Generic proxy endpoints using protocol tunnels including life cycle management and examples for distributed cloud native services and applications

Patent metadata

Field	Value
Publication number	US-11736585-B2
Application number	US-202117187220-A
Country	US
Kind code	B2
Filing date	Feb 26, 2021
Priority date	Feb 26, 2021
Publication date	Aug 22, 2023
Grant date	Aug 22, 2023

Abstract

Applications or Agents or Administrators can communicate with services and/or applications at hosted and/or remote locations via proxy service or application endpoints. Proxy Services described here may, in examples, manage the life cycle of communication channels, or tunnels to ensure guaranteed access to hosted services and applications regardless of their location. Examples of proxy services may create one or more tunnels, each in accordance with a particular tunneling protocol. The tunneling protocol used may be selected in accordance with a request, including information parameters—in this manner, proxy services described herein may be quite flexible in supporting tunneling connections to multiple and variable types of services and tunneling protocols.

First claim

What is claimed is:

1. At least one non-transitory computer-readable storage medium including instructions that when executed by a computing node in a computing system, cause the computing node to:
receive, by a proxy service of a platform-as-a-service (PaaS) management portal, an Application Programming Interface (API) request to connect to an application, a service, or combinations thereof, the API request comprising a payload including information parameters;
in response to receiving the API request, and based at least on the information parameters, determine hosted locations, including a hosted location of the application, a hosted location of the service, or combinations thereof;
in response to determining the hosted location of the application, the hosted location of the service, or combinations thereof, and based at least on the information parameters, select a tunnel connection from a plurality of tunnel connections;
generate, by the proxy service, the selected tunnel connection;
generate, at the PaaS management portal and by the proxy service, an endpoint, wherein the endpoint, including a proxy service endpoint, a proxy application endpoint, or combinations thereof, facilitates a connection between the PaaS management portal and the hosted location of the application, the hosted location of the service, or combinations thereof; and
in response to determining that the connection between the PaaS management portal and the hosted location of the application, the hosted location of the service, or combinations thereof malfunctions, re-establish, by the proxy service of the PaaS management portal, the connection facilitated by the endpoint.

2. The at least one non-transitory computer-readable storage medium of claim 1 , wherein the information parameters include an application name, an application type, a service name, a service type, or combinations thereof.

3. The at least one non-transitory computer-readable storage medium of claim 1 , wherein the hosted locations are hosted behind a firewall.

4. The at least one non-transitory computer-readable storage medium of claim 1 , wherein the selected tunnel connection enables the proxy service to route the API request using a requested tunneling protocol from the proxy service endpoint or the proxy application endpoint hosted by the PaaS management portal to the hosted location of the application, the hosted location of the service, or combinations thereof.

5. The at least one non-transitory computer-readable storage medium of claim 1 , wherein the PaaS management portal is a centralized management plane (MP) for clusters and cloud native services.

6. The at least one non-transitory computer-readable storage medium of claim 5 , wherein the centralized MP is dynamically controlled by the endpoint, and wherein the endpoint is a public endpoint.

7. The at least one non-transitory computer-readable storage medium of claim 1 , wherein the hosted location of the application, the hosted location of the service, or combinations thereof are located in a private data center not accessible from a public outside network.

8. The at least one non-transitory computer-readable storage medium of claim 1 , wherein the endpoint is secure, is multi-tenant, includes access control support, is protected by at least one of a plurality of authentication mechanisms, or is a combination thereof.

9. The at least one non-transitory computer-readable storage medium of claim 1 , the computing node further caused to:
receive, at the proxy service of the PaaS management portal and from an agent located at the hosted location of the application, the hosted location of the service, or combinations thereof, at an HTTPS connection of a plurality of HTTPS connections, the HTTPS connection directed to the endpoint.

10. The at least one non-transitory computer-readable storage medium of claim 1 , the computing node further caused to:
determine, by the proxy service of the PaaS management portal, a time interval of access for the connection between the PaaS management portal and the hosted location of the application, the hosted location of the service, or combinations thereof.

11. The at least one non-transitory computer-readable storage medium of claim 1 , the computing node further caused to:
in response to receiving an automated expiry API request by the proxy service of the PaaS management portal, removing the endpoint that facilitates the connection between the PaaS management portal and the hosted location of the application, the hosted location of the service, or combinations thereof.

12. At least one non-transitory computer-readable storage medium including instructions that when executed by a computing node in a computing system, cause the computing node to:
receive, by a proxy service of a platform-as-a-service (PaaS) management portal, an Application Programming Interface (API) request to connect to an application, a service, or combinations thereof, the API request comprising a payload including information parameters;
in response to receiving the API request, and based at least on the information parameters, determine hosted locations, including a hosted location of the application, a hosted location of the service, or combinations thereof;
in response to determining the hosted location of the application, the hosted location of the service, or combinations thereof, and based at least on the information parameters, select a tunnel connection from a plurality of tunnel connections;
generate, by the proxy service, the selected tunnel connection;
generate, at the PaaS management portal and by the proxy service, an endpoint, wherein the endpoint, including a proxy service endpoint, a proxy application endpoint, or combinations thereof, facilitates a connection between the PaaS management portal and the hosted location of the application, the hosted location of the service, or combinations thereof,
wherein the selected tunnel connection enables the proxy service to route the API request using a tunneling protocol from the proxy service endpoint or the proxy application endpoint hosted by the PaaS management portal to the hosted location of the application or the hosted location of the service; and
dynamically add, by the proxy service of the PaaS management portal, routing rules to direct information traffic between the proxy service endpoint or the proxy application endpoint hosted by the PaaS management portal and the hosted location of the application, the hosted location of the service, or combinations thereof, wherein the routing rules include Ingress rules.

13. At least one non-transitory computer-readable storage medium including instructions that when executed by a computing node in a computing system, cause the computing node to:
receive, by a proxy service of a platform-as-a-service (PaaS) management portal, an Application Programming Interface (API) request to connect to an application, a service, or combinations thereof, the API request comprising a payload including information parameters;
in response to receiving the API request, and based at least on the information parameters, determine hosted locations, including a hosted location of the application, a hosted location of the service, or combinations thereof;
in response to determining the hosted location of the application, the hosted location of the service, or combinations thereof, and based at least on the information parameters, select a tunnel connection from a plurality of tunnel connections;
generate, by the proxy service, the selected tunnel connection;
generate, at the PaaS management portal and by the proxy service, an endpoint, wherein the endpoi

Assignees

• Nutanix Inc

Inventors

• Perng Shyan-Ming
• Joshi Akhilesh
• Advani Anuraag Deepak

Classifications

• H04L67/563 Primary

  Data redirection of data network streams · CPC title

• H04L12/4633 Primary

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L67/133

  Protocols for remote procedure calls [RPC] · CPC title

• H04L67/2866

  Architectures; Arrangements · CPC title

• H04L67/567

  Integrating service provisioning from a plurality of service providers · CPC title