IP Library › Granted Patent US 10,348,808
Granted Patent B2
US 10,348,808 · App. 14/927,652 · Granted Jul 9, 2019

Hybrid cloud applications

Inventors: Po-cheng Chiu (Taipei, TW); Wei-Ting Chou (Taipei, TW); Chih-Hsiung Liu (Taipei, TW)
Assignee: International Business Machines Corporation
H04L67/10H04L63/0209H04L63/0272
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,348,808
App. No.
14/927,652
Granted
Jul 9, 2019
Kind
B2
Abstract

As disclosed herein a method, executed by a computer, for enabling a hybrid cloud environment includes receiving, on a cloud environment, a hybrid cloud application package comprising a deployable cloud package and a deployable on-premise package, and deploying the deployable cloud package in a container on the cloud environment, providing a cloud application. The method further includes establishing a secure bi-directional communication tunnel between the cloud environment and an on-premise environment, thereby masking network connection information, and sending, with the secure bi-directional messaging framework, the deployable on-premise package to an on-premise server in the on-premise environment. The method further includes sending a message, with the secure bi-directional messaging framework, requesting services from an on-premise application, and receiving a response from the on-premise application. A computer program product corresponding to the above method is also disclosed herein.

Claims (40)

1. A method comprising:

receiving, on a cloud environment, a hybrid cloud application package comprising a deployable cloud package and a deployable on-premise package, the deployable cloud package including instructions for deploying a cloud application in the cloud environment, the deployable on-premise package including instructions for deploying an on-premise application in a perimeter network on an on-premise environment, and the on-premise environment including a cloud gateway;

deploying the cloud application in a container on the cloud environment according to the instructions in the deployable cloud package;

establishing a secure bi-directional messaging framework between the cloud environment and the on-premise environment, thereby masking an IP address and a connection port of the cloud gateway on the on-premise environment;

sending, on demand, with the secure bi-directional messaging framework and through the cloud gateway, the deployable on-premise package to an on-premise server in the perimeter network on the on-premise environment;

sending a message, with the secure bi-directional messaging framework and through the cloud gateway, requesting services from the on-premise application; and

receiving a response from the on-premise application,

wherein the messaging framework includes a message client library and a message broker to encapsulate messages between different computer architectures, and wherein the message broker authenticates the message requesting services from the on-premise application to confirm the message originated from an authorized requester.

2. The method of claim 1 , wherein the deployable cloud package further includes the cloud application.

3. The method of claim 2 , wherein the instructions for deploying the cloud application in the cloud environment include: container startup information, application startup parameters, and library dependencies.

4. The method of claim 1 , further comprising retrieving connectivity information from a connectivity service.

5. A method comprising:

receiving, with a secure bi-directional messaging framework, a deployable on-premise package corresponding to a hybrid cloud application, the deployable on-premise package including instructions for deploying an on-premise application in a perimeter network on an on-premise environment, and the on-premise environment including a cloud gateway;

deploying, in a container, on an on-premise server, the deployable on-premise package in the perimeter network on the on-premise environment, providing the on-premise application;

using a secure bi-directional communication tunnel between a cloud environment and the on-premise environment to establish the secure bi-directional messaging framework, thereby masking an IP address and a connection port of the cloud gateway on the on-premise environment;

running the on-premise application in the perimeter network on a restricted container environment;

receiving, from a cloud application and through the cloud gateway, with the secure bi-directional messaging framework, a message comprising requested services; and

sending, with the secure bi-directional messaging framework and through the cloud gateway, a response corresponding to the requested services,

wherein the on-premise application enters a sleep state after a period of inactivity and re-activates when the message comprising requested services is received, wherein the messaging framework includes a message client library and a message broker to encapsulate messages between different computer architectures, and wherein the message broker authenticates the message requesting services from the on-premise application to confirm the message originated from an authorized requester.

6. The method of claim 5 , wherein the deployable on-premise package further includes the on-premise application.

7. The method of claim 6 , wherein the instructions for deploying the on-premise application in the perimeter network on the on-premise environment include: container startup information, application startup parameters, and library dependencies.

8. The method of claim 5 , wherein the cloud gateway provides access to a secure restricted hosting environment for the container to run in.

9. A computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising instructions for:

receiving, on a cloud environment, a hybrid cloud application package comprising a deployable cloud package and a deployable on-premise package, the deployable cloud package including instructions for deploying a cloud application in the cloud environment, the deployable on-premise package including instructions for deploying an on-premise application in a perimeter network on an on-premise environment, and the on-premise environment including a cloud gateway;

deploying the cloud application in a container on the cloud environment according to the instructions in the deployable cloud package;

establishing a secure bi-directional communication tunnel between the cloud environment and the on-premise environment, thereby masking an IP address and a connection port of the cloud gateway on the on-premise environment;

sending, with the secure bi-directional messaging framework and through the cloud gateway, the deployable on-premise package to an on-premise server in the perimeter network on the on-premise environment;

sending a message, with the secure bi-directional messaging framework and through the cloud gateway, requesting services from the on-premise application; and

receiving a response from the on-premise application,

wherein the messaging framework includes a message client library and a message broker to encapsulate messages between different computer architectures, and wherein the message broker authenticates the message requesting services from the on-premise application to confirm the message originated from an authorized requester.

10. The computer program product of claim 9 , wherein the deployable cloud package further includes the cloud application.

11. The computer program product of claim 10 , wherein the instructions for deploying the cloud application in the cloud environment include: container startup information, application startup parameters, and library dependencies.

12. The computer program product of claim 9 , wherein the program instructions include instructions for retrieving connectivity information from a connectivity service.

13. The method of claim 1 , wherein the sending of the deployable on-premise package to the on-premise server is performed in response to the deploying of the cloud application in the container on the cloud environment.

14. The method of claim 1 , wherein the sending of the deployable on-premise package to the on-premise server is performed in response to a service corresponding to the deployable on-premise package being requested.

15. The method of claim 5 , wherein the response includes results of the requested service.

16. The method of claim 5 , wherein the response contains an indication of success of the requested service and a reference providing a location to obtain results of the requested service.

17. The computer program product of claim 9 , wherein the sending of the deployable on-premise package to the on-premise server is performed in response to the deploying of the cloud application in the container on the cloud environment.

18. The computer program product of claim 9 , wherein the sending of the deployable on-premise package to the on-premise server is performed in response to a service corresponding to the deployable on-premise package being requested.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 30, 2015
From: CHIU, PO-CHENG; CHOU, WEI-TING; LIU, CHIH-HSIUNG
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 036920/0615 →
Continuity (1)
Related Publication 20170124340A1 · May 4, 2017