Granted Patent B1

US 10,148,493 · App. 15/073,523 · Granted Dec 4, 2018

Abstract

Claims (50)

1. A system for an API gateway for network policy and configuration management with a public cloud environment, comprising:

a processor of the API gateway configured to:

receive a public cloud application programming interface (API) request at the API gateway, wherein the public cloud API request is a native public cloud API request or an extended public cloud API request;

process the public cloud API request and translate the public cloud API request into a native public cloud API request that includes added parameters or properties and/or a substitution of parameters in the original public cloud API request with different parameter values, comprising to:

intercept the public cloud API request at the API gateway, wherein the API gateway inspects, processes, and modifies the public cloud API request to generate the native public cloud API request, wherein the intercepting of the public cloud API request comprises to:

remove a first parameter from the original public cloud API request, comprising to:

 identify a predetermined prefix relating to the first parameter, the predetermined prefix indicating that the original public cloud API request is the extended public cloud API request; and

 remove the predetermined prefix; and

add a second parameter or a property and/or substitute a third parameter in the original public cloud API request to obtain the native public cloud API request; and

send the native public cloud API request to the public cloud environment; and

a memory coupled to the processor and configured to provide the processor with instructions.

2. The system recited in claim 1 , wherein the API gateway is implemented on an appliance.

3. The system recited in claim 1 , wherein the API gateway is implemented on an appliance, and wherein the appliance includes an IP address and/or DNS record management appliance.

4. The system recited in claim 1 , wherein the API gateway is implemented on a cloud platform appliance, and wherein the cloud platform appliance includes a virtual IP address and/or DNS record management appliance.

5. The system recited in claim 1 , wherein the API gateway is implemented on a cloud platform appliance, and wherein the cloud platform appliance is configured as a primary cloud platform appliance for receiving cloud requests from a global cloud manager.

6. The system recited in claim 1 , wherein the public cloud API request is related to a resource in the public cloud environment, and wherein the resource in the public cloud environment is associated with a virtual resource.

7. The system recited in claim 1 , wherein the public cloud API request is related to a resource in the public cloud environment, and wherein the resource in the public cloud environment is associated with a physical resource.

8. The system recited in claim 1 , wherein the public cloud API request includes metadata that is not supported by the native API(s) for the public cloud environment.

9. The system recited in claim 1 , wherein the public cloud API request indicates whether a resource is a newly added resource in the public cloud environment, a deleted resource in the public cloud environment, or a modified resource in the public cloud environment.

10. The system recited in claim 1 , wherein the processor is further configured to:

trigger a workflow to extend capabilities of the native public cloud API request based on the intercepted public cloud API request.

11. The system recited in claim 1 , wherein the API gateway and an API client communicate using a secure protocol.

12. The system recited in claim 1 , wherein the processor is further configured to:

authenticate the public cloud API request.

13. The system recited in claim 1 , wherein the processor is further configured to:

authorize the public cloud API request.

14. The system recited in claim 1 , wherein the processor is further configured to:

validate the public cloud API request.

15. The system recited in claim 1 , wherein the processor is further configured to:

communicate with a grid master or a cloud member that is authoritative for an object associated with the public cloud API request.

16. The system recited in claim 1 , wherein the processor is further configured to:

perform virtual discovery of the public cloud environment using a native API of the public cloud environment.

17. A method of an API gateway for network policy and configuration management with a public cloud environment, comprising:

receiving a public cloud application programming interface (API) request at the API gateway, wherein the public cloud API request is a native public cloud API request or an extended public cloud API request;

processing the public cloud API request and translating the public cloud API request into a native public cloud API request that includes added parameters or properties and/or substitutes parameters in the original public cloud API request with new values, comprising:

intercepting the public cloud API request at the API gateway, wherein the API gateway inspects, processes, and modifies the public cloud API request to generate the native public cloud API request, wherein the intercepting of the public cloud API request comprises:

removing a first parameter from the original public cloud API request, comprising:

identifying a predetermined prefix relating to the first parameter, the predetermined prefix indicating that the original public cloud API request is the extended public cloud API request; and

removing the predetermined prefix; and

adding a second parameter or a property and/or substituting a third parameter in the original public cloud API request to obtain the native public cloud API request; and

sending the native public cloud API request to the public cloud environment.

18. A computer program product for an API gateway for network policy and configuration management with a public cloud environment, the computer program product being embodied in a tangible non-transitory computer readable storage medium and comprising computer instructions for:

receiving a public cloud application programming interface (API) request at the API gateway, wherein the public cloud API request is a native public cloud API request or an extended public cloud API request;

processing the public cloud API request and translating the public cloud API request into a native public cloud API request that includes added parameters or properties and/or substitutes parameters in the original public cloud API request with new values, comprising:

intercepting the public cloud API request at the API gateway, wherein the API gateway inspects, processes, and modifies the public cloud API request to generate the native public cloud API request, wherein the intercepting of the public cloud API request comprises:

removing a first parameter from the original public cloud API request, comprising:

identifying a predetermined prefix relating to the first parameter, the predetermined prefix indicating that the original public cloud API request is the extended public cloud API request; and

removing the predetermined prefix; and

adding a second parameter or a property and/or substituting a third parameter in the original public cloud API request to obtain the native public cloud API request; and

sending the native public cloud API request to the public cloud environment.

Assignments (7)