Patent Application

App. No. 13/300,937

Abstract

Claims (86)

1 . A cloud computing apparatus, comprising:

at least one compute device controller including a digital data storage comprising a chief management virtual machine program for running a chief management virtual machine and a processor associated with the digital data storage, the processor being configured to run the chief management virtual machine to:

control first user communications between at least one first user and a first virtual machine,

control second user communications between at least one second user and a second virtual machine, wherein the first virtual machine and the second virtual machine are run by at least one compute resource distinct from the compute device controller, and

isolating the first user communications from the second user communications.

2 . The apparatus of claim 1 , comprising

a plurality of the compute device controllers provided with respective chief management virtual machine programs for running respective chief management virtual machines to:

control first user communications,

control second user, and

isolate the first user communications from the second user communications.

3 . The apparatus of claim 2 , wherein the plurality of compute device controllers are located remotely from each other, each of the compute device controllers is associated with at least one compute resource that is part of a private network and the plurality of compute device controllers are aggregated into a distributed cloud computing system.

4 . The apparatus of claim 1 , wherein the chief management virtual machine communicates with a management virtual machine on the at least one compute resource.

5 . A cloud computing system, comprising:

at least one compute resource provided with a virtual machine program for:

running a first virtual machine that is available to at least one remotely located first user and

running a second virtual machine that is available to at least one remotely located second user; and

a compute device controller provided with a chief management virtual machine program for running a chief management virtual machine for:

controlling first user communications between the first virtual machine and the first user,

controlling second user communications between the second virtual machine and the second user, and

isolating the first user communications from the second user communications.

6 . The system of claim 5 , wherein

the at least one compute resource comprises a first compute resource and a second compute resource;

the second compute resource is the compute device controller;

the first compute resource is provided with a management virtual machine program for running another management virtual machine for controlling the first user communications including directing all first user communications to the chief management virtual machine.

7 . The system of claim 6 , wherein the management virtual machine run by the first compute resource controls an amount of bandwidth used for the first user communications.

8 . The system of claim 7 , wherein the chief management virtual machine controls an amount of bandwidth used for the second user communications.

9 . The system of claim 8 , wherein

the compute resources are associated with a private network having an amount of available bandwidth for communications within the private network;

the management virtual machine run by the first compute resource controls an amount of the available bandwidth used for the first user communications within the private network; and

the chief management virtual machine controls an amount of the available bandwidth used for the second user communications within the private network.

10 . The system of claim 5 , comprising

a router for interfacing between the virtual machines and an external network

and wherein

the chief management virtual machine controls the first user communications between the first virtual machine and the router and

the chief management virtual machine controls the second user communications between the second virtual machine and the router.

11 . The system of claim 10 , wherein

the router has a single Internet Protocol (IP) address for interfacing with the external network;

the chief management virtual machine assigns private IP addresses to each of the virtual machines;

the chief management virtual machine associates a source address of each of the users with a corresponding virtual machine; and

the chief management virtual machine processes any communications from the router that were addressed to the single IP address, determines the source address of the communications from the router and directs each of the communications to the private IP address of the virtual machine associated with the determined source address.

12 . The system of claim 11 , wherein the chief management virtual machine includes a network address translation module for receiving a communication from a virtual machine that was addressed to the chief management virtual machine and translating to an address of the one of the users that is an intended recipient of the communication.

13 . The system of claim 5 , wherein the chief management virtual machine:

facilitates each of the users providing trigger packets that identify a source address of the user,

authenticates the user,

facilitates the user indicating which of the virtual machines the user intends to access, and

associates the source address of the user with a port address of the indicated virtual machine for subsequently directing communications between the user and the indicated virtual machine.

14 . The system of claim 5 , wherein the compute device controller comprises a router configured to interface between the at least one compute resource and an external network.

15 . The system of claim 14 , wherein the at least one compute resource is provided with a management virtual machine program for running a management virtual machine for interfacing with the chief management virtual machine.

16 . The system of claim 14 , wherein the compute device controller is one of a plurality of compute device controllers each running a chief management virtual machine and the compute device controllers are aggregated into a distributed cloud system.

17 . A method of cloud computing, comprising the steps of:

providing a plurality of compute device controllers with respective chief management virtual machine programs for running respective chief management virtual machines;

controlling first user communications between at least one first user and a first virtual machine;

controlling second user communications between at least one second user and a second virtual machine, wherein the first virtual machine and the second virtual machine are run by at least one compute resource distinct from the compute device controller; and

isolating the first user communications from the second user communications.

18 . The method of claim 17 , wherein the compute device controller comprises equipment that is operated by a service provider and the at least one compute resource comprises equipment operated by another distinct from the service provider.

19 . The method of claim 17 , wherein the chief management virtual machine communicates with a management virtual machine on the at least one compute resource.

20 . The method of claim 17 , wherein the plurality of compute device controllers are located remotely from each other, each of the compute device controllers is associated with at least one compute resource that is part of a private network and the method comprises aggregating the plurality of compute device controllers into a distributed cloud computing system.

21 . A method of cloud computing, comprising the steps of:

providing at least one compute resource with a virtual machine program for:

running a first virtual machine that is available to at least one remotely located first user and

running a second virtual machine that is available to at least one remotely located second user;

providing a compute device controller with a chief management virtual machine program for running a chief management virtual machine;

using the chief management virtual machine for controlling first user communications between the first virtual machine and the first user;

using the chief management virtual machine for controlling second user communications between the second virtual machine and the second user; and

using the chief management virtual machine for isolating the first user communications from the second user communications.

22 . The method of claim 21 , wherein

the at least one compute resource comprises a first compute resource that runs the first virtual machine and a second compute resource that runs the second virtual machine;

the second compute resource is the compute device controller and the method comprises:

providing the first compute resource with a management virtual machine program for running another management virtual machine;

using the management virtual machine run by the first compute resource for controlling the first user communications including directing all first user communications to the chief management virtual machine and controlling an amount of bandwidth used for the first user communications.

23 . The method of claim 22 , comprising using the chief management virtual machine for controlling an amount of bandwidth used for the second user communications.

24 . The method of claim 21 , wherein the compute resources are associated with a private network including a router for interfacing between the virtual machines and an external network, the router having a single Internet Protocol (IP) address for interfacing with the external network, and wherein the method comprises:

using the chief management virtual machine for assigning private IP addresses to each of the virtual machines;

using the chief management virtual machine for associating a source address of each of the users with a corresponding virtual machine; and

using the chief management virtual machine for processing any communications from the router that were addressed to the single IP address;

using the chief management virtual machine for determining the source address of the communications from the router; and

using the chief management virtual machine for directing each of the communications to the private IP address of the virtual machine associated with the determined source address.

25 . The method of claim 24 , wherein the chief management virtual machine includes a network address translation module for receiving a communication from a virtual machine that was addressed to the chief management virtual machine and translating to an address of the one of the users that is an intended recipient of the communication.

26 . The method of claim 21 , comprising:

using the chief management virtual machine for facilitating each of the users providing trigger packets that identify a source address of the user,

using the chief management virtual machine for authenticating the user,

using the chief management virtual machine for facilitating the user indicating which of the virtual machines the user intends to access, and

using the chief management virtual machine for associating the source address of the user with a port address of the indicated virtual machine for subsequently directing communications between the user and the indicated virtual machine.

27 . The method of claim 21 , wherein the compute device controller comprises a router configured to interface between the at least one compute resource and an external network.

28 . The method of claim 21 , comprising providing the at least one compute resource with a management virtual machine program for running a management virtual machine for interfacing with the chief management virtual machine.

29 . The method of claim 21 , wherein the compute device controller is one of a plurality of compute device controllers each running a chief management virtual machine and the method comprises aggregating the compute device controllers into a distributed cloud system.

Assignments (11)