Automatically and remotely on-board services delivery platform computing nodes

Patent metadata

Field	Value
Publication number	US-10601956-B2
Application number	US-201816177507-A
Country	US
Kind code	B2
Filing date	Nov 1, 2018
Priority date	Jun 4, 2018
Publication date	Mar 24, 2020
Grant date	Mar 24, 2020

Abstract

Presented herein are methods associated with a Services Delivery Platform (SDP) architecture for a distributed application building blocks, such as microservices, deployment-agnostic. The system includes a central compute node and numerous remote compute nodes. Techniques are provided to “onboard” and assimilate the capabilities of remote compute nodes so that they are an integrated part of the SDP system and can be accessed and used in connection with one or more services provided by the SDP system.

First claim

What is claimed is:

1. A method performed at a central compute node in a distributed computing system that includes a plurality of remote compute nodes whose computing resources and software functions are made available in a platform agnostic platform agnostic manner to users of the distributed computing system, the method comprising:
obtaining from a candidate remote compute node a request to be onboarded to the distributed computing system, the request including information about computing capabilities and configurations of the candidate remote compute node;
generating unique security material for the candidate remote compute node to securely communicate with the central compute node;
generating an install package that includes components to establish data plane and control plane communications between the candidate remote compute node and the central compute node;
downloading the install package to the candidate remote compute node;
initiating installation of the install package at the candidate remote compute node;
obtaining from the candidate remote compute node, an installation validation message indicating that the install package has been successfully installed on the candidate remote compute node; and
updating a status of the candidate remote compute node to an online status as a functional remote compute node in the distributed computing system.

2. The method of claim 1 , wherein the unique security material includes one or more encryption keys and a certificate associated with an identifier of the candidate remote compute node.

3. The method of claim 2 , and further comprising adding the identifier to an access control list for mapping to requests from the candidate remote compute node.

4. The method of claim 1 , wherein generating unique security material comprises configuring an open virtualization appliance (OVA) image residing on the candidate remote compute node with on-boarding components, security keys and a certificate to enable the candidate remote compute node to communicate with the central compute node.

5. The method of claim 1 , wherein the install package includes information pertaining to one or more of: data and control planes for streaming data between the candidate remote compute node and the central compute node.

6. The method of claim 5 , wherein the install package further includes information pertaining to: secure two-way communication with the central compute node, life-cycle-management capabilities for microservices, and installation and orchestration of microservices.

7. The method of claim 1 , wherein obtaining the request, generating unique security material, generating an install package, downloading the install package, initiating installation, obtaining the installation validation message and updating the status are performed for each of a plurality of candidate remote compute nodes to enable each of the plurality of candidate remote compute nodes to be a functional part of the distributed computing system.

8. An apparatus comprising:
a communication interface configured to enable network communications;
a memory configured to store instructions to be executed for performing one or more operations; and
at least one processor coupled to the communication interface and the memory, wherein the processor is configured to execute the instructions to perform operations on behalf of a central compute node in a distributed computing system that includes a plurality of remote compute nodes whose computing resources and software functions are made available in a platform agnostic manner to users of the distributed computing system, the operations including:
obtaining from a candidate remote compute node a request to be onboarded to the distributed computing system, the request including information about computing capabilities and configurations of the candidate remote compute node;
generating unique security material for the candidate remote compute node to securely communicate with the central compute node;
generating an install package that includes components to establish data plane and control plane communications between the candidate remote compute node and the central compute node;
downloading the install package to the candidate remote compute node;
initiating installation of the install package at the candidate remote compute node;
obtaining from the candidate remote compute node, an installation validation message indicating that the install package has been successfully installed on the candidate remote compute node; and
updating a status of the candidate remote compute node to an online status as a functional remote compute node in the distributed computing system.

9. The apparatus of claim 8 , wherein the unique security material includes one or more encryption keys and a certificate associated with an identifier of the candidate remote compute node.

10. The apparatus of claim 9 , wherein the operations further include adding the identifier to an access control list for mapping to requests from the candidate remote compute node.

11. The apparatus of claim 8 , wherein the processor is configured to generate unique security material by configuring an open virtualization appliance (OVA) image residing on the candidate remote compute node with onboarding components, security keys and a certificate to enable the candidate remote compute node to communicate with the central compute node.

12. The apparatus of claim 8 , wherein the install package includes information pertaining to one or more of: data and control planes for streaming data between the candidate remote compute node and the central compute node.

13. The apparatus of claim 12 , wherein the install package further includes information pertaining to: secure two-way communication with the central compute node, life-cycle-management capabilities for microservices, and installation and orchestration of microservices.

14. One or more non-transitory computer readable storage media encoded with software comprising computer executable instructions and when the software is executed at a central compute node in a distributed computing system that includes a plurality of remote compute nodes whose computing resources and software functions are made available in a platform agnostic manner to users of the distributed computing system, the central compute node is operable to perform operations including:
obtaining from a candidate remote compute node a request to be onboarded to the distributed computing system, the request including information about computing capabilities and configurations of the candidate remote compute node;
generating unique security material for the candidate remote compute node to securely communicate with the central compute node;
generating an install package that includes components to establish data plane and control plane communications between the candidate remote compute node and the central compute node;
downloading the install package to the candidate remote compute node;
initiating installation of the install package at the candidate remote compute node;
obtaining from the candidate remote compute node, an installation validation message indicating that the install package has been successfully installed on the candidate remote compute node; and
updating a status of the candidate remote compute node to an online status as a functional remote compute node in the distributed computing system.

15. The non-transitory computer readable storage media of claim 14 , wherein the unique security material includes one or more encryption keys and a certificate associated with an identifier

Assignees

• Cisco Tech Inc

Inventors

• Nucci Antonio
• Khattab Ahmed
• Pignataro Carlos M
• Plane Richard M
• Chen Duen-Uei D
• Bekti Samudra H

Classifications

• H04L67/34 Primary

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title

• H04L63/0435

  wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06) · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/062 Primary

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title

• G06F8/61

  Installation · CPC title