Enhanced Secure Virtual Machine Provisioning
US-2015134965-A1 · May 14, 2015 · US
US2017052807A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2017052807-A1 |
| Application number | US-201415118638-A |
| Country | US |
| Kind code | A1 |
| Filing date | Feb 20, 2014 |
| Priority date | Feb 20, 2014 |
| Publication date | Feb 23, 2017 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A method, system, and computer program product is provided for deploying software containers by a container engine manager, CEM. The CEM instantiates a first container engine and instantiates a second container engine. The CEM determines that a first software container utilizing a first port number should be deployed. In response to determining that the first software container should be deployed, the CEM selects a container engine from a set of available container engines. The set of container engines comprises the first container engine and the second container engine. The CEM then causes the selected container engine to instantiate the first software container. The CEM associates the first port number with an IP address of the selected container engine.
Opening claim text (preview).
1 . A method for deploying and managing software containers, comprising: a container engine manager (CEM) instantiating a first container engine; the instantiating a second container engine, wherein the first container engine supports a first application program interface (API), the second container engine also supports the first API, and the CEM supports a second API that is compatible with the first API; the CEM determining that a first software container utilizing at least a first port number should be deployed; in response to determining that the first software container should be deployed, the CEM selecting a container engine from a set of available container engines, the set of container engines comprising the first container engine and the second container engine; the causing the selected container engine to instantiate the first software container; and the CEM associating the first port number with an IP address of the selected container engine. 2 . The method of claim 1 , wherein the CEM determines that the first software container should be deployed in response to receiving a software container deployment request message that instructs the CEM to deploy a software container, the software container deployment request message comprising a first set of port numbers, which first set of port numbers includes the first port number, and a first software container identifier identifying a first software container. 3 . The method of claim 2 , further comprising: the CEM receiving a second software container deployment request message comprising a second set of one or more port numbers and a second software container identifier identifying a second software container; the CEM determining whether each port number included in the second set of port numbers is currently being used by an existing software container; and in response to determining that none of the port numbers included in the second set of port numbers are currently being used by an existing software container, the CEM instantiating the second software container by transmitting an add software container message to one of the available container engines. 4 . The method of claim 1 , wherein the selected container engine executes within a virtual machine, and the method further comprises the CEM configuring one or more of a router and an application proxy to forward to the virtual machine network layer packets that contain a transport layer header having said first port number contained in a destination port number field of the transport layer header. 5 . The method of claim 4 , further comprising: configuring the router to forward to the virtual machine network layer packets that contain a transport layer header having said port number contained in a destination port number field of the transport layer header; configuring the first container engine to use the router as its default gateway; and configuring the second container engine to use the router as its default gateway. 6 . The method of claim 5 , wherein the router is a virtual router. 7 . The method of claim 1 , further comprising: the CEM assigning a unique public process identifier to the software container; the CEM obtaining a private process identifier assigned to the software container by the selected container engine; the CEM using a data structure to link the public process ID with the unique private process ID. 8 . The method of claim 1 , wherein the CEM is running on a first virtual machine and the selected container engine is instantiated on a second virtual machine. 9 . The method of claim 1 , wherein the software container hosts a process that provides a web real time communication service or an IP multimedia service. 10 . An apparatus adapted to: instantiate a first container engine; instantiate a second container engine), wherein the first container engine supports a first application program interface, API, the second container engine also supports the first API, and the CEM supports a second API that is compatible with the first API; determine that a first software container utilizing at least a first port number should be deployed; select a container engine from a set of available container engines in response to determining that the first software container should be deployed, the set of container engines comprising the first container engine and the second container engine; cause the selected container engine to instantiate the first software container; and associate the first port number with an IF address of the selected container engine. 11 . A computer program product comprising a non-transitory computer readable medium comprising instructions which, when executed on at least one processor, cause the at least one processor to carry out the method of claim 1 . 12 . An apparatus comprising: means for instantiating a first container engine; means for instantiating a second container engine, wherein the first container engine supports a first application program interface, API, the second container engine also supports the first API, and the CEM supports a second API that is compatible with the first API; means for determining that a first software container utilizing at least a first port number should be deployed; means selecting a container engine from a set of available container engines in response to a determination that the first software container, should be deployed, the set of container engines comprising the first container engine and the second container engine; means for causing the selected container engine to instantiate the first software container; and means for associating the first port number with an IF address of the selected container engine. 13 . (canceled)
Software deployment · CPC title
Hypervisor-specific management and integration aspects · CPC title
Network integration; Enabling network access in virtual machine instances · CPC title
Interprogram communication · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.