Granted Patent B2

US 9,344,487 · App. 13/803,910 · Granted May 17, 2016

Abstract

Claims (82)

1. A method for establishing a cloud application comprising:

receiving, by a cloud management system, a request for application deployment;

provisioning a new application manager within a cloud computing system based on the request, wherein the new application manager is a device that manages an application by requesting provision of infrastructure from the cloud management system and configuring the provisioned infrastructure to implement respective features of the application;

configuring the new application manager to belong to a first virtual private network (VPN), wherein the cloud management system also belongs to the first VPN; and

configuring the new application manager to belong to a second VPN,

wherein the new application manager is configured to send and receive data messages via the first VPN and the second VPN.

2. The method of claim 1 , further comprising:

receiving, by a cloud management system, an additional request for application deployment;

provisioning an additional new application manager within the cloud computing system;

configuring the additional new application manager to belong to the first virtual private network (VPN); and

configuring the additional new application manager to belong to a third VPN,

wherein the new application manager is configured to send and receive data messages via the first VPN and the third VPN.

3. The method of claim 1 , further comprising:

configuring a new VPN uplink for at least one of the first VPN and the second VPN at a site of the new application manager.

4. The method of claim 1 , further comprising:

providing a gateway to a public network; and

configuring the new application manager to transmit messages bound for the public network to the gateway via the first VPN.

5. The method of claim 1 , further comprising:

provisioning a first new application virtual machine (VM) within the cloud computing system; and

configuring, through at least one configuration operation, the first new application VM to belong to each of a first set of VPNs, wherein the second VPN belongs to the first set of VPNs,

wherein the first new application VM is configured to send and receive data messages via the first set of VPNs.

6. The method of claim 5 , wherein the first set of VPNs includes at least one additional VPN other than the second VPN, the method further comprising:

provisioning a second new application VM within the cloud computing system; and

configuring, through at least one configuration operation, the second new application VM to belong to each of a second set of VPNs, wherein the second VPN and the additional VPN also belong to the second set of VPNs,

wherein the second new application VM is configured to send and receive data messages via the second set of VPNs.

7. The method of claim 6 , further comprising:

configuring a first new VPN uplink for the additional VPN at a site of the first new application VM, and

configuring a second new VPN uplink for the additional VPN at a site of the second new application VM.

8. A cloud management system comprising:

a memory; and

a processor in communication with the memory, the processor being configured to:

receive a request for application deployment;

provision a new application manager within a cloud computing system based on the request, wherein the new application manager is a device that manages an application by requesting provision of infrastructure from the cloud management system and configuring the provisioned infrastructure to implement respective features of the application;

configure the new application manager to belong to a first virtual private network (VPN), wherein the cloud management system also belongs to the first VPN; and

configuring the new application manager to belong to a second VPN,

wherein the new application manager is configured to send and receive data messages via the first VPN and the second VPN.

9. The cloud management system of claim 8 , wherein the processor is further configured to:

receive an additional request for application deployment;

provision an additional new application manager within the cloud computing system;

configure the additional new application manager to belong to the first virtual private network (VPN); and

configure the additional new application manager to belong to a third VPN,

wherein the new application manager is configured to send and receive data messages via the first VPN and the third VPN.

10. The cloud management system of claim 8 , wherein the processor is further configured to:

configure a new VPN uplink for at least one of the first VPN and the second VPN at a site of the new application manager.

11. The cloud management system of claim 8 , wherein the processor is further configured to:

configure the new application manager to transmit messages bound for a public network to a gateway device via the first VPN.

12. The cloud management system of claim 8 , wherein the processor is further configured to:

provision a first new application virtual machine (VM) within the cloud computing system; and

configure, through at least one configuration operation, the first new application VM to belong to each of a first set of VPNs, wherein the second VPN belongs to the first set of VPNs,

wherein the first new application VM is configured to send and receive data messages via the first set of VPNs.

13. The cloud management system of claim 12 , wherein the first set of VPNs includes at least one additional VPN other than the second VPN, wherein the processor is further configured to:

provision a second new application VM within the cloud computing system; and

configure, through at least one configuration operation, the second new application VM to belong to each of a second set of VPNs, wherein the second VPN and the additional VPN also belong to the second set of VPNs,

wherein the second new application VM is configured to send and receive data messages via the second set of VPNs.

14. A non-transitory machine-readable storage medium encoded with instructions for establishing a cloud application comprising:

instructions for receiving, by a cloud management system, a request for application deployment;

instructions for provisioning a new application manager within a cloud computing system, wherein the new application manager is a device that manages an application by requesting provision of infrastructure from the cloud management system and configuring the provisioned infrastructure to implement respective features of the application;

instructions for configuring the new application manager to belong to a first virtual private network (VPN), wherein the cloud management system also belongs to the first VPN; and

instructions for configuring the new application manager to belong to a second VPN,

wherein the new application manager is configured to send and receive data messages via the first VPN and the second VPN.

15. The non-transitory machine-readable storage medium of claim 14 , further comprising:

instructions for receiving, by a cloud management system, an additional request for application deployment;

instructions for provisioning an additional new application manager within the cloud computing system based on the request;

instructions for configuring the additional new application manager to belong to the first virtual private network (VPN); and

instructions for configuring the additional new application manager to belong to a third VPN,

wherein the new application manager is configured to send and receive data messages via the first VPN and the third VPN.

16. The non-transitory machine-readable storage medium of claim 14 , further comprising:

instructions for configuring a new VPN uplink for at least one of the first VPN and the second VPN at a site of the new application manager.

17. The non-transitory machine-readable storage medium of claim 14 , further comprising:

instructions for providing a gateway to a public network; and

instructions for configuring the new application manager to transmit messages bound for the public network to the gateway via the first VPN.

18. The non-transitory machine-readable storage medium of claim 14 , further comprising:

instructions for provisioning a first new application virtual machine (VM) within the cloud computing system; and

instructions for configuring, through at least one configuration operation, the first new application VM to belong to each of a first set of VPNs, wherein the second VPN belongs to the first set of VPNs,

wherein the first new application VM is configured to send and receive data messages via the first set of VPNs.

19. The non-transitory machine-readable storage medium of claim 18 , wherein the first set of VPNs includes at least one additional VPN other than the second VPN, the method further comprising:

instructions for provisioning a second new application VM within the cloud computing system; and

instructions for configuring, through at least one configuration operation, the second new application VM to belong to each of a second set of VPNs, wherein the second VPN and the additional VPN also belong to the second set of VPNs,

wherein the second new application VM is configured to send and receive data messages via the second set of VPNs.

20. The non-transitory machine-readable storage medium of claim 19 , further comprising:

instructions for configuring a first new VPN uplink for the additional VPN at a site of the first new application VM, and

instructions for configuring a second new VPN uplink for the additional VPN at a site of the second new application VM.

Assignments (12)