant user may benefit in efficiently and effectively tracking down a cause of an abnormal behavior or analyzing performance profiles.

    MULTI-LEVEL CLOUD COMPUTING SYSTEM
    5.
    发明申请

    公开(公告)号:US20170223117A1

    公开(公告)日:2017-08-03

    申请号:US15425484

    申请日:2017-02-06

    摘要: A cloud computing system includes a physical resource pool that includes a number of information processing devices. Each information processing device includes a processor, a computer-readable medium, and a network interface. The system further includes a first cloud controller to manage a first cloud infrastructure, the first cloud infrastructure operating a first set of virtualized resources, the first set of virtualized resources having access to the physical resource pool through the first cloud controller. The system further includes a second cloud controller to manage a second cloud infrastructure, the second cloud infrastructure utilizing the first set of virtual resources to operate a second set of virtual resources, the second set of virtual resources being provided access to the physical resource pool through the second cloud controller and the first cloud controller.