Cloud network automation for IP address and DNS record management
View Patent ↗Techniques for cloud network automation for IP address and DNS record management are disclosed. In some embodiments, a system, process, and/or computer program product for cloud network automation for IP address and DNS record management includes receiving at a cloud platform appliance (e.g., a virtual or physical IP address and/or DNS management appliance) a cloud request related to a resource (e.g., a virtual or physical resource) in a cloud environment from a global cloud manager; and processing the cloud request at the cloud platform appliance to determine whether to proxy the cloud request to another cloud platform appliance or a grid master or to locally process the cloud request, wherein a storage of infrastructure metadata information for IP address and/or DNS record management is updated based on the cloud request.
1. A system for cloud network automation for IP address and DNS record management, comprising:
a processor of a cloud platform appliance configured to:
receive a cloud request related to a resource in a cloud environment from a global cloud manager, wherein the cloud platform appliance is configured as a primary cloud platform appliance for receiving cloud requests from the global cloud manager; and
process the cloud request to determine whether to proxy the cloud request to another cloud platform appliance or a grid master or to locally process the cloud request, wherein a storage of infrastructure metadata information for IP address and/or DNS record management is updated based on the cloud request, wherein the processing of the cloud request comprises to:
determine whether the cloud platform appliance has authorization to process the cloud request based on an access control list; and
in response to a determination that the cloud platform appliance does not have authorization:
determine whether the other cloud platform appliance has authorization to process the cloud request based on the access control list;
proxy the cloud request to the other cloud platform appliance, wherein the other cloud platform appliance is authoritative for an object associated with the cloud request, and wherein the object is associated with an IP address space or DNS record space managed by the other cloud platform appliance; and
in response to a determination that the other cloud platform appliance does not have authorization, proxy the cloud request to the grid master to process the cloud request, wherein the cloud platform appliance is a member of a grid, wherein the grid includes a plurality of cloud platform appliances and the grid master, wherein the plurality of cloud platform appliances includes the other cloud platform appliance, wherein the grid master maintains a centralized data store of IP address management (IPAM) related data of the grid, DNS related data of the grid, Dynamic Host Configuration Protocol (DHCP) related data of the grid, or any combination thereof; and
a memory coupled to the processor and configured to provide the processor with instructions.
2. The system recited in claim 1 , wherein the cloud platform appliance includes an IP address and/or DNS record management appliance.
3. The system recited in claim 1 , wherein the cloud platform appliance includes a virtual IP address and/or DNS record management appliance.
4. The system recited in claim 1 , wherein the resource in the cloud environment is associated with a virtual resource.
5. The system recited in claim 1 , wherein the resource in the cloud environment is associated with a physical resource.
6. The system recited in claim 1 , wherein the cloud request is an application programming interface (API) request.
7. The system recited in claim 1 , wherein the cloud request is an application programming interface (API) request that indicates whether the resource is a newly added resource in the cloud environment, a deleted resource in the cloud environment, or a modified resource in the cloud environment.
8. The system recited in claim 1 , wherein the cloud request is sent from a cloud adapter integrated with the global cloud manager.
9. The system recited in claim 1 , wherein the processor is further configured to:
process the cloud request using a cloud application programming interface (API) service executed on the cloud platform appliance.
10. The system recited in claim 1 , wherein the cloud request is sent from a cloud adapter integrated with the global cloud manager, and wherein the processor is further configured to:
process the cloud request using a cloud application programming interface (API) service executed on the cloud platform appliance, wherein the cloud API service and the cloud adapter communicate using a secure protocol.
11. The system recited in claim 1 , wherein the processor is further configured to:
authenticate the cloud request.
12. The system recited in claim 1 , wherein the processor is further configured to:
authorize the cloud request.
13. The system recited in claim 1 , wherein the processor is further configured to:
validate the cloud request.
14. A method of cloud network automation for IP address and DNS record management, comprising:
receiving at a cloud platform appliance a cloud request related to a resource in a cloud environment from a global cloud manager, wherein the cloud platform appliance is configured as a primary cloud platform appliance for receiving cloud requests from the global cloud manager; and
processing the cloud request at the cloud platform appliance to determine whether to proxy the cloud request to another cloud platform appliance or a grid master or to locally process the cloud request, wherein a storage of infrastructure metadata information for IP address and/or DNS record management is updated based on the cloud request, wherein the processing of the cloud request comprises:
determining whether the cloud platform appliance has authorization to process the cloud request based on an access control list; and
in response to a determination that the cloud platform appliance does not have authorization:
determining whether the other cloud platform appliance has authorization to process the cloud request based on the access control list;
proxying the cloud request to the other cloud platform appliance, wherein the other cloud platform appliance is authoritative for an object associated with the cloud request, and wherein the object is associated with an IP address space or DNS record space managed by the other cloud platform appliance; and
in response to a determination that the other cloud platform appliance does not have authorization, proxying the cloud request to the grid master to process the cloud request, wherein the cloud platform appliance is a member of a grid, wherein the grid includes a plurality of cloud platform appliances and the grid master, wherein the plurality of cloud platform appliances includes the other cloud platform appliance, wherein the grid master maintains a centralized data store of IP address management (IPAM) related data of the grid, DNS related data of the grid, Dynamic Host Configuration Protocol (DHCP) related data of the grid, or any combination thereof.
15. A computer program product for cloud network automation for IP address and DNS record management, the computer program product being embodied in a tangible non-transitory computer readable storage medium and comprising computer instructions for:
receiving at a cloud platform appliance a cloud request related to a resource in a cloud environment from a global cloud manager, wherein the cloud platform appliance is configured as a primary cloud platform appliance for receiving cloud requests from the global cloud manager; and
processing the cloud request at the cloud platform appliance to determine whether to proxy the cloud request to another cloud platform appliance or a grid master or to locally process the cloud request, wherein a storage of infrastructure metadata information for IP address and/or DNS record management is updated based on the cloud request, wherein the processing of the cloud request comprises:
determining whether the cloud platform appliance has authorization to process the cloud request based on an access control list; and
in response to a determination that the cloud platform appliance does not have authorization:
determining whether the other cloud platform appliance has authorization to process the cloud request based on the access control list;
proxying the cloud request to the other cloud platform appliance, wherein the other cloud platform appliance is authoritative for an object associated with the cloud request, and wherein the object is associated with an IP address space or DNS record space managed by the other cloud platform appliance; and
in response to a determination that the other cloud platform appliance does not have authorization, proxying the cloud request to the grid master to process the cloud request, wherein the cloud platform appliance is a member of a grid, wherein the grid includes a plurality of cloud platform appliances and the grid master, wherein the plurality of cloud platform appliances includes the other cloud platform appliance, wherein the grid master maintains a centralized data store of IP address management (IPAM) related data of the grid, DNS related data of the grid, Dynamic Host Configuration Protocol (DHCP) related data of the grid, or any combination thereof.