公开(公告)号：US20200036758A1

公开(公告)日：2020-01-30

申请号：US16529804

申请日：2019-08-02

Applicant: VMware, Inc.

Inventor： Claude HAMOU ,  Roman BROUK ,  Steven MCALLISTER

IPC: H04L29/06 ,  H04L29/08 ,  H04L12/24 ,  G06F9/455

Abstract: Example methods are provided for an entity to perform micro-segmentation in a virtualized computing environment that includes multiple hosts. The method may comprise obtaining application implementation information associated with one or more applications implemented by multiple virtualized computing instances, each of the multiple virtualized computing instances being supported by one of the multiple hosts. The method may further comprise detecting micro-segments by clustering the multiple virtualized computing instances based on the application implementation information, and determining security policies for respective detected micro-segments. Each of the detected micro-segments may include one or more of the multiple virtualized computing instances that have more similarity compared to those in a different detected micro-segment.

公开(公告)号：US20240004684A1

公开(公告)日：2024-01-04

申请号：US17853828

申请日：2022-06-29

Applicant: VMware, Inc.

Inventor： Prateek GUPTA ,  John E. BREZAK ,  Fnu YASHU ,  Alex RANKOV ,  Steven MCALLISTER ,  Karthik Sreenivasa MURTHY ,  George DAVELMAN

IPC: G06F9/455 ,  G06F9/54

CPC classification number: G06F9/45558 ,  G06F9/546 ,  G06F2009/45587 ,  G06F2009/4557

Abstract: A method of exchanging messages between a software-defined data center (SDDC) and a cloud platform through a plurality of agents deployed on an agent platform appliance that is connected to a management network of the SDDC, to enable the cloud platform to deliver cloud services to the SDDC, includes the steps of: acquiring an access token from a first agent of the plurality of agents; communicating with a message broker cloud service using the access token to exchange messages with the message broker cloud service, the exchanged messages including a first message from one of the cloud services to one or more of the plurality of agents and a second message from a second agent of the plurality of agents to one of the cloud services; and delivering the first message to the one or more agents.

公开(公告)号：US20170374106A1

公开(公告)日：2017-12-28

申请号：US15629741

申请日：2017-06-22

Applicant: VMware, Inc.

Inventor： Claude HAMOU ,  Roman BROUK ,  Steven MCALLISTER

IPC: H04L29/06 ,  H04L12/46 ,  H04L29/08 ,  H04L12/24 ,  G06F9/455

CPC classification number: H04L63/205 ,  G06F9/45533 ,  G06F9/45558 ,  G06F2009/45587 ,  G06F2009/45595 ,  H04L12/4641 ,  H04L41/0803 ,  H04L63/0263 ,  H04L63/1408 ,  H04L63/1441 ,  H04L67/10

Abstract: Example methods are provided for an entity to perform micro-segmentation in a virtualized computing environment that includes multiple hosts. The method may comprise obtaining application implementation information associated with one or more applications implemented by multiple virtualized computing instances, each of the multiple virtualized computing instances being supported by one of the multiple hosts. The method may further comprise detecting micro-segments by clustering the multiple virtualized computing instances based on the application implementation information, and determining security policies for respective detected micro-segments. Each of the detected micro-segments may include one or more of the multiple virtualized computing instances that have more similarity compared to those in a different detected micro-segment.