Isolating applications at the edge

Patent metadata

Field	Value
Publication number	US-12056503-B2
Application number	US-202318352920-A
Country	US
Kind code	B2
Filing date	Jul 14, 2023
Priority date	Mar 2, 2018
Publication date	Aug 6, 2024
Grant date	Aug 6, 2024

Abstract

Disclosed herein are enhancements for deploying application in an edge system of a communication network. In one implementation, a runtime environment identifies a request from a Hypertext Transfer Protocol (HTTP) accelerator service to be processed by an application. In response to the request, the runtime environment may identify an isolation resource to support the request, initiate execution of code for the application, and pass context to the code. Once initiated, the runtime environment may copy data from the artifact to the isolation resource using the context and return control to the HTTP accelerator service upon executing the code.

First claim

What is claimed is:

1. A method comprising:
identifying an application in a first language;
identifying isolation runtime parameters;
compiling the application into an assembly code;
operating the application in a simulated environment to determine whether the application complies with the isolation runtime parameters;
determining that the application does comply with the isolation runtime parameters;
generating a machine language version of the application;
producing an artifact, wherein the artifact comprises the machine language version of the application and metadata; and
deploying the artifact to one or more nodes of an edge network.

2. The method of claim 1 , wherein the metadata comprises global variables used by the application.

3. The method of claim 1 , wherein the metadata comprises configuration requirements of the application.

4. The method of claim 1 , wherein the metadata comprises execution constraints of the application.

5. The method of claim 1 , wherein the machine language version of the application corresponds to a programming language native to the one or mode nodes of the edge network.

6. The method of claim 1 further comprising, in a node of the one or more nodes:
identifying, in an isolation runtime environment for the node, a request from a Hypertext Transfer Protocol (HTTP) accelerator service to be processed by the application;
identifying an isolation resource from a plurality of isolation resources reserved in advance of the request;
initiating execution of the machine-language version of the application and passing context to the machine-language version of the application;
after initiating execution of the machine-language version of the application, copying data from the artifact to the isolation resource using the context; and
returning control to the HTTP accelerator service upon executing the code.

7. The method of claim 6 , wherein the data comprises at least one variable.

8. The method of claim 6 , wherein the isolation resource comprises a memory space, wherein the context comprises an addressing pointer to a memory location in the memory space.

9. An apparatus comprising:
one or more non-transitory computer readable storage media;
a processing system operatively coupled to the one or more non-transitory computer readable storage media; and
program instructions stored on the one or more non-transitory computer readable storage media that, when executed by the processing system, direct the processing system to:
identify an application in a first language;
identify isolation runtime parameters;
compile the application into an assembly code;
operate the application in a simulated environment to determine whether the application complies with the isolation runtime parameters;
determine that the application does comply with the isolation runtime parameters;
generate a machine language version of the application;
produce an artifact, wherein the artifact comprises the machine language version of the application and metadata; and
deploy the artifact to one or more nodes of an edge network.

10. The apparatus of claim 9 , wherein the metadata comprises global variables used by the application.

11. The apparatus of claim 9 , wherein the metadata comprises configuration requirements of the application.

12. The apparatus of claim 9 , wherein the metadata comprises execution constraints of the application.

13. The apparatus of claim 9 , wherein the machine language version of the application corresponds to a programming language native to the one or mode nodes of the edge network.

14. The apparatus of claim 9 , wherein the program instructions stored on the one or more non-transitory computer readable storage media that, when executed by the processing system, further direct the processing system to, in one of the nodes of the edge network in which the artifact is deployed:
identify, in an isolation runtime environment, a request from a Hypertext Transfer Protocol (HTTP) accelerator service to be processed by the application;
identify an isolation resource from a plurality of isolation resources reserved in advance of the request;
initiate execution of the machine-language version of the application and pass context to the machine-language version of the application;
after initiating execution of the machine-language version of the application, copy data from the artifact to the isolation resource using the context; and
return control to the HTTP accelerator service upon executing the code.

15. The apparatus of claim 14 , wherein the data comprises at least one variable.

16. The apparatus of claim 14 , wherein the isolation resource comprises a memory space, wherein the context comprises an addressing pointer to a memory location in the memory space.

17. A method comprising:
identifying an application in a first language;
identifying isolation runtime parameters;
compiling the application into an assembly code;
operating the application in a simulated environment to determine whether the application complies with the isolation runtime parameters;
determining that the application does not comply with the isolation runtime parameters; and
providing a notification to an administrator that the application in its current state cannot be deployed.

18. The method of claim 17 , further comprising:
receiving an updated application from the administrator;
identifying updated isolation runtime parameters;
compiling the updated application into an updated assembly code;
operating the updated application in a simulated environment to determine whether the updated application complies with the isolation runtime parameters;
determining that the updated application does comply with the isolation runtime parameters;
generating a machine language version of the updated application;
producing an artifact, wherein the artifact comprises the machine language version of the updated application and metadata; and
deploying the artifact to one or more nodes of an edge network.

19. The method of claim 18 , wherein the metadata comprises global variables used by the updated application.

20. The method of claim 17 , wherein the isolation runtime parameters correspond to resources available in the one or more nodes of the edge network.

Assignees

• Fastly Inc

Inventors

• Mcmullen Tyler
• Foote Jonathan
• Hickey Patrick
• Cook Jason

Classifications

• G06F8/41

  Compilation · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L67/568

  Storing data temporarily at an intermediate stage, e.g. caching · CPC title

• H04L69/40

  for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection (management of faults, events, alarms or notifications in data switching networks H04L41/06) · CPC title

• G06F8/443

  Optimisation · CPC title