Providing managed services in a cloud environment

Patent metadata

Field	Value
Publication number	US-12238166-B2
Application number	US-202318221147-A
Country	US
Kind code	B2
Filing date	Jul 12, 2023
Priority date	Mar 26, 2021
Publication date	Feb 25, 2025
Grant date	Feb 25, 2025

Abstract

The present disclosure relates to managing services by a managed service provider (MSP) in a cloud based infrastructure. A control plane of the MSP is established in a first tenancy, and a first access plane of the MSP is established in a second tenancy of a cloud environment. The control plane is configured to manage a plurality of services offered by the MSP to a first host machine included in the second tenancy. A first request is transmitted from the control plane to the first access plane, where the first request is forwarded by the first access plane to the first host machine, and corresponds to a service utilized by the first host machine and managed by the control plane of the MSP. In response to the first request being validated, a first state of the first host machine is modified in the second tenancy based on the first request.

First claim

What is claimed is:

1. A method comprising:
establishing a control plane for a managed service provider (MSP) within a first tenancy in a cloud environment, the control plane being configured to manage a plurality of services offered by the MSP to a set of one or more customer tenancies associated with one or more customers of the cloud environment;
establishing, for the MSP, a first access plane in a first customer tenancy associated with a first customer, and a second access plane in a second customer tenancy associated with a second customer;
receiving, by the control plane in the first tenancy, a first request from a first host machine included in the first customer tenancy, the first request requesting a first service provided by the control plane of the MSP, the first request being received by the control plane in the first tenancy via the first access plane;
receiving, by the control plane in the first tenancy, a second request from a second host machine included in the second customer tenancy, the second request requesting a second service provided by the control plane of the MSP, the second request being received by the control plane in the first tenancy via the second access plane;
responsive to the first request being validated, providing the first service by the control plane to the first host machine; and
responsive to the second request being validated, providing the second service by the control plane to the second host machine.

2. The method of claim 1 , further comprising:
validating, by the control plane in the first tenancy, the first request based on a pair of codes associated with the first host machine.

3. The method of claim 1 , wherein the first access plane comprises a first gateway, the first request being transmitted by the first host machine to the control plane in the first tenancy via the first gateway.

4. The method of claim 3 , wherein the first gateway is allocated a global unique IP address.

5. The method of claim 2 , wherein the validating further comprises:
verifying, by the control plane in the first tenancy, the pair of codes associated with the first host machine, the pair of codes including a first code assigned to the first host machine, and a second code assigned to a region of the cloud environment hosting the first customer tenancy.

6. The method of claim 2 , wherein the validating further comprises:
determining, by the control plane in the first tenancy, whether a first end-point for the first service is configured in the first tenancy; and
determining, by the control plane in the first tenancy, whether a second end-point for the first service is configured in the first access plane in the first customer tenancy.

7. The method of claim 1 , further comprising:
responsive to the first request not being validated, logging by the control plane of the MSP, a failure of the first request.

8. The method of claim 1 , wherein providing the first service further comprises modifying, by the control plane of the MSP, a state of the first host machine.

9. The method of claim 8 , wherein modifying the state of the first host machine includes updating, one or more operational parameters of the first host machine.

10. A non-transitory computer readable medium storing specific computer-executable instructions that, when executed by a processor, cause:
establishing a control plane for a managed service provider (MSP) within a first tenancy in a cloud environment, the control plane being configured to manage a plurality of services offered by the MSP to a set of one or more customer tenancies associated with one or more customers of the cloud environment;
establishing, for the MSP, a first access plane in a first customer tenancy associated with a first customer, and a second access plane in a second customer tenancy associated with a second customer;
receiving, by the control plane in the first tenancy, a first request from a first host machine included in the first customer tenancy, the first request requesting a first service provided by the control plane of the MSP, the first request being received by the control plane in the first tenancy via the first access plane;
receiving, by the control plane in the first tenancy, a second request from a second host machine included in the second customer tenancy, the second request requesting a second service provided by the control plane of the MSP, the second request being received by the control plane in the first tenancy via the second access plane;
responsive to the first request being validated, providing the first service by the control plane to the first host machine; and
responsive to the second request being validated, providing the second service by the control plane to the second host machine.

11. The non-transitory computer readable medium of claim 10 , further comprising computer-executable instructions that when executed by the processor, cause:
validating, by the control plane in the first tenancy, the first request based on a pair of codes associated with the first host machine.

12. The non-transitory computer readable medium of claim 10 , wherein the first access plane comprises a first gateway, the first request being transmitted by the first host machine to the control plane in the first tenancy via the first gateway.

13. The non-transitory computer readable medium of claim 12 , wherein the first gateway is allocated a global unique IP address.

14. The non-transitory computer readable medium of claim 11 , further comprising computer-executable instructions that when executed by the processor, cause:
verifying, by the control plane in the first tenancy, the pair of codes associated with the first host machine, the pair of codes including a first code assigned to the first host machine, and a second code assigned to a region of the cloud environment hosting the first customer tenancy.

15. The non-transitory computer readable medium of claim 11 , wherein the validating further comprises:
determining, by the control plane in the first tenancy, whether a first end-point for the first service is configured in the first tenancy; and
determining, by the control plane in the first tenancy, whether a second end-point for the first service is configured in the first access plane in the first customer tenancy.

16. The non-transitory computer readable medium of claim 10 , further comprising computer-executable instructions that when executed by the processor, cause:
responsive to the first request not being validated, logging by the control plane of the MSP, a failure of the first request.

17. The non-transitory computer readable medium of claim 10 , wherein providing the first service further comprises modifying, by the control plane of the MSP, a state of the first host machine.

18. A computing device comprising:
a processor; and
a memory including instructions that, when executed with the processor, cause the computing device to, at least:
establish a control plane for a managed service provider (MSP) within a first tenancy in a cloud environment, the control plane being configured to manage a plurality of services offered by the MSP to a set of one or more customer tenancies associated with one or more customers of the cloud environment;
establish, for the MSP, a first access plane in a first customer tenancy associated with a first customer, and a second access plane in a second customer tenancy associated with a second customer;
receive, by the control plane in the first tenancy, a first request from a first host machine included in the first

Assignees

• Oracle Int Corp

Inventors

• Shah Yomesh Rajen
• Ahuja Girish
• Rothstein Jason Michael
• Crawford Mark Andrew
• Kumar Neeraj
• Ahmed Umair

Classifications

• H04L12/66 Primary

  Arrangements for connecting between networks having differing types of switching systems, e.g. gateways · CPC title

• H04L67/1014

  based on the content of a request · CPC title

• H04L67/1008

  based on parameters of servers, e.g. available memory or workload (monitoring of computer activity G06F11/30) · CPC title

• H04L67/1036 Primary

  Load balancing of requests to servers for services different from user content provisioning, e.g. load balancing across domain name servers · CPC title