Securing live migration of a virtual machine from a secure virtualized computing environment, over an unsecured network, to a different virtualized computing environment

Patent metadata

Field	Value
Publication number	US-9715401-B2
Application number	US-21024908-A
Country	US
Kind code	B2
Filing date	Sep 15, 2008
Priority date	Sep 15, 2008
Publication date	Jul 25, 2017
Grant date	Jul 25, 2017

Abstract

In an embodiment of the invention, a method for secure live migration of a virtual machine (VM) in a virtualized computing environment can include selecting a VM in a secure virtualized computing environment for live migration to a different virtualized computing environment and blocking data communications with the selected VM and other VMs in the secure virtualized computing environment. The selected VM can be live migrated to the different virtualized computing environment and the VM can be restarted in the different virtualized computing environment. Notably, a secure communicative link can be established between the restarted VM and at least one other of the VMs in the secure virtualized computing environment. Finally, data communications between the restarted VM and the at least one other of the VMs can be enabled over the secure communicative link.

First claim

We claim:

1. A method for secure live migration of a virtual machine (VM) in a virtualized computing environment, the method comprising:
selecting a VM in a secure virtualized computing environment for live migration to a different virtualized computing environment coupled to the secure virtualized environment over an unsecured computer communications network and blocking data communications between the selected VM and other VMs in the secure virtualized computing environment;
live migrating the selected VM to the different virtualized computing environment and restarting the selected VM in the different virtualized computing environment;
establishing a secure communicative link between the different virtualized computing environment and the secure virtualized computing environment; and,
enabling data communications between the restarted VM and the other VMs over the secure communicative link.

2. The method of claim 1 , further comprising:
adding a tunnel between a routing core of the secure virtualized computing environment and the different virtualized computing environment; and,
responsive to an update to the routing core permitting routing of data packets from the other VMs in the secure virtualized computing environment to the restarted VM, removing the tunnel.

3. The method of claim 1 , wherein establishing a secure communicative link between the different virtualized computing environment and the secure virtualized computing environment comprises:
configuring an Internet protocol (IP) Security (IPSec) policy for secure communications between the different virtualized computing environment and the secure virtualized computing environment; and
establishing an IPSec conformant communicative link between the different virtualized computing environment and the secure virtualized computing environment according to the configured IPSec policy.

4. The method of claim 1 , wherein enabling data communications between the restarted VM and other the VMs over the secure communicative link further comprises:
determining non-managed connections persisting between the restarted VM and other communicative entities;
identifying unsecured ones of the non-managed connections; and
resetting the identified unsecured ones of the non-managed connections as secured connections and re-establishing the unsecured ones of the non-managed connections as secured connections.

5. A virtualized computing data processing system comprising:
a secure virtualized computing environment comprising a host server including a hypervisor managing a plurality of virtual machines (VMs) within the secure virtualized computing environment;
a different virtualized computing environment coupled to the secure virtualized environment over an unsecured computer communications network, the different virtualized computing environment comprising a host server including a hypervisor managing a plurality of VMs within the different virtualized computing environment; and
live migration logic executing in a computer and communicating with each of the secure virtualized computing environment and the different virtualized computing environment, the logic comprising program code enabled to select one of the VMs in the secure virtualized computing environment for live migration to the different virtualized computing environment and to block data communications between the selected VM and other VMs in the secure virtualized computing environment, to live migrate the selected VM to the different virtualized computing environment and to restart the selected VM in the different virtualized computing environment, to establish a secure communicative link between the different virtualized computing environment and the secure virtualized computing environment, and to enable data communications between the restarted VM and the other VMs in the secure virtualized computing environment over the secure communicative link.

6. The system of claim 5 , wherein the secure communicative link is an Internet protocol (IP) Security (IPSec) conformant secure communicative link.

Assignees

• Devine Wesley M
• Gottimukkala Sivaram
• Huynh Lap T
• Joseph Dinakaran
• Law Michael S
• Overby Jr Linwood H
• IBM

Inventors

• Devine Wesley M
• Gottimukkala Sivaram
• Huynh Lap T
• Joseph Dinakaran
• Law Michael S
• Overby Jr Linwood H

Classifications

• G06F9/4856

  resumption being on a different machine, e.g. task migration, virtual machine migration (G06F9/5088 takes precedence) · CPC title

• G06F2009/4557

  Distribution of virtual machine instances; Migration and load balancing · CPC title

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• G06F9/45558 Primary

  Hypervisor-specific management and integration aspects · CPC title