Provisioning network services in a software defined data center
A novel method for dynamic network service allocation that maps generic services into specific configurations of service resources in a network is provided. An application that is assigned to be performed by computing resources in the network is associated with a set of generic services, and the method maps the set of generic services to the service resources based on the assignment of the application to the computing resources. The mapping of generic services is further based on a level of service that is chosen for the application, where the set of generic services are mapped to different sets of network resources according to different levels of services.
1. A method for deploying a multi-component application, the method comprising:
receiving a request to deploy an application with a plurality of components in the network, the request comprising (i) an application profile that describes the components of the application and (ii) a set of one or more service templates that describe network services associated with the different components of the application;
using the application profile to identify and assign each application component to a computing machine;
using the service templates to identify and assign a set of service resources in the network to implement one or more services that are specified in the set of service templates; and
generating and distributing configuration data to configure the assigned set of computing machines and assigned service resources to implement the application components and the set of network services.
2. The method of claim 1 , wherein using the set of service templates to assign the set of service resources is based on a current workload status of the network.
3. The method of claim 1 , wherein using the set of service templates to assign the set of service resources comprises assigning the set of service resources based at least partly on a proximity in the network of the set of service resources to a computing machine assigned to an application component for which a set of network services are being performed.
4. The method of claim 1 , wherein the set of templates specifies the set of network services to perform but does not refer to any specific service resource in the network.
5. The method of claim 1 , wherein at least one of the assigned service resources is provided by a service module that is part of virtualization software executing on a host computer.
6. The method of claim 1 , wherein at least one of the assigned service resources is a service virtual machine executing on a host computer, and at least one computing machine is another virtual machine executing on the host computer.
7. The method of claim 1 , wherein the assigned service resources comprise an edge service node that operates at a boundary of the network.
8. The method of claim 1 , wherein the set of network services comprises at least one of a load balancing service, a network address translation service, an encryption service, a DHCP service, a VPN service, and a firewall service.
9. The method of claim 1 , wherein using the service templates comprises:
identifying the network services specified in the set of service templates;
associating each application component with a set of service tags, each service tag identifying a network service that is needed for the associated application component.
10. A non-transitory machine readable medium storing a program that when executed by at least one processing unit deploys a multi-component application, the program comprising sets of instructions for:
receiving a request to deploy an application with a plurality of components in the network, the request comprising (i) an application profile that describes the components of the application and (ii) a set of one or more service templates that describe network services associated with the different components of the application;
using the application profile to identify and assign each application component to a computing machine;
using the service templates to identify and assign a set of service resources in the network to implement one or more services that are specified in the set of service templates; and
generating and distributing configuration data to configure the assigned set of computing machines and assigned service resources to implement the application components and the set of network services.
11. The non-transitory machine readable medium of claim 10 , wherein using the set of service templates to assign the set of service resources is based on a current workload status of the network.
12. The non-transitory machine readable medium of claim 10 , wherein the set of instructions for using the set of service templates to assign the set of service resources comprises a set of instructions for assigning the set of service resources based at least partly on a proximity in the network of the set of service resources to a computing machine assigned to an application component for which a set of network services are being performed.
13. The non-transitory machine readable medium of claim 10 , wherein the set of templates specifies the set of network services to perform but does not refer to any specific service resource in the network.
14. The non-transitory machine readable medium of claim 10 , wherein at least one of the assigned service resources is provided by a service module that is part of virtualization software executing on a host computer.
15. The non-transitory machine readable medium of claim 10 , wherein at least one of the assigned service resources is a service virtual machine executing on a host computer, and at least one computing machine is another virtual machine executing on the host computer.
16. The non-transitory machine readable medium of claim 10 , wherein the assigned service resources comprise an edge service node that operates at a boundary of the network.
17. The non-transitory machine readable medium of claim 10 , wherein the set of network services comprises at least one of a load balancing service, a network address translation service, an encryption service, a DHCP service, a VPN service, and a firewall service.
18. The non-transitory machine readable medium of claim 10 , wherein the set of instructions for using the service templates comprises sets of instructions for:
identifying the network services specified in the set of service templates;
associating each application component with a set of service tags, each service tag identifying a network service that is needed for the associated application component.