Managing bare metal networking in a cloud computing environment

Patent metadata

Field	Value
Publication number	US-11050635-B2
Application number	US-201916267829-A
Country	US
Kind code	B2
Filing date	Feb 5, 2019
Priority date	Feb 5, 2019
Publication date	Jun 29, 2021
Grant date	Jun 29, 2021

Abstract

Embodiments for managing bare metal networking in a cloud computing environment. A network communication module that receives a configuration instruction over a direct network link from an external remote management device on a network endpoint may be initialized.

First claim

The invention claimed is:

1. A method for managing bare metal networking in a cloud computing environment, comprising:
performing a first boot of a host, wherein the first boot initializes a network communication module, associated with a network interface card of the host, that receives a configuration instruction over a direct network link from an external remote management device on a network endpoint; and
responsive to receiving the configuration construction and configuring the network interface card, performing a second boot via a soft reset of the host, wherein subsequent to the second boot the network communication module suppresses any configuration changes associated with the network interface card, and wherein at any time subsequent to the second boot the network interface card is power cycled or reset by an error condition, the host re-initializes the network communication module and re-configures the network interface card by repeating the steps associated with performing the first boot and the second boot.

2. The method of claim 1 , further including receiving the configuration instruction along a serverside network configuration to the direct network link from an additional operating system at the endpoint.

3. The method of claim 1 , further including enabling the network communication module to operate in remote managed mode.

4. The method of claim 1 , further including establishing one or more rules and configuration parameters using the configuration instruction for communicating with the network communication module.

5. The method of claim 4 , further including restricting one or more functions or operation from modifying the one or more rules and configuration parameters using the network communication module.

6. The method of claim 4 , further including automatically routing one or more data packets to the network communication module according to the one or more rules and configuration parameters.

7. The method of claim 1 , further including encrypting one or more data packets sent between the network communication module and the external remote management device according to the configuration instruction.

8. An apparatus of a network interface card having a network communication module, the apparatus comprising one or more processors and memory configured to:
perform a first boot of a host maintaining the network interface card, wherein the first boot initializes the network communication module upon receiving a configuration instruction over a direct network link from an external remote management device on a network endpoint; and
responsive to receiving the configuration construction and configuring the network interface card, perform a second boot via a soft reset of the host, wherein subsequent to the second boot the network communication module suppresses any configuration changes associated with the network interface card, and wherein at any time subsequent to the second boot the network interface card is power cycled or reset by an error condition, the host re-initializes the network communication module and re-configures the network interface card by repeating the steps associated with performing the first boot and the second boot.

9. The apparatus of claim 8 , wherein the one or more processors and memory are further configured to receive the configuration instruction along a serverside network configuration sent to the direct network link from an additional operating system at the endpoint.

10. The apparatus of claim 8 , wherein the one or more processors and memory are further configured to enable the network communication module to operate in remote managed mode from the external remote management device.

11. The apparatus of claim 8 , wherein the one or more processors and memory are further configured to establish one or more rules and configuration parameters using the configuration instruction for communicating with the network communication module.

12. The apparatus of claim 8 , wherein the one or more processors and memory are further configured to restrict one or more functions or operation from modifying the one or more rules and configuration parameters using the network communication module.

13. The apparatus of claim 8 , wherein the one or more processors and memory are further configured to automatically route one or more data packets to the network communication module according to the one or more rules and configuration instruction.

14. The apparatus of claim 8 , wherein the one or more processors and memory are further configured to encrypt one or more data packets sent between the network communication module and the external remote management device according to the configuration instruction.

15. A computer program product for, by a processor, managing bare metal networking in a cloud computing environment, the computer program product comprising a non-transitory computer-readable storage medium having computer-readable program code portions stored therein, the computer-readable program code portions comprising:
an executable portion that performs a first boot of a host, wherein the first boot initializes a network communication module, associated with a network interface card of the host, that receives a configuration instruction over a direct network link from an external remote management device on a network endpoint; and
an executable portion that, responsive to receiving the configuration construction and configuring the network interface card, performs a second boot via a soft reset of the host, wherein subsequent to the second boot the network communication module suppresses any configuration changes associated with the network interface card, and wherein at any time subsequent to the second boot the network interface card is power cycled or reset by an error condition, the host re-initializes the network communication module and re-configures the network interface card by repeating the steps associated with performing the first boot and the second boot.

16. The computer program product of claim 15 , further including an executable portion that receives the configuration instruction along a serverside network configuration to the direct network link from an additional operating system at the endpoint.

17. The computer program product of claim 15 , further including an executable portion that enables the network communication module to operate in remote managed mode.

18. The computer program product of claim 15 , further including an executable portion that establishes one or more rules and configuration parameters using the configuration instruction for communicating with the network communication module.

19. The computer program product of claim 15 , further including an executable portion that:
restricts one or more functions or operation from modifying the one or more rules and configuration parameters using the network communication module; and
automatically routes one or more data packets to the network communication module according to the one or more rules and configuration parameters.

20. The computer program product of claim 15 , further including an executable portion that encrypts one or more data packets sent between the network communication module and the external remote management device according to the configuration instruction.

Assignees

• IBM

Inventors

• Franke Hubertus
• Raisch Christoph
• Silva Marcio Augusto
• Almasi Gheorghe
• Cochran Marc
• Ross Alan

Classifications

• H04L41/40

  using virtualisation of network functions or resources, e.g. SDN or NFV entities · CPC title

• H04L41/0895

  Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements · CPC title

• H04L41/28 Primary

  Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title

• H04L41/0806 Primary

  for initial configuration or provisioning, e.g. plug-and-play · CPC title