Managing cloud zones

Patent metadata

Field	Value
Publication number	US-9276925-B2
Application number	US-201414472371-A
Country	US
Kind code	B2
Filing date	Aug 29, 2014
Priority date	Apr 30, 2012
Publication date	Mar 1, 2016
Grant date	Mar 1, 2016

Abstract

Methods and systems for managing cloud zones are described herein. A management server for a cloud of computing resources may add private zones to the cloud. The private zones may contain computers owned and operated by a user of the cloud, such as a cloud customer, rather than the cloud operator. The management server may manage the computing resources in the private zone by sending commands to an agent, which in turn relays the management server's commands to the individual computing resources. The agent may be authenticated using a token.

First claim

What is claimed is:

1. A method, comprising:
receiving, by one or more computing devices and from an agent, associated with a private zone of computing resources, that facilitates communications between the one or more computing devices and at least a portion of computing resources of the private zone, a request to add the at least a portion of computing resources to a cloud of computing resources that is managed by the one or more computing devices and comprises shared computing resources and private computing resources; and
responsive to the request and a determination that addition of the at least a portion of computing resources to the cloud is authorized:
adding, by the one or more computing devices, the at least a portion of computing resources to the cloud;
generating, by the one or more computing devices, an authentication token; and
communicating, by the one or more computing devices and to the agent, the authentication token.

2. The method of claim 1 , comprising receiving, by the one or more computing devices, a request to utilize one or more computing resources of the at least a portion of computing resources.

3. The method of claim 2 , comprising, responsive to a determination that the request to utilize is associated with the private zone, communicating, by the one or more computing devices and to the agent, commands for the one or more computing resources.

4. The method of claim 3 , comprising:
receiving, by the agent and from the one or more computing devices, the commands for the one or more computing resources;
translating, by the agent, the commands for the one or more computing resources into commands formatted for the one or more computing resources; and
communicating, by the agent and to the one or more computing resources, the commands formatted for the one or more computing resources.

5. The method of claim 2 , comprising determining, by the one or more computing devices, that the request to utilize comprises at least one of the authentication token or information generated using the authentication token.

6. The method of claim 1 , wherein the at least a portion of computing resources comprises a virtualization server for hosting a plurality of virtual machines.

7. A system, comprising:
one or more shared computing resources; and
a management platform configured to manage a cloud of computing resources comprising the one or more shared computing resources and one or more private computing resources, wherein the management platform comprises at least one processor and a memory storing instructions that when executed by the at least one processor cause the management platform to:
receive, from an agent configured to facilitate communications between the management platform and at least a portion of computing resources of a private zone of computing resources, a request to add the at least a portion of computing resources to the cloud; and
responsive to the request and a determination that addition of the at least a portion of computing resources to the cloud is authorized:
add the at least a portion of computing resources to the cloud;
generate an authentication token; and
communicate, to the agent, the authentication token.

8. The system of claim 7 , wherein the instructions, when executed by the at least one processor, cause the management platform to receive and process a request to utilize one or more computing resources of the at least a portion of computing resources.

9. The system of claim 8 , wherein the instructions, when executed by the at least one processor, cause the management platform to, responsive to a determination that the request to utilize is associated with the private zone, communicate, to the agent, commands for the one or more computing resources.

10. The system of claim 9 , further comprising the agent, wherein the agent is configured to:
receive, from the management platform, the commands for the one or more computing resources;
translate the commands for the one or more computing resources into commands formatted for the one or more computing resources; and
communicate, to the one or more computing resources, the commands formatted for the one or more computing resources.

11. The system of claim 8 , wherein the instructions, when executed by the at least one processor, cause the management platform to determine that the request to utilize comprises at least one of the authentication token or information generated using the authentication token.

12. The system of claim 7 , wherein the at least a portion of computing resources comprises a virtualization server configured to host a plurality of virtual machines.

13. One or more non-transitory computer-readable media having instructions stored thereon that when executed by one or more computers cause the one or more computers to:
receive, from an agent associated with a private zone of computing resources and configured to facilitate communications between the one or more computers and at least a portion of computing resources of the private zone, a request to add the at least a portion of computing resources to a cloud of computing resources that is managed by the one or more computers and comprises shared computing resources and private computing resources; and
responsive to the request and a determination that addition of the at least a portion of computing resources to the cloud is authorized:
add the at least a portion of computing resources to the cloud;
generate an authentication token; and
communicate, to the agent, the authentication token.

14. The one or more non-transitory computer-readable media of claim 13 , wherein the instructions, when executed by the one or more computers, cause the one or more computers to receive and process a request to utilize one or more computing resources of the at least a portion of computing resources.

15. The one or more non-transitory computer-readable media of claim 14 , wherein the instructions, when executed by the one or more computers, cause the one or more computers to, responsive to a determination that the request to utilize is associated with the private zone, communicate, to the agent, commands for the one or more computing resources.

16. The one or more non-transitory computer-readable media of claim 14 , wherein the instructions, when executed by the one or more computers, cause the one or more computers to determine that the request to utilize comprises at least one of the authentication token or information generated using the authentication token.

17. The one or more non-transitory computer-readable media of claim 13 , wherein the at least a portion of computing resources comprises a virtualization server configured to host a plurality of virtual machines.

Assignees

• Citrix Systems Inc

Inventors

• Huang Alex
• Vittal Chiradeep
• Chan William

Classifications

• G06F21/33 Primary

  using certificates · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L41/046

  comprising network management agents or mobile agents therefor · CPC title

• G06F9/5072

  Grid computing · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title