Remote network management infrastructure for cloud-based deployments

Patent metadata

Field	Value
Publication number	US-11838374-B2
Application number	US-202217651018-A
Country	US
Kind code	B2
Filing date	Feb 14, 2022
Priority date	Feb 12, 2021
Publication date	Dec 5, 2023
Grant date	Dec 5, 2023

Abstract

A software architecture within a public cloud network may include units of: (i) a plurality of computational instances respectively related to managed networks, (ii) a plurality of servers configurable as load simulators, (iii) administrative components configured to deploy and update the software architecture, and (iv) shared infrastructure services, wherein the units of the software architecture are implemented on virtual machines of the public cloud network and are connected to but logically isolated from one another by way of different access controls or policies. A provider network, coupled to the software architecture by way of network gateways within the shared infrastructure services, may be configured to deliver the configuration, software packages, and database schema to the infrastructure-as-code platform.

First claim

What is claimed is:

1. A system comprising:
a software architecture within a public cloud network, the software architecture including units of: (i) a plurality of computational instances respectively related to managed networks, (ii) a plurality of servers configurable as load simulators, (iii) administrative components configured to deploy and update the software architecture, and (iv) shared infrastructure services,
wherein the units of the software architecture are implemented on virtual machines of the public cloud network and are connected to but logically isolated from one another by way of different access controls or policies,
wherein the plurality of computational instances are configured to respectively provide operational and administrative services to the managed networks,
wherein the load simulators when configured mimic an arrangement of a particular computational instance from the plurality of computational instances and replay network traffic captured from the particular computational instance,
wherein the administrative components include an infrastructure-as-code platform containing a template representation of a configuration, software packages, and database schema of the software architecture according to which the virtual machines are configured, and
wherein the shared infrastructure services include network gateways connecting the software architecture to one or more other networks; and

a provider network, coupled to the software architecture by way of the network gateways, and configured to deliver the configuration, software packages, and database schema to the infrastructure-as-code platform.

2. The system of claim 1 , further comprising:
a network tap coupled to a connection between the plurality of computational instances and the shared infrastructure services, wherein the network tap is configured to capture the network traffic from the particular computational instance and provide it to the load simulators.

3. The system of claim 1 , further comprising:
unstructured data storage configured to receive streamed backups of data from the plurality of computational instances and to provide the backups of the data to the load simulators.

4. The system of claim 1 , wherein the units of the software architecture are logically isolated from one another by each having different respective userids and security credentials through which they are accessed.

5. The system of claim 1 , wherein the software architecture is deployed within a first geographical region of the public cloud network, wherein the software architecture is paired to a second software architecture deployed within a second geographical region of the public cloud network, wherein the second software architecture includes a second plurality of computational instances corresponding to the plurality of computational instances, a second plurality of servers corresponding to the plurality of servers, second administrative components corresponding to the administrative components, and second shared infrastructure services corresponding to the shared infrastructure services.

6. The system of claim 5 , wherein load is balanced between the software architecture and the second software architecture so that (i) approximately 50 percent of the load is served by each of the software architecture and the second software architecture, (ii) each of the managed networks has a corresponding computational instance in exactly one of the software architecture or the second software architecture, and (iii) functionality of the software architecture can fail over to the second software architecture and vice versa.

7. The system of claim 1 , wherein the software architecture is an isolated full-stack deployment, wherein the shared infrastructure services also connect to one or more private networks, wherein the shared infrastructure services also include a first set of load balancers configured to balance load amongst servers providing the shared infrastructure services, wherein the shared infrastructure services also include a second set of load balancers configured to balance network traffic inbound from the one or more private networks across servers within a corresponding computational instance, wherein the shared infrastructure services also include a firewall subnet configured to filter the network traffic inbound from the one or more private networks based on predetermined security policies, and wherein the shared infrastructure services also include a virtual private network subnet configured to allow remote access to the software architecture from the one or more private networks.

8. The system of claim 7 , wherein the shared infrastructure services also include one or more quarantine servers that are configured to receive the configuration, software packages, and database schema from the provider network, store the configuration, software packages, and database schema for manual approval, and provide the configuration, software packages, and database schema to the administrative components after receipt of the manual approval.

9. The system of claim 1 , wherein the software architecture is a full-stack deployment, wherein the shared infrastructure services also connect to a public Internet, wherein the administrative components connect to the provider network, wherein external-facing services of the software architecture and internal-facing services for multiple regions of the software architecture are deployed within the provider network, and wherein internal-facing services for a single region of the software architecture are deployed within the shared infrastructure services.

10. The system of claim 1 , wherein the software architecture is a hybrid deployment, wherein the shared infrastructure services connect to a provider data center of the provider network that is in a common geographical region with the software architecture, wherein the shared infrastructure services and the administrative components access a public Internet by way of the provider data center.

11. A computer-implemented method comprising:
automatically deploying, within a public cloud network, a plurality of computational instances respectively related to managed networks as part of a software architecture, wherein the plurality of computational instances are configured to respectively provide operational and administrative services to the managed networks, and wherein the software architecture is implemented on virtual machines of the public cloud network that are connected to but logically isolated from one another by way of different access controls or policies;
automatically deploying, within the public cloud network, a plurality of servers configurable as load simulators, wherein the load simulators when configured mimic an arrangement of a particular computational instance from the plurality of computational instances and replay network traffic captured from the particular computational instance;
automatically deploying, within the public cloud network, administrative components configured to deploy and update the software architecture, wherein the administrative components include an infrastructure-as-code platform containing a template representation of a configuration, software packages, and database schema of the software architecture according to which the virtual machines are arranged; and
automatically deploying, within the public cloud network, shared infrastructure services, wherein the shared infrastructure services include network gateways connecting the software architecture to a provider network, and wherein the provider network is coupled to the software architecture by way of the network gateways and configured to deliver the configura

Assignees

• Servicenow Inc

Inventors

• Schuller William Joseph
• Mcquaid Jude Ian
• Chan Antony

Classifications

• H04L67/34 Primary

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title

• H04L67/10 Primary

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L67/025

  for remote control or remote monitoring of applications · CPC title

• H04L67/1031

  Controlling of the operation of servers by a load balancer, e.g. adding or removing servers that serve requests · CPC title

• H04L67/1095

  Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes · CPC title