IP Library Granted Patent US 12,095,757
Granted Patent B2
US 12,095,757 · App. 17/497,105 · Granted Sep 17, 2024

Multi-cluster boot-strapping

Inventors: Thomas Manville (Mountain View, CA); Deepika Dixit (San Jose, CA); Mark Severson (Herriman, UT); Onkar Bhat (San Jose, CA); Alex Vorbau (Los Altos, CA)
Assignee: Kasten, Inc.
H04L63/0823G06F9/4405G06F15/161H04L63/102
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,095,757
App. No.
17/497,105
Granted
Sep 17, 2024
Kind
B2
Abstract

Disclosed herein are system, method, and computer program product embodiments for multi-cluster boot-strapping. In some embodiments, a server residing on a primary computing cluster receives a first request to establish a temporary connection between the primary computing cluster and a secondary computing cluster. The server establishes the temporary connection between the primary computing cluster and the secondary computing cluster using the first set of credentials. Furthermore, the server receives a second request to establish a persistent connection between the primary computing cluster and the secondary computing cluster. The server establishes the persistent connection by transmitting a third request comprising the configuration settings to the secondary computing cluster thereby causing the secondary computing cluster to generate a second set of credentials corresponding to the primary computing cluster. The server receives and stores the second set of credentials.

Claims (59)

1. A computer-implemented method for boot-strapping a primary computing cluster and a second computing cluster, the computer-implemented method comprising:

receiving a first request to establish a temporary connection between the primary computing cluster and the second computing cluster, wherein the first request comprises a first set of credentials;

establishing the temporary connection between the primary computing cluster and the second computing cluster using the first set of credentials;

receiving a second request to establish a persistent connection between the primary computing cluster and the second computing cluster, wherein the second request comprises configuration settings for establishing the persistent connection;

establishing the persistent connection by:

transmitting a third request comprising the configuration settings to the secondary computing cluster thereby causing the second computing cluster to generate a second set of credentials corresponding to the primary computing cluster that include a computing cluster token that indicates user-permitted actions for the second computing cluster based on a union of a portion of user-permitted actions for a third computing cluster and a portion of user-permitted actions for a fourth computing cluster, wherein the configuration settings define access parameters of the primary computing cluster;

receiving the second set of credentials from the second computing cluster; and

storing the second set of credentials in a data storage device in the primary computing cluster.

2. The computer-implemented method of claim 1 , further comprising:

generating one or more commands to generate the second set of credentials; and

transmitting the one or more commands to the second computing cluster in the third request, thereby causing the second computing cluster to generate the second set of credentials corresponding to the primary computing cluster.

3. The computer-implemented method of claim 1 , further comprising:

causing display of a user interface, wherein the second request is received from the user interface.

4. The computer-implemented method of claim 1 , wherein the third request includes a first identifier of the primary computing cluster and the second request includes a second identifier of the second computing cluster.

5. The computer-implemented method of claim 1 , further comprising:

receiving a fourth request to be transmitted to the second computing cluster, wherein the fourth request including a third set of credentials corresponding to a non-administrator user;

verifying that the non-administrator user has permission to access the second computing cluster based on the third set of credentials; and

forwarding the fourth request to the second computing cluster based on the persistent connection between the primary computing cluster and the second computing cluster.

6. The computer-implemented method of claim 1 , wherein the second set of credentials further include a security certificate, Internet Protocol (IP) addresses of computing resources in the second computing cluster, and the configuration settings.

7. The computer-implemented method of claim 1 , wherein the first set of credentials are associated with an administrative user.

8. A system for boot-strapping a primary computing cluster and a second computing cluster, the system comprising:

a memory; and

at least one processor coupled to the memory, the at least one processor configured to:

receive a first request to establish a temporary connection between the primary computing cluster and the second computing cluster, wherein the first request comprises a first set of credentials;

establish the temporary connection between the primary computing cluster and the second computing cluster using the first set of credentials;

receive a second request to establish a persistent connection between the primary computing cluster and the second computing cluster, wherein the second request comprises configuration settings for establishing the persistent connection;

establish the persistent connection by:

transmitting a third request comprising the configuration settings to the secondary computing cluster thereby causing the second computing cluster to generate a second set of credentials corresponding to the primary computing cluster that include a computing cluster token that indicates user-permitted actions for the second computing cluster based on a union of a portion of user-permitted actions for a third computing cluster and a portion of user-permitted actions for a fourth computing cluster, wherein the configuration settings define access parameters of the primary computing cluster;

receiving the second set of credentials from the second computing cluster; and

storing the second set of credentials in a data storage device in the primary computing cluster.

9. The system of claim 8 , wherein the at least one processor is configured to:

generate one or more commands to generate the second set of credentials; and

transmit the one or more commands to the second computing cluster in the third request, thereby causing the second computing cluster to generate the second set of credentials corresponding to the primary computing cluster.

10. The system of claim 8 , wherein the at least one processor is configured to cause display of a user interface, wherein the second request is received from the user interface.

11. The system of claim 8 , wherein the third request includes a first identifier of the primary computing cluster and the second request includes a second identifier of the second computing cluster.

12. The system of claim 8 , wherein the at least one processor is configured to:

receive a fourth request to be transmitted to the second computing cluster, wherein the fourth request including a third set of credentials corresponding to a non-administrator user;

verify that the non-administrator user has permission to access the second computing cluster based on the third set of credentials; and

forward the fourth request to the second computing cluster based on the persistent connection between the primary computing cluster and the second computing cluster.

13. The system of claim 8 , wherein the second set of credentials further include a security certificate, Internet Protocol (IP) addresses of computing resources in the second computing cluster, and the configuration settings.

14. The system of claim 8 , wherein the first set of credentials are associated with an administrative user.

15. A non-transitory computer-readable medium having instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations comprising, the operations comprising:

receiving a first request to establish a temporary connection between a primary computing cluster and a second computing cluster, wherein the first request comprises a first set of credentials;

establishing the temporary connection between the primary computing cluster and the second computing cluster using the first set of credentials;

receiving a second request to establish a persistent connection between the primary computing cluster and the second computing cluster, wherein the second request comprises configuration settings for establishing the persistent connection;

establishing the persistent connection by:

transmitting a third request comprising the configuration settings to the secondary computing cluster thereby causing the second computing cluster to generate a second set of credentials corresponding to the primary computing cluster that include a computing cluster token that indicates user-permitted actions for the second computing cluster based on a union of a portion of user-permitted actions for a third computing cluster and a portion of user-permitted actions for a fourth computing cluster, wherein the configuration settings define access parameters of the primary computing cluster;

receiving the second set of credentials from the second computing cluster; and

storing the second set of credentials in a data storage device in the primary computing cluster.

16. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprising:

generating one or more commands to generate the second set of credentials; and

transmitting the one or more commands to the second computing cluster in the third request, thereby causing the second computing cluster to generate the second set of credentials corresponding to the primary computing cluster.

17. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprising causing display of a user interface, wherein the second request is received from the user interface.

18. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprising:

receiving a fourth request to be transmitted to the second computing cluster, wherein the fourth request including a third set of credentials corresponding to a non-administrator user;

verifying that the non-administrator user has permission to access the second computing cluster based on the third set of credentials; and

forwarding the fourth request to the second computing cluster based on the persistent connection between the primary computing cluster and the second computing cluster.

19. The non-transitory computer-readable medium of claim 15 , wherein the second set of credentials further include a security certificate, Internet Protocol (IP) addresses of computing resources in the second computing cluster, and the configuration settings.

20. The non-transitory computer-readable medium of claim 15 , wherein the first set of credentials are associated with an administrative user.

Assignments (2)
SECURITY INTEREST Recorded May 22, 2026
From: KASTEN, INC.; SECURITI, LLC; VEEAM SOFTWARE GROUP GMBH; VEEAM VAAS CORPORATION
To: JPMORGAN CHASE BANK, N.A., AS COLLATERAL AGENT
Reel/Frame 074738/0015 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 7, 2023
From: MANVILLE, THOMAS; DIXIT, DEEPIKA; SEVERSON, MARK; BHAT, ONKAR; VORBAU, ALEX
To: KASTEN, INC.
Reel/Frame 065800/0280 →
Continuity (1)
Related Publication 20230114129A1 · Apr 13, 2023