Automating infrastructure workflows as atomic transactions
View Patent ↗Information Technology (IT) system configuration is managed using a set of defined flows with atomic execution properties. The instructions to execute a change to one or more infrastructure elements (a “forward transaction”) are maintained with instructions and/or information needed to execute a corresponding “reverse” transaction that is responsible for returning the element(s) to a pre-transaction action state in the event of a configuration failure or other request originating at a high level flow.
1. A method for enabling an automated flow for specifying a data processing service as one or more atomic transactions, the method comprising:
receiving a request for a new configuration of an element or a change in configuration of an element;
based on the request, forming a flow including at least one forward transaction to satisfy the request;
collecting and storing current configuration of the element for the purpose of reverting to the original state; and
in response to receiving an error condition during execution of a forward transactions of the flow, executing at least one reverse transaction corresponding to the forward transaction of the flow that caused the error condition;
wherein the at least one forward and reverse transaction each includes programmatic instructions for provisioning or deprovisioning at least one device or resource in a network of devices or resources.
2. The method of claim 1 wherein the request includes at least one of the following: a request to provision a device in a network of devices, request to create an infrastructure element of a virtual data center (VDC), a request to create a virtual local area network (VLAN), a request to logically configure a network service component, and a request to configure an element of a VDC.
3. The method of claim 1 wherein at least one device or resource is a physical device or resource.
4. The method of claim 1 wherein at least one device or resource is a virtual device or resource.
5. The method of claim 1 wherein at least one programmatic instruction is a logical configuration of either a virtual or physical device.
6. The method of claim 1 wherein executing at least one forward transaction of the flow further comprises provisioning a new device or resource in a network of devices and resources.
7. The method of claim 1 wherein executing the at least one forward transaction of the flow further executes a sequence of programmatic steps that cause a change in state of an existing device or resource in a network of devices or resources.
8. The method of claim 1 further comprising mapping at least one forward transaction to a corresponding reverse transaction.
9. The method of claim 1 wherein executing the at least one reverse transaction rolls back any configuration changes caused by the execution of the corresponding forward transaction.
10. The method of claim 1 wherein the error condition includes at least one of the following: an error that causes provisioning of at least one device or resource to fail, a VLAN identification error, security zone identification error in a firewall, resource allocation error, a VDC provisioning error.
11. The method of claim 1 further comprising:
in response to receiving the request, identifying a service or a change in a service requested;
based on the identified service or change in service requested, identifying a set of devices and resources required to satisfy the request;
based on the identified devices and resources, organizing a set of forward and reverse transactions into a hierarchical flow.
12. The method of claim 11 wherein the set of forward transactions and corresponding reverse transactions are indexed and stored in a data store.
13. A system for managing data processing system elements comprising:
a persistent storage device for storing executable instructions that represent:
a do method including programmatic instructions that when executed implement a new configuration of a data processing element or changes to a configuration of a data processing system element;
a current state method including instructions for collecting and storing current configuration of the element;
an undo method including programmatic instructions that when executed return the configuration of the data processing system element to an original state; and
a processor for
upon request from a higher level flow, executing the do method as a forward transaction,
upon detection of an error resulting from execution of the do method executing the undo method as a reverse transaction, and
optionally executing the current state method as needed, to ensure atomicity; and
wherein the do method and undo method comprise at least one transaction for provisioning and deprovisioning at least one device or resource in a network of devices or resources.
14. The system of claim 13 wherein the request includes at least one of the following: a request to provision a device in a network of devices, request to create an infrastructure element of a virtual data center (VDC), a request to create a virtual local area network (VLAN), a request to logically configure a network service component, and a request to configure any element of a VDC.
15. The system of claim 13 wherein at least one device or resource is a virtual device or resource.
16. The system of claim 13 wherein the persistent storage device further stores a mapping of the do method to the corresponding undo method enabling programming execution of a sequence of that, after execution of the undo method, return at least one device or resource to a state that existing prior to execution of the do method.
17. The system of claim 13 , wherein the undo method is executed upon at least one of the following occurring during execution of the do method: an error that causes provisioning of at least one device or resource to fail, a VLAN identification error, security zone identification error in a firewall, resource allocation error, a VDC provisioning error.