Rules driven software deployment agent

Patent metadata

Field	Value
Publication number	US-11206185-B2
Application number	US-201916728464-A
Country	US
Kind code	B2
Filing date	Dec 27, 2019
Priority date	Jun 23, 2019
Publication date	Dec 21, 2021
Grant date	Dec 21, 2021

Abstract

The disclosed embodiments provide for rules-based deployment of software installations. In some aspects, operational parameters for a computer system are monitored over time to generate a historical database of values for the operational parameters. The computer system may include multiple instances of a software installation. A portion of the multiple instances is updated with a new version of software. The operational parameters are then monitored to quantify whether the new version results in an improvement or degradation of performance of the computer system. The improvement or degradation is based on comparing values of the operational parameters after deployment to their historical values. Depending on the evaluation of the operational parameters after the installation, the installation may be rolled back if a degradation is indicated. Otherwise, the new software version may be propagated to additional installation instances.

First claim

We claim:

1. A method, comprising:
receiving, by a first computing device of an enterprise network executing a network management agent, the first computing device configured to communicate with a second computing device of a network management server outside of the enterprise network via a restricted access-controlled network path, a rule identifying one or more operational parameters to be monitored by the network management agent and, for each of the one or more operational parameters, a criterion indicative of an improvement in performance of the enterprise network;
installing software on a first subset of network devices on the enterprise network;
monitoring, by the first computing device, the one or more operational parameters of the first subset of network devices after installation of the software;
in response to determining, by the first computing device, that the criterion for at least one of the one or more operational parameters is met, installing the software on a second subset of network devices on the enterprise network;
and
providing, by the first computing device to the second computing device, via the restricted access-controlled network path, an indication of the installation of the software on the first subset of network devices or on the second subset of network devices.

2. The method of claim 1 , further comprising receiving, from the second computing device, via the restricted access-controlled network path, a copy of the software; and staging the copy of the software at the first computing device, wherein installing software further comprises installing the software to the first subset of network devices based on the staged copy in response to the criterion for at least one of the operational parameters being met.

3. The method of claim 2 , wherein the restricted access-controlled network path is controlled by a firewall, and the firewall is configured to block access to the first subset of network devices by the second computing device.

4. The method of claim 2 , wherein a firewall restricts access to the enterprise network, and wherein the second computing device is prevented from monitoring the one or more operational parameters of the enterprise network by the firewall.

5. The method of claim 4 , wherein the firewall is further configured to block access to the monitored one or more operational parameters by the second computing device.

6. The method of claim 1 , wherein the one or more operational parameters include one or more of CPU utilization, memory utilization, I/O channel utilization, or network utilization.

7. The method of claim 1 , wherein the criterion defines a relationship between a contemporaneous measurement of the operational parameter and a historical measurement of the operational parameter.

8. The method of claim 7 , further comprising, for each of the one or more operational parameters:
periodically monitoring the operational parameter;
storing indications of the operational parameter based on the periodic monitoring; and
generating the historical measurement of the operational parameter based on a plurality of stored indications of the operational parameter.

9. The method of claim 1 , wherein the criterion indicative of an improvement in performance of the enterprise network is a first criterion, the rule further defining a second criterion indicative of a degradation in performance of the enterprise network, the method further comprising:
in response to determining, by the first computing device, that the second criterion for at least one of the one or more operational parameters is met, rolling back installation of the software on the first subset of network devices.

10. A system, comprising:
hardware processing circuitry including a first computing device of an enterprise network executing a network management agent, the first computing device configured to communicate with a second computing device of a network management server outside of the enterprise network via a restricted access-controlled network path;
one or more hardware memories storing instructions that configure the hardware processing circuitry to perform operations comprising:
receiving, by the first computing device, via the restricted access-controlled network path, a rule identifying one or more operational parameters to be monitored by the network management agent, and for each of the one or more operational parameters, a criterion indicative of an improvement in performance of the enterprise network;
installing software on a first subset of network devices on the enterprise network;
monitoring, by the first computing device, the one or more operational parameters of the first subset of network devices after installation of the software;
in response to determining, by the first computing device, that the criterion for at least one of the one or more operational parameters is met, installing the software on a second subset of network devices on the enterprise network;
and
providing, by the first computing device to the second computing device, via the restricted access-controlled network path, an indication of the installing of the software on the first subset of network devices or the second subset of network devices.

11. The system of claim 10 , the operations further comprising:
receiving, from the second computing device, via the restricted access-controlled network path, a copy of the software;
staging the copy of the software at the first computing device; and
installing the software to the first subset of network devices based on the staged copy.

12. The system of claim 11 , wherein the restricted access-controlled network path is controlled by a firewall, and the firewall is configured to block access to the first subset of network devices by the second computing device.

13. The system of claim 11 , wherein a firewall restricts access to the enterprise network, and the first computing device monitors the one or more operational parameters of the enterprise network, wherein the second computing device is prevented from monitoring the one or more operational parameters by the firewall.

14. The system of claim 13 , wherein the firewall is further configured to block access to the monitored one or more operational parameters by the second computing device.

15. The system of claim 10 , wherein the one or more operational parameters include one or more of CPU utilization, memory utilization, I/O channel utilization, or network utilization.

16. The system of claim 10 , wherein, for each of the one or more operational parameters, the criterion defines a relationship between a contemporaneous measurement of the operational parameter and a historical measurement of the operational parameter.

17. The system of claim 16 , the operations further comprising, for each of the one or more operational parameters:
periodically monitoring the operational parameter;
storing indications of the operational parameter based on the periodic monitoring; and
generating the historical measurement of the operational parameter based on a plurality of stored indications of the operational parameter.

18. A non-transitory computer readable storage medium comprising instructions that when executed configure hardware processing circuitry to perform operations comprising:
receiving, by a first computing device of an enterprise network executing a network management agent, the first computing device configured to communicate with a second computing device of a network management server outside of the enterprise network via a restricted acce

Assignees

• Juniper Networks Inc

Inventors

• Sarood Osman
• Frei Randall Wayne
• Friday Robert J
• Luoh Keh-Ming

Classifications

• H04L43/08

  Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters · CPC title

• H04L43/0817 Primary

  by checking functioning · CPC title

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title

• H04L41/0894

  Policy-based network configuration management · CPC title

• H04L41/082 Primary

  the condition being updates or upgrades of network functionality · CPC title