Multitenant access to multiple desktops on host machine partitions in a service provider network

Patent metadata

Field	Value
Publication number	US-9467305-B2
Application number	US-201213413867-A
Country	US
Kind code	B2
Filing date	Mar 7, 2012
Priority date	Mar 7, 2012
Publication date	Oct 11, 2016
Grant date	Oct 11, 2016

Abstract

Routers and host machines can host desktops for two or more enterprises. A virtual local area network is established for each enterprise. Each virtual local area network is connected to a plurality of host machines for the enterprise, with each host machine supporting desktops for use by the enterprise. The desktops access computer resources on the enterprise network of the enterprise to which it is connected. Resources within a host machine are shared by having a virtual switch for each enterprise the host machine supports. The virtual switch for an enterprise is connected to the virtual local area network of the enterprise. Desktops in the host machine that are allocated to the enterprise are given network addresses that include the tag for that enterprise. Virtual desktops for different enterprises can be hosted on different partitions of the same host machine.

First claim

What is claimed is:

1. A computer system for supporting multiple enterprises in using virtual desktops hosted on a plurality of host machines, each enterprise having an enterprise computer network including computer resources, the computer system comprising:
a first enterprise computer network of a first enterprise, the first enterprise computer network including first computer resources;
a second enterprise computer network of a second enterprise, the second enterprise computer network including second computer resources;
a virtual local area network (VLAN) for each of the first and second enterprise, each virtual local area network being connected to a plurality of host machines for the corresponding enterprise, each host machine supporting virtual desktops for use by the enterprise, the virtual desktops accessing the computer resources on the enterprise computer network of the enterprise to which it is connected; and
a router coupled to the first enterprise computer network, the second enterprise computer network, and a computer network implementing the VLAN for each enterprise, wherein the router comprises a virtual router for each of the first enterprise and the second enterprise, wherein each virtual router includes a distinct routing table for the corresponding enterprise, the virtual routers configured to route traffic between the virtual desktops hosted on the plurality of host machines and the computer resources on the respective first and second enterprise computer networks,
wherein the plurality of host machines includes a first host machine including virtual desktops associated with the first enterprise and the second enterprise, wherein the first host machine further includes a plurality of virtual switches including a first virtual switch coupled to the VLAN for the first enterprise and a second virtual switch coupled to the VLAN for the second enterprise, and wherein each virtual switch is associated with one or more virtual desktops of the corresponding enterprise hosted on the first host machine, and wherein the virtual desktops for the first host machine associated with the first enterprise are pinned to one or more first physical CPU's and the virtual desktops for the first host machine associated with the second enterprise are pinned to one or more distinct second physical CPU's.

2. The computer system of claim 1 , further comprising a resource manager for managing allocation of host machines to enterprises and desktops to enterprises.

3. The computer system of claim 2 , wherein the resource manager, for each tenant, assigns a data center, VLAN identifier and quota.

4. The computer system of claim 3 , wherein the resource manager identifies available host capacity and allocates host resources to a tenant.

5. The computer system of claim 1 , wherein each virtual local area network has an identifier, and wherein a desktop allocated to an enterprise on a host machine is tagged with the identifier of the virtual local area network of the enterprise.

6. The computer system of claim 1 , wherein the resource manager maintains a mapping of organization identifier, VLAN identifier and allocated resources.

7. A computer program product comprising computer storage and computer program instructions stored on the computer storage, the computer program instructions configuring a computer system to support multiple enterprises including a first enterprise and a second enterprise in using virtual desktops hosted on a plurality of host machines, each enterprise having a corresponding enterprise computer network including computer resources, the computer program instructions further configuring the computer system to be comprising:
a virtual local area network (VLAN) for each of the first and second enterprises, each virtual local area network being connected to a plurality of host machines for the corresponding enterprise, each host machine supporting virtual desktops for use by the enterprise, the virtual desktops accessing the computer resources on the enterprise computer network of the enterprise to which it is connected; and
a router coupled to the first enterprise computer network, the second enterprise computer network, and a computer network implementing the VLAN for each enterprise, wherein the router comprises a virtual router for each of the first enterprise and the second enterprise, wherein each virtual router includes a distinct routing table for the corresponding enterprise, the virtual routers configured to route traffic between the virtual desktops hosted on the plurality of host machines and the computer resources on the respective enterprise computer networks,
wherein the plurality of host machines includes a first host machine including virtual desktops associated with the first enterprise and the second enterprise, wherein the first host machine further includes a plurality of virtual switches including a first virtual switch coupled to the VLAN for the first enterprise and a second virtual switch coupled to the VLAN for the second enterprise, and wherein each virtual switch is associated with one or more virtual desktops of the corresponding enterprise hosted on the first host machine, and wherein the virtual desktops for the first host machine associated with the first enterprise are pinned to one or more first physical CPU's and the virtual desktops for the first host machine associated with the second enterprise are pinned to one or more distinct second physical CPU's.

8. The computer program product of claim 7 , wherein the computer program instructions further configure the computer system to be comprising a resource manager for managing allocation of host machines to enterprises and desktops to enterprises.

9. The computer program product of claim 8 , wherein the computer program instructions further configure the resource manager, for each tenant, to assign a data center, VLAN identifier and quota.

10. The computer program product of claim 9 , wherein the computer program instructions further configure the resource manager to identify available host capacity and allocate host resources to a tenant.

11. The computer program product of claim 7 , wherein the computer program instructions further configure the computer system such that each virtual local area network has an identifier, and wherein a desktop allocated to an enterprise on a host machine is tagged with the identifier of the virtual local area network of the enterprise.

12. The computer program product of claim 7 , wherein the computer program instructions further configure the resource manager to maintain a mapping of organization identifier, VLAN identifier and allocated resources.

13. A computer system configured to connect virtual desktops to a plurality of enterprise computer networks for multiple enterprises, each enterprise computer network including computer resources, the computer system comprising:
a plurality of host machines, each host machine being configured to host a plurality of virtual desktops, each virtual desktop being allocated to an enterprise of the multiple enterprises and configured to access the computer resources on the enterprise computer network of the enterprise to which the virtual desktop is configured to access;
a virtual local area network (VLAN) for each enterprise, each virtual local area network being connected to the plurality of host machines for the corresponding enterprise; and
a router connected to two or more enterprise computer networks of the multiple enterprises and comprising a virtual router for each enterprise, wherein each virtual router includes a distinct routing table for each enterprise of the two or more enterprises, the v

Assignees

• Ringdahl Kenneth
• Davies Charles
• Biryukov Andre
• Vmware Inc

Inventors

• Ringdahl Kenneth
• Davies Charles
• Biryukov Andre

Classifications

• H04L47/70

  Admission control; Resource allocation · CPC title

• G06F2209/504

  Resource capping · CPC title

• G06F9/5077 Primary

  Logical partitioning of resources; Management or configuration of virtualized resources (specific details on emulation or internal functioning of virtual machines G06F9/455) · CPC title

• H04L45/586

  of virtual routers · CPC title

• Y02B60/142

  Cross-Sectional Technologies · mapped topic