公开(公告)号：US20170032020A1

公开(公告)日：2017-02-02

申请号：US14828446

申请日：2015-08-17

Applicant: VMware, Inc.

Inventor： Gregory T. Burk ,  Lachlan T. Coote

IPC: G06F17/30 ,  H04L12/911

CPC classification number: H04L41/0893 ,  G06F15/161 ,  G06F17/30371 ,  G06F17/30598 ,  H04L41/08 ,  H04L41/20 ,  H04L47/20 ,  H04L47/762 ,  H04L47/827

Abstract: Some embodiments provide a method for managing a set of computing resources. The method imports descriptions of computing resources from several heterogeneous sources. The descriptions specify categories for the computing resources. The different sources use different types of categories for the resource descriptions. Based on the categories specified for the computing resources in the set, the method derives additional categories for at least a subset of the computing resources. The method stores each imported computing resource tagged according to its specified and derived categories, wherein the category tags are used for binding policies to the computing resources.

Abstract translation: 一些实施例提供了一种用于管理一组计算资源的方法。 该方法从多个异构源导入计算资源的描述。 这些描述指定计算资源的类别。 不同的来源为资源描述使用不同类型的类别。 基于为集合中的计算资源指定的类别，该方法为计算资源的至少一个子集导出其他类别。 该方法存储根据其指定和派生类别标记的每个导入的计算资源，其中类别标签用于将策略绑定到计算资源。

公开(公告)号：US10025810B2

公开(公告)日：2018-07-17

申请号：US14828455

申请日：2015-08-17

Applicant: VMware, Inc.

Inventor： Gregory T. Burk ,  Lachlan T. Coote

IPC: G06F17/00 ,  G06F17/30 ,  H04L12/24 ,  H04L12/813

Abstract: Some embodiments provide, for a policy framework, a method for managing policies for a set of resources in a computing environment. The method stores several imported policy rules as primitive policies, each of which includes a policy data structure that includes a set of fields. One of the fields of each primitive policy stores the imported policy rule for the primitive policy. The method defines several composite policies based at least in part on the primitive policies. The method stores the defined composite policies as policy data structures. Each policy data structure for a composite policy includes a set of fields and references at least one additional policy data structure.

公开(公告)号：US10116510B2

公开(公告)日：2018-10-30

申请号：US14828446

申请日：2015-08-17

Applicant: VMware, Inc.

Inventor： Gregory T. Burk ,  Lachlan T. Coote

IPC: G06F17/30 ,  H04L12/24 ,  G06F15/16 ,  H04L12/813

Abstract: Some embodiments provide a method for managing a set of computing resources. The method imports descriptions of computing resources from several heterogeneous sources. The descriptions specify categories for the computing resources. The different sources use different types of categories for the resource descriptions. Based on the categories specified for the computing resources in the set, the method derives additional categories for at least a subset of the computing resources. The method stores each imported computing resource tagged according to its specified and derived categories, wherein the category tags are used for binding policies to the computing resources.

公开(公告)号：US20170034075A1

公开(公告)日：2017-02-02

申请号：US14828441

申请日：2015-08-17

Applicant: VMware, Inc.

Inventor： Gregory T. Burk ,  Lachlan T. Coote ,  Yanislav Yankov ,  Alain Dumesny

IPC: H04L12/923 ,  H04L12/813

CPC classification number: H04L41/0893 ,  G06F15/161 ,  G06F17/30371 ,  G06F17/30598 ,  H04L41/08 ,  H04L41/20 ,  H04L47/20 ,  H04L47/762 ,  H04L47/827

Abstract: Some embodiments provide, for a policy framework that manages application of a plurality of policies to a plurality of resources in a computing environment, a method for providing a user interface. The method displays a first display area for viewing and editing policies imported by the policy framework from a first several heterogeneous sources. The method displays a second display area for viewing and editing information regarding computing resources imported by the policy framework from a second several heterogeneous sources. The method displays a third display area for viewing and editing binding rules for binding the policies to the computing resources.

Abstract translation: 一些实施例为管理计算环境中的多个资源的多个策略的应用的策略框架提供了提供用户界面的方法。 该方法显示第一个显示区域，用于查看和编辑策略框架从前几个异构源导入的策略。 该方法显示第二显示区域，用于从第二个多个异构源显示和编辑关于由策略框架导入的计算资源的信息。 该方法显示用于查看和编辑用于将策略绑定到计算资源的绑定规则的第三显示区域。

公开(公告)号：US10263847B2

公开(公告)日：2019-04-16

申请号：US14828460

申请日：2015-08-17

Applicant: VMware, Inc.

Inventor： Gregory T. Burk ,  Lachlan T. Coote

IPC: G06F17/00 ,  H04L12/24 ,  G06F17/30 ,  G06F15/16 ,  H04L12/813

Abstract: Some embodiments provide method for managing a set of computing resources. The method receives information for a set of resources. The information for each resource indicates a set of policies bound to the resource. The policies as bound to the resources are for application by several policy engines. For each of several of the resources, the method determines whether the policies bound to the resource violate a set of policy validation rules. For a subset of the resources for which a violation exists, the method disables at least one of the policies from being applied to the resource by the several policy engines.

公开(公告)号：US10075343B2

公开(公告)日：2018-09-11

申请号：US14828443

申请日：2015-08-17

Applicant: VMware, Inc.

Inventor： Gregory T. Burk ,  Lachlan T. Coote

IPC: H04L12/24 ,  G06F15/16 ,  H04L12/813

CPC classification number: H04L41/0893 ,  G06F15/161 ,  G06F16/2365 ,  G06F17/30598 ,  H04L41/08 ,  H04L41/20 ,  H04L47/20 ,  H04L47/762 ,  H04L47/827

Abstract: Some embodiments provide a method for managing policies for a set of computing resources. The method imports several sets of resource management policy rules from several heterogeneous sources. The method stores each set of imported policy rules as a primitive policy. The primitive policies are (i) applicable to resources in the set of computing resources and (ii) combinable into composite policies that are applicable to resources in the set of computing resources. Composite policies are combinable into additional composite policies with primitive policies and other composite policies.

公开(公告)号：US20170033996A1

公开(公告)日：2017-02-02

申请号：US14828443

申请日：2015-08-17

Applicant: VMware, Inc.

Inventor： Gregory T. Burk ,  Lachlan T. Coote

IPC: H04L12/24

CPC classification number: G06F17/30371 ,  G06F15/161 ,  G06F17/30598 ,  H04L41/08 ,  H04L41/0893 ,  H04L41/20 ,  H04L47/20 ,  H04L47/762 ,  H04L47/827

Abstract: Some embodiments provide a method for managing policies for a set of computing resources. The method imports several sets of resource management policy rules from several heterogeneous sources. The method stores each set of imported policy rules as a primitive policy. The primitive policies are (i) applicable to resources in the set of computing resources and (ii) combinable into composite policies that are applicable to resources in the set of computing resources. Composite policies are combinable into additional composite policies with primitive policies and other composite policies.

Abstract translation: 一些实施例提供了一种用于管理一组计算资源的策略的方法。 该方法从多个异构源中导入了几套资源管理策略规则。 该方法将每组导入的策略规则存储为原始策略。 原始策略是（i）适用于该组计算资源中的资源，（ii）可组合为适用于该组计算资源中的资源的复合策略。 组合策略可与具有原始策略和其他组合策略的其他组合策略组合。

公开(公告)号：US10198467B2

公开(公告)日：2019-02-05

申请号：US14828441

申请日：2015-08-17

Applicant: VMware, Inc.

Inventor： Gregory T. Burk ,  Lachlan T. Coote ,  Yanislav Yankov ,  Alain Dumesny

IPC: G06F15/173 ,  G06F17/30 ,  H04L12/24 ,  G06F15/16 ,  H04L12/813

Abstract: Some embodiments provide, for a policy framework that manages application of a plurality of policies to a plurality of resources in a computing environment, a method for providing a user interface. The method displays a first display area for viewing and editing policies imported by the policy framework from a first several heterogeneous sources. The method displays a second display area for viewing and editing information regarding computing resources imported by the policy framework from a second several heterogeneous sources. The method displays a third display area for viewing and editing binding rules for binding the policies to the computing resources.

公开(公告)号：US20170033997A1

公开(公告)日：2017-02-02

申请号：US14828447

申请日：2015-08-17

Applicant: VMware, Inc.

Inventor： Gregory T. Burk ,  Lachlan T. Coote

IPC: H04L12/24

CPC classification number: H04L41/0893 ,  G06F15/161 ,  G06F16/2365 ,  G06F17/30598 ,  H04L41/08 ,  H04L41/20 ,  H04L47/20 ,  H04L47/762 ,  H04L47/827

Abstract: Some embodiments provide a method for managing a set of computing resources. The method receives several computing resource management policies from a first several heterogeneous sources. The method receives descriptions of several computing resources from a second several heterogeneous sources, wherein the descriptions specify categories for the computing resources. The method uses a set of binding rules to automatically apply the policies to the computing resources. The binding rules specify to which categories of computing resource each policy is applied.

Abstract translation: 一些实施例提供了一种用于管理一组计算资源的方法。 该方法从前几个异构源接收多个计算资源管理策略。 该方法从第二个多个异构源接收几个计算资源的描述，其中描述指定计算资源的类别。 该方法使用一组绑定规则来自动将策略应用于计算资源。 绑定规则指定每个策略应用于哪些类别的计算资源。

公开(公告)号：US20170031970A1

公开(公告)日：2017-02-02

申请号：US14828460

申请日：2015-08-17

Applicant: VMware, Inc.

Inventor： Gregory T. Burk ,  Lachlan T. Coote

IPC: G06F17/30

CPC classification number: H04L41/0893 ,  G06F15/161 ,  G06F17/30371 ,  G06F17/30598 ,  H04L41/08 ,  H04L41/20 ,  H04L47/20 ,  H04L47/762 ,  H04L47/827

Abstract: Some embodiments provide method for managing a set of computing resources. The method receives information for a set of resources. The information for each resource indicates a set of policies bound to the resource. The policies as bound to the resources are for application by several policy engines. For each of several of the resources, the method determines whether the policies bound to the resource violate a set of policy validation rules. For a subset of the resources for which a violation exists, the method disables at least one of the policies from being applied to the resource by the several policy engines.

Abstract translation: 一些实施例提供了用于管理一组计算资源的方法。 该方法接收一组资源的信息。 每个资源的信息表示绑定到资源的一组策略。 与资源相关的策略是由几个策略引擎应用的。 对于几个资源中的每一个，该方法确定绑定到资源的策略是否违反一组策略验证规则。 对于存在冲突的资源的子集，该方法将至少一个策略禁止由多个策略引擎应用于资源。