Techniques for utilizing multiple network interfaces for a cloud shell

Patent metadata

Field	Value
Publication number	US-12494946-B2
Application number	US-202318313839-A
Country	US
Kind code	B2
Filing date	May 8, 2023
Priority date	Aug 14, 2020
Publication date	Dec 9, 2025
Grant date	Dec 9, 2025

Abstract

Techniques for utilizing multiple network interfaces for a cloud shell are provided. The techniques include receiving, by a computer system, a command to execute an operation by the computer system, the command being received from a router via a primary virtual network interface card (vNIC), the primary vNIC being configured to permit incoming traffic. The computer system may execute the operation, generating an output of the operation. The techniques also include transmitting, by the computer system, a message comprising the output of the operation to a shell subnet via a secondary vNIC, the secondary vNIC being configured to permit outgoing traffic from the computer system to the shell subnet.

First claim

What is claimed is:

1 . A method, comprising:
receiving, by a virtual machine instance of a first virtual cloud network, a command to execute an operation on a cloud resource of the first virtual cloud network, the command being received from a router via a primary virtual network interface card configured to permit incoming traffic to the virtual machine instance; executing, by the virtual machine instance, the operation on the cloud resource; generating, by the virtual machine instance, an output of the execution of the operation on the cloud resource; and transmitting, by the virtual machine instance, the output of the execution of the operation to a computing device via a secondary virtual network interface card, the secondary virtual network interface card being configured to permit outgoing traffic from the virtual machine instance, the computing device configured to be outside the first virtual cloud network.

2 . The method of claim 1 , wherein the operation is requested by a user of a user device, and the generating the output of the execution of the operation comprises:
generating a return message for the user device; and transmitting the return message to the router via the primary virtual network interface card, wherein the primary virtual network interface card is configured to:
accept the return message for the user device; and
reject the output of the execution of the operation.

3 . The method of claim 1 , wherein the router is in a second virtual cloud network and implemented in a private tenancy.

4 . The method of claim 1 , wherein the secondary virtual network interface card is configured to transmit the output of the execution of the operation to the computing device outside of the first virtual cloud network via a network gateway, the network gateway being in a third virtual cloud network.

5 . The method of claim 4 , wherein the first virtual cloud network is assigned a first block of IP addresses and the computing device outside the first virtual cloud network is assigned a second block of IP addresses.

6 . The method of claim 1 , wherein a network gateway outside the first virtual cloud network configured to receive the output of the execution of the operation comprises a network address translation (NAT) gateway, being configured to transmit messages using an IP address of a block of IP addresses attributable to network traffic from one or more users of the virtual machine instance.

7 . The method of claim 1 , wherein the cloud resource comprises an instance pool of pooled virtual machine instances, and wherein executing the operation on the cloud resource further comprises executing the operation on a pooled virtual machine instance from the instance pool.

8 . A virtual machine instance, comprising:
a memory configured to store computer-executable instructions; and a processor configured to access the memory and execute the computer-executable instructions to at least:
receive, by the virtual machine instance of a first virtual cloud network, a command to execute an operation on a cloud resource of the first virtual cloud network, the command being received from a router via a primary virtual network interface card configured to permit incoming traffic to the virtual machine instance;
execute, by the virtual machine instance, the operation on the cloud resource;
generate, by the virtual machine instance, an output of the execution of the operation on the cloud resource; and
transmit, by the virtual machine instance, the output of the execution of the operation to a computing device via a secondary virtual network interface card, the secondary virtual network interface card being configured to permit outgoing traffic from the virtual machine instance, the computing device configured to be outside the first virtual cloud network.

9 . The virtual machine instance of claim 8 , wherein the operation is requested by a user of a user device, and the generation of the output of the execution of the operation comprises:
generating a return message for the user device; and transmitting the return message to the router via the primary virtual network interface card, wherein the primary virtual network interface card is configured to:
accept the return message for the user device; and
reject the output of the execution of the operation.

10 . The virtual machine instance of claim 8 , wherein the router is in a second virtual cloud network and implemented in a private tenancy.

11 . The virtual machine instance of claim 8 , wherein the secondary virtual network interface card is configured to transmit the output of the execution of the operation to the computing device outside of the first virtual cloud network via a network gateway, the network gateway being in a third virtual cloud network.

12 . The virtual machine instance of claim 11 , wherein the first virtual cloud network is assigned a first block of IP addresses and the computing device outside the first virtual cloud network is assigned a second block of IP addresses.

13 . The virtual machine instance of claim 8 , wherein a network gateway outside the first virtual cloud network configured to receive the output of the execution of the operation comprises a network address translation (NAT) gateway, being configured to transmit messages using an IP address of a block of IP addresses attributable to network traffic from one or more users of the virtual machine instance.

14 . The virtual machine instance of claim 8 , wherein the cloud resource comprises an instance pool of pooled virtual machine instances, and wherein the execution of the operation on the cloud resource further comprises executing the operation on a pooled virtual machine instance from the instance pool.

15 . A non-transitory computer-readable storage medium, storing computer-executable instructions that, which, upon execution by a virtual machine instance, direct the virtual machine instance to carry out a set of actions consisting of:
receiving, by the virtual machine instance of a first virtual cloud network, a command to execute an operation on a cloud resource of the first virtual cloud network, the command being received from a router via a primary virtual network interface card configured to restrict permit incoming to the virtual machine instance; executing, by the virtual machine instance, the operation on the cloud resource; generating, by the virtual machine instance, an output of the execution of the operation on the cloud resource; and transmitting, by the virtual machine instance, the output of the execution of the operation to a computing device via a secondary virtual network interface card, the secondary virtual network interface card being configured to permit outgoing traffic from the virtual machine instance, the computing device configured to be outside the first virtual cloud network.

16 . The non-transitory computer-readable storage medium of claim 15 , wherein the operation is requested by a user of a user device, and the generating the output of the execution of the operation comprises:
generating a return message for the user device; and transmitting the return message to the router via the primary virtual network interface card, wherein the primary virtual network interface card is configured to:
accept the return message for the user device; and
reject the output of the execution of the operation.

17 . The non-transitory computer-readable storage medium of claim 15 , wherein the router is in a second virtual cloud network and implemented in a private tena

Assignees

• Oracle Int Corp

Inventors

• Kasso Christopher S
• Gavares Peter G
• Wells John
• Kang Amy H
• Snyder Joseph John

Classifications

• H04L2101/668

  Internet protocol [IP] address subnets · CPC title

• H04L61/256

  NAT traversal · CPC title

• H04L12/66 Primary

  Arrangements for connecting between networks having differing types of switching systems, e.g. gateways · CPC title

• H04L49/70

  Virtual switches · CPC title

• H04L12/4641 Primary

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title