Method for controlling a distributed computer system and associated devices
A method for controlling a distributed computer system, the distributed computer system including at least one virtual machine and a set of network elements, the set of network elements forming a first environment of the virtual machine, the control method being implemented by the virtual machine and including, upon initiating the virtual machine, instantiating a second environment formed by a set of virtual network elements, the second environment being different from the first environment, transferring at least one network element from the first environment to the second environment, activating the at least one transferred network element, instantiating at least one link between the first environment and each network element of the second environment, and initiating the at least one instantiated link.
1 . A method of controlling a distributed computer system, the distributed computer system comprising at least one virtual machine and a set of network elements, the set of network elements forming a first environment of the virtual machine, the control method being implemented by the virtual machine and comprising, during an initiation of the virtual machine:
instantiating a second environment formed by a set of virtual network elements, the second environment being different from the first environment;
transferring at least one network element from the first environment to the second environment;
activating the at least one transferred network element;
instantiating at least one link between the first environment and each network element of the second environment, comprising:
generating a link intended for being connected to the network elements of the second environment, the link comprising two ends;
transferring one end of the link to the second environment in order to be connected to the network elements of the second environment; and
transferring the other end of the link to an interface belonging to the first environment, the interface being instantiated by the virtual machine with the highest-level of right of access to the virtual machine; and
initiating the at least one instantiated link,
wherein said activating and said instantiating at least one link are carried out with a level of right of access strictly inferior to the highest-level of right of access to the virtual machine.
2 . The control method according to claim 1 , wherein each network element is selected from a list consisting of a switch, a router and a firewall.
3 . The control method according to claim 1 ,
wherein said instantiating at least one link comprises using a network bridge or router.
4 . The control method according to claim 1 , wherein said instantiating a second environment is performed using a container.
5 . The control method according to claim 1 , wherein control of the distributed computer system corresponds to a maximum right of access, the second environment being controllable by a right of access strictly lower than the maximum right of access.
6 . A non-transient computer-readable medium storing instructions which, when implemented by a data processing unit, cause the data processing unit to implement a method of controlling a distributed computer system according to claim 1 .
7 . A computer processor implementing a virtual machine that controls a distributed computer system, the distributed computer system comprising the VM and a set of network elements, the set of network elements forming a first environment virtual machine, the virtual machine performing, during an initiation of the virtual machine, a method comprising:
instantiating a second environment formed by a set of virtual network elements, the second environment being different from the first environment;
transferring at least one network element from the first environment to the second environment;
activating the at least one transferred network element;
instantiating at least one link between the first environment and each network element of the second environment, comprising:
generating a link intended for being connected to the network elements of the second environment, the link comprising two ends;
transferring one end of the link to the second environment in order to be connected to the network elements of the second environment; and
transferring the other end of the link to an interface belonging to the first environment, the interface being instantiated by the virtual machine with the highest-level of right of access to the virtual machine; and
initiating the at least one instantiated link,
wherein the activating and the instantiating at least one link are carried out with a level of right of access strictly inferior to the highest-level of right of access to the virtual machine.
8 . A distributed computer system comprising at least one VM according to claim 7 .