Systems and methods for cloning an agent in a distributed environment

Patent metadata

Field	Value
Publication number	US-10462123-B2
Application number	US-201615370569-A
Country	US
Kind code	B2
Filing date	Dec 6, 2016
Priority date	Dec 6, 2016
Publication date	Oct 29, 2019
Grant date	Oct 29, 2019

Abstract

Methods and apparatus to clone an agent in a distributed environment are disclosed. An example apparatus includes a first management agent associated with a first component server in a virtualization environment, the first management agent configured to facilitate communication between the first component server and a virtual appliance, the virtual appliance to authenticate the first management agent based on first credentials including a first identifier and a first certificate. The example apparatus includes a second management agent associated with a second component server in the virtualization environment, the second management agent cloned from the first management agent and including a copy of the first credentials. The example second management agent is to: generate second credentials including a second identifier and a second certificate; authenticate with the virtual appliance based on the first identifier and the first certificate; and delete the copy of the first credentials.

First claim

What is claimed is:

1. An apparatus comprising:
a first management agent associated with a first component server in a virtualization environment, the first management agent configured to facilitate communication between the first component server and a virtual appliance, the virtual appliance to authenticate the first management agent based on first credentials including a first identifier and a first certificate; and
a second management agent associated with a second component server in the virtualization environment, the second management agent cloned from the first management agent and including a copy of the first credentials from the first management agent, wherein the second management agent is to compare the first identifier to a second identifier associated with the second management agent during cloning, and wherein, when the first identifier does not match the second identifier, the second management agent is to trigger registration with the virtual appliance to:
generate second credentials including a third identifier and a second certificate;
authenticate with the virtual appliance based on the first identifier and the first certificate using the copy of the first credentials; and
delete the copy of the first credentials.

2. The apparatus of claim 1 , wherein the second management agent is to re-start after registration with the virtual appliance and wherein, upon re-start, the second identifier matches the third identifier.

3. The apparatus of claim 1 , wherein the second management agent is to operate to generate second credentials, authenticate with the virtual appliance, and delete the copy of the first credentials automatically without user input.

4. The apparatus of claim 1 , further including a plurality of virtual appliances to provide tasks to a plurality of component servers.

5. The apparatus of claim 4 , further including a load balancer to allocate tasks among the plurality of virtual appliances.

6. The apparatus of claim 5 , wherein the load balancer is to mask the plurality of virtual appliances and component servers to appear as a single machine to a user.

7. A tangible computer readable storage medium comprising instructions that, when executed, cause a machine to implement at least:
a first management agent associated with a first component server in a virtualization environment, the first management agent configured to facilitate communication between the first component server and a virtual appliance, the virtual appliance to authenticate the first management agent based on first credentials including a first identifier and a first certificate; and
a second management agent associated with a second component server in the virtualization environment, the second management agent cloned from the first management agent and including a copy of the first credentials from the first management agent, wherein the instructions, when executed, cause the second management agent to compare the first identifier to a second identifier associated with the second management agent during cloning, and wherein, when the first identifier does not match the second identifier, cause the second management agent to trigger registration with the virtual appliance to:
generate second credentials including a third identifier and a second certificate;
authenticate with the virtual appliance based on the first identifier and the first certificate using the copy of the first credentials; and
delete the copy of the first credentials.

8. The storage medium of claim 7 , wherein the instructions, when executed, cause the second management agent to re-start after registration with the virtual appliance and wherein, upon re-start, the second identifier matches the third identifier.

9. The storage medium of claim 7 , wherein the instructions, when executed, cause the second management agent to generate second credentials, authenticate with the virtual appliance, and delete the copy of the first credentials automatically without user input.

10. The storage medium of claim 7 , wherein the instructions, when executed, further cause the machine to implement a plurality of virtual appliances to provide tasks to a plurality of component servers.

11. The storage medium of claim 10 , wherein the instructions, when executed, further cause the machine to implement a load balancer to allocate tasks among the plurality of virtual appliances.

12. The storage medium of claim 11 , wherein the instructions, when executed, cause the load balancer to mask the plurality of virtual appliances and component servers to appear as a single machine to a user.

13. A method comprising:
installing, by executing an instruction with a processor, a first management agent associated with a first component server in a virtualization environment, the first management agent configured to facilitate communication between the first component server and a virtual appliance, the virtual appliance to authenticate the first management agent based on first credentials including a first identifier and a first certificate;
installing, by executing an instruction with the processor, a second management agent associated with a second component server in the virtualization environment, the second management agent cloned from the first management agent and including a copy of the first credentials from the first management agent;
comparing, using the second management agent, the first identifier to a second identifier associated with the second management agent; and
when the first identifier does not match the second identifier:
generating, using the second management agent, second credentials including a third identifier and a second certificate;
authenticating, using the second management agent, with the virtual appliance based on the first identifier and the first certificate using the copy of the first credentials; and
deleting, using the second management agent, the copy of the first credentials.

14. The method of claim 13 , further including re-starting the second management agent after registration with the virtual appliance, wherein, upon re-start, the second identifier matches the third identifier.

15. The method of claim 13 , wherein the generating second credentials, authenticating with the virtual appliance, and deleting the copy of the first credentials occur automatically using the second management agent without user input.

16. The method of claim 13 , further including installing, by executing an instruction with the processor, a load balancer to allocate tasks among a plurality of virtual appliances for a plurality of component servers.

17. The method of claim 16 , further including masking, using the load balancer, the plurality of virtual appliances and component servers to appear as a single machine to a user.

Assignees

• Vmware Inc

Inventors

• Barfonchovski Dimitar Hristov
• Ivanov Dimitar
• Delcheva Anna
• Aronov Evgeny

Classifications

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L41/0806

  for initial configuration or provisioning, e.g. plug-and-play · CPC title

• H04L12/4625

  Single bridge functionality, e.g. connection of two networks over a single bridge · CPC title

• G06F8/60

  Software deployment · CPC title