System and method for reduced cloud IP address utilization
View Patent ↗System and method for providing cloud computing services is described. In one embodiment, the system includes a cloud computing environment, the cloud computing environment comprising resources for supporting cloud workloads, each cloud workload having associated therewith an internal cloud address; and a routing system disposed between external workloads of an external computing environment and the cloud workloads, the routing system for directing traffic from an external address to the internal addresses of the cloud workloads.
1. A system for proving cloud computing service:
a cloud structure;
a cloud disposed in the cloud structure, the cloud structure including hardware layer computer assets for supporting cloud workloads, each cloud workload being disposed in the cloud structure and having associated therewith a cloud address; and
a routing system including a virtual router and a distributor connected to the virtual router, the routing system disposed in the cloud structure and between external workloads and the cloud workloads, each external workload being disposed in an external computing environment and having associated therewith an external address, wherein the routing system uses a secure connection established through the virtual router to route traffic from one of the external addresses to one of the cloud addresses, wherein the virtual router includes a network address translator (“NAT”), and wherein the distributor maps a NAT address provided by the virtual router to one of the cloud addresses.
2. The system of claim 1 wherein the secure connection includes using a pair of cryptographic keys.
3. The system of claim 1 wherein the cloud structure is provided by a cloud services provider utilizing a configuration management database (CMDB).
4. The system of claim 3 wherein the cloud workloads is a germane cloud workload used by the cloud services provider to monitor the health of the cloud and provide management processes.
5. The system of claim 1 wherein the distributor is configured to perform load balancing subsequent to the distributor mapping the NAT address.
6. The system of claim 1 wherein the cloud addresses include an IP address either alone or in combination with at least one port designation, and
wherein the distributor maps the at least one port designation to the cloud workloads via the cloud addresses.
7. The system of claim 6 wherein each of the IP addresses includes a 10-net address.
8. The system of claim 6 wherein the distributor maintains the port designation mapping in a distributor registry.
9. A system for providing cloud computing services, the system comprising:
a cloud structure including hardware layer computer assets, wherein the computer assets are configured to support cloud workloads disposed in a cloud of the cloud structure, each cloud workload having associated therewith a cloud address; and
a routing system disposed in the cloud structure, wherein the routing system is configured to route traffic between external workloads and the cloud workloads, each external workload being disposed in an external computing environment and having associated therewith an external address, wherein the routing system includes a virtual router and a distributor connected to the virtual router, wherein the routing system uses a secure connection established through the virtual router to route traffic from the external addresses to the cloud addresses,
wherein the virtual router is configured to operate as a network address translator (“NAT”), and wherein the distributor maps a NAT address provided by the virtual router to one of the cloud addresses.
10. The system of claim 9 wherein the computer assets include storage assets, processing assets, and network assets.
11. The system of claim 9 wherein the distributor includes a load balancer configured to perform load balancing subsequent to the distributor mapping the NAT address.
12. The system of claim 9 wherein each of the cloud addresses includes an IP address either alone or in combination with at least one port designation, and
wherein the distributor maps the at least one port designation to the cloud workloads via the cloud addresses.
13. The system of claim 9 wherein the secure connection includes using a pair of cryptographic keys.
14. A method for providing cloud computing services comprising:
providing a cloud disposed in a cloud structure including hardware layer computer assets, the computer assets configured to support cloud workloads disposed in the cloud, wherein each cloud workload includes a cloud address; and
routing traffic between external workloads and the cloud workloads, the external workloads being disposed in an external computing environment, wherein each external workload includes an external address, wherein routing traffic includes using a secure connection established through a virtual router disposed in the cloud structure and connected to a distributor disposed in the cloud structure to thereby route traffic from the external addresses to the cloud addresses, wherein the virtual router is configured to operate as a network address translator (“NAT”), and wherein the distributor maps a NAT address provided by the virtual router to one of the cloud addresses.
15. The method of claim 14 wherein the secure connection includes using a pair of cryptographic keys.
16. The method of claim 15 wherein the cryptographic keys are held by both the cloud and the external computing environment.
17. The method of claim 14 further comprising:
performing load balancing, subsequent to the distributor mapping a NAT address.
18. The method of claim 14 wherein each of the cloud address includes an IP address either alone or in combination with at least one port designation.
19. The method of claim 18 further comprising:
mapping the at least one port designation to the cloud workloads via the cloud addresses.
20. The method of claim 18 wherein each of the IP addresses comprises a 10-net address.