Rules driven software deployment agent

Patent metadata

Field	Value
Publication number	US-11777802-B2
Application number	US-202117457602-A
Country	US
Kind code	B2
Filing date	Dec 3, 2021
Priority date	Jun 23, 2019
Publication date	Oct 3, 2023
Grant date	Oct 3, 2023

Abstract

The disclosed embodiments provide for rules-based deployment of software installations. In some aspects, operational parameters for a computer system are monitored over time to generate a historical database of values for the operational parameters. The computer system may include multiple instances of a software installation. A portion of the multiple instances is updated with a new version of software. The operational parameters are then monitored to quantify whether the new version results in an improvement or degradation of performance of the computer system. The improvement or degradation is based on comparing values of the operational parameters after deployment to their historical values. Depending on the evaluation of the operational parameters after the installation, the installation may be rolled back if a degradation is indicated. Otherwise, the new software version may be propagated to additional installation instances.

First claim

We claim:

1. A method, comprising:
monitoring, by a first computing device of a network executing an agent module, the first computing device configured to communicate with a second computing device of a network management server outside of the network via a restricted access-controlled network path, one or more operational parameters of a first subset of network devices after deployment of data including one or more instructions to the first subset of network devices; and
in response to determining, by the first computing device executing the agent module, that a criterion indicative of a change in performance of the network for at least one of the one or more operational parameters is met, controlling, by the first computing device executing the agent module and based on the change in performance of the network, at least one of:
a roll back of the data including one or more instructions from the first subset of network devices, and
deployment of the data including one or more instructions to a second subset of network devices.

2. The method of claim 1 , wherein the restricted access-controlled network path is controlled by a firewall, and the firewall is configured to block access to the first computing device by the network management server.

3. The method of claim 2 , wherein the firewall restricts access to the network, and wherein the network management server is prevented from monitoring the one or more operational parameters by the firewall.

4. The method of claim 1 , wherein the criterion is based on a deviation from system performance when compared to historical norms.

5. The method of claim 4 , wherein a negative deviation from system performance when compared to historical norms indicates that the data including the one or more instructions deployed to the first subset of network devices is adversely affecting the performance of the network.

6. The method of claim 4 , wherein a positive deviation from system performance when compared to historical norms indicates that the data including the one or more instructions deployed to the first subset of network devices results in an improvement in the performance of the network.

7. The method of claim 4 , wherein the historical norms include one or more of a historical average, a historical median, or a historical normalized value for each of the one or more operational parameters.

8. The method of claim 1 , wherein the one or more operational parameters include one or more of CPU utilization, memory utilization, I/O channel utilization, or network utilization.

9. The method of claim 1 , wherein the one or more operational parameters include one or more of a latency, a throughput, or a location accuracy jitter.

10. The method of claim 1 , wherein the criterion defines a relationship between a contemporaneous measurement of the one or more operational parameters and a historical measurement of the one or more operational parameters.

11. A system for managing a network, comprising:
hardware processing circuitry; and
one or more memories storing instructions that when executed by the hardware processing circuitry configure the hardware processing circuitry to:
communicate with a computing device of a network management server outside of the network via a restricted access-controlled network path;
monitor one or more operational parameters of a first subset of network devices after deployment of data including one or more instructions to the first subset of network devices;
determine that a criterion indicative of a change in performance of the network for at least one of the one or more operational parameters is met; and
control, based on the change in performance of the network, at least one of:
a roll back of the data including one or more instructions from the first subset of network devices, and
deployment of the data including one or more instructions to a second subset of network devices.

12. The system of claim 11 , wherein the restricted access-controlled network path is controlled by a firewall, and the firewall is configured to block access to the hardware processing circuitry by the network management server.

13. The system of claim 12 , wherein the firewall restricts access to the network, and wherein the network management server is prevented from monitoring the one or more operational parameters by the firewall.

14. The system of claim 11 , wherein the one or more operational parameters include one or more of CPU utilization, memory utilization, I/O channel utilization, or network utilization.

15. The system of claim 11 , wherein the one or more operational parameters include one or more of a latency, a throughput, or a location accuracy jitter.

16. The system of claim 11 , wherein the criterion defines a relationship between a contemporaneous measurement of the one or more operational parameters and a historical measurement of the one or more operational parameters.

17. A non-transitory computer readable storage medium comprising instructions that when executed configure hardware processing circuitry to:
monitor, by a first computing device of a network executing an agent module, the first computing device configured to communicate with a second computing device of a network management server outside of the network via a restricted access-controlled network path, one or more operational parameters of a first subset of network devices after deployment of data including one or more instructions to the first subset of network devices; and
in response to determining, by the first computing device executing the agent module, that a criterion indicative of a change in performance of the network for at least one of the one or more operational parameters is met, control, by the first computing device executing the agent module and based on the change in performance of the network, at least one of:
a roll back of the data including one or more instructions from the first subset of network devices, and
deployment of the data including one or more instructions to a second subset of network devices.

18. The non-transitory computer readable storage medium of claim 17 , wherein the restricted access-controlled network path is controlled by a firewall, and the firewall is configured to block access to the first computing device by the network management server.

19. The non-transitory computer readable storage medium of claim 18 , wherein the firewall restricts access to the network, and wherein the network management server is prevented from monitoring the one or more operational parameters by the firewall.

20. The non-transitory computer readable storage medium of claim 17 , wherein the criterion defines a relationship between a contemporaneous measurement of the one or more operational parameters and a historical measurement of the one or more operational parameters.

Assignees

• Juniper Networks Inc

Inventors

• Sarood Osman
• Frei Randall
• Friday Robert J
• Luoh Keh-Ming

Classifications

• H04L43/08

  Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters · CPC title

• H04L43/0817 Primary

  by checking functioning · CPC title

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title

• H04L41/0894

  Policy-based network configuration management · CPC title

• H04L41/082 Primary

  the condition being updates or upgrades of network functionality · CPC title