Secure network server boot without the use of DHCP and PXE
View Patent ↗In one embodiment, a method includes detecting that a processor is attempting to boot a server using a network boot option over a first network. The method also includes receiving a network address, using the processor, from an integrated management module (IMM) connected to the processor via a local connection without using a dynamic host configuration protocol (DHCP) server on the first network. In another embodiment, a computer program product includes a computer readable program medium. The computer readable program medium includes program instructions configured to cause a processor in an IMM to intercept a network boot option initiated by a server over a first network and acquire a network address for the server without using a DHCP in the first network. The IMM is connected to the server via a local connection. Other methods, systems, and computer program products are described according to more embodiments.
1. A method, comprising:
detecting, by an integrated management module (IMM) connected to a host processor within a server, that the host processor is attempting to boot the server using a network boot option over a first network, including intercepting the network boot option initiated by the host processor;
selecting, by the IMM, a network address from a predetermined range of network addresses stored in the IMM;
sending, by the IMM, the network address from the IMM to the host processor;
requesting, by the IMM, a target configuration from a management server connected to the server via a second network different from the first network;
receiving, by the IMM, the target configuration, the target configuration including a path to a repository within the management server that contains a boot image; and
sending, by the IMM, the target configuration to the host processor.
2. The method as recited in claim 1 , wherein the network address is a static internet protocol (IP) address selected from a predetermined range of IP addresses stored in the IMM.
3. The method as recited in claim 1 , wherein the second network is a private management network.
4. The method as recited in claim 1 , further comprising utilizing, by the host processor, the target configuration to initialize the server.
5. The method as recited in claim 1 , wherein the target configuration further includes instructions on how to obtain an IP address for the server, a virtual private network (VPN) configuration to reach the repository, and a protocol to be used by the server.
6. The method as recited in claim 1 , further comprising acquiring, by the host processor, at least one boot image from the repository.
7. The method as recited in claim 6 , further comprising utilizing, by the host processor, the at least one boot image to initialize the server.
8. The method as recited in claim 1 , wherein the network boot option initiated by the host processor includes
a DHCP request.
9. A computer program product comprising a computer readable program medium, the computer readable program medium comprising program instructions configured to cause a processor in an integrated management module (IMM) connected to a host processor within a server to:
detect, by the IMM, that the host processor is attempting to boot the server using a network boot option over a first network, including intercepting the network boot option initiated by the host processor;
select, by the IMM, a network address from a predetermined range of network addresses stored in the IMM;
send, by the IMM, the network address from the IMM to the host processor;
request, by the IMM, a target configuration from a management server connected to the server via a second network different from the first network;
receive, by the IMM, the target configuration, the target configuration including a path to a repository within the management server that contains a boot image; and
send, by the IMM, the target configuration to the host processor.
10. The computer program product as recited in claim 9 , wherein the network address is a static internet protocol (IP) address selected from a predetermined range of IP addresses stored in the IMM.
11. The computer program product as recited in claim 9 , wherein the second network is a private management network.
12. The computer program product as recited in claim 9 , wherein the target configuration further includes instructions on how to obtain the network address for the server, a virtual private network (VPN) configuration to reach the repository and a protocol to be used by the server.
13. The computer program product as recited in claim 9 , wherein the second network is a private management network.
14. The computer program product as recited in claim 9 , wherein the network boot option initiated by the host processor includes a DHCP request.
15. A system, comprising:
a host processor and
an integrated management module (IMM) connected to the host processor via a local connection, wherein the IMM comprises logic configured to:
detect, by the IMM, that the host processor is attempting to boot a server using a network boot option over a first network, including intercepting the network boot option initiated by the host processor;
select, by the IMM, a network address from a predetermined range of network addresses stored in the IMM;
send, by the IMM, the network address from the IMM to the host processor;
request, by the IMM, a target configuration from a management server connected to the server via a second network different from the first network;
receive, by the IMM, the target configuration, the target configuration including a path to a repository within the management server that contains a boot image; and
send, by the IMM, the target configuration to the host processor.
16. The system as recited in claim 15 , wherein the network address is a static internet protocol (IP) address selected from a predetermined range of IP addresses stored in the IMM.
17. The system as recited in claim 15 , wherein the second network is a private management network.