Edge-based unified endpoint management for management continuity
The present disclosure fallback management of managed devices utilizing edge management servers that periodically poll a primary management server. If the primary management server is unreachable, the edge management servers can assume management of a population of managed devices.
1 . A computer system comprising:
a management computer including a processor and memory; and
a plurality of edge management computers each including a processor and memory,
wherein the management computer is configured to execute instructions stored in the memory of the management computer to execute a management service, including performing the following steps:
identify the edge management computers, which are executing an edge management service;
identify a population of managed devices configured to be remotely managed by the management service; and
assign each of the managed devices to a respective one of the edge management computers based upon at least one proximity factor, and
wherein the edge management computers are configured to execute instructions stored in the memory of the edge management computers to execute the edge management service, including performing the following steps:
synchronize data corresponding to respective managed devices with the management service;
periodically poll the management service to determine whether the management service is unreachable over a network connection between the edge management computers and the management computer; and
in response to determining that the management service is unreachable over the network connection, assume management of the managed devices, including instructing each of the managed devices to communicate with a respective one of the edge management computers.
2 . The computer system of claim 1 , wherein the at least one proximity factor comprises locations assigned to users of the managed devices.
3 . The computer system of claim 1 , wherein the management service assigns each of the managed devices to a respective one of the edge management computers based upon a geographic proximity to the respective one of the edge management computers.
4 . The computer system of claim 1 , wherein
the edge management service determines that the management service is unreachable over the network connection for a predetermined period of time, and
the edge management service further redirects the managed devices to the management service in response to the management service becoming reachable over the network connection.
5 . The computer system of claim 4 , wherein upon assuming management of the managed devices, the edge management computers communicate with the managed devices over hypertext transfer protocol (HTTP) channels or short-range communication channels.
6 . The computer system of claim 4 , wherein the edge management service synchronizes device data and user data with the management service during a period of time in which the edge management service assumes management of the managed devices.
7 . A method, comprising:
identifying, by a management computer, a plurality of edge management computers executing an edge management service;
identifying, by the management computer, a population of managed devices configured to be remotely managed by a management service running on the management computer;
assigning each of the managed devices to a respective one of the edge management computers based upon at least one proximity factor;
synchronizing, by the edge management computers, data corresponding to respective managed devices with the management service;
periodically polling, by the edge management computers, the management service to determine whether the management service is unreachable over a network connection between the edge management computers and the management computer; and
in response to determining that the management service is unreachable over the network connection, assuming, by the edge management computers, management of the managed devices, including instructing each of the managed devices to communicate with a respective one of the edge management computers.
8 . The method of claim 7 , wherein the at least one proximity factor comprises locations assigned to users of the managed devices.
9 . The method of claim 7 , further comprising:
assigning, by the management computer, each of the managed devices to a respective one of the edge management computers based upon a geographic proximity to the respective one of the edge management computers.
10 . The method of claim 7 , further comprising:
determining, by the edge management computers, that the management service is unreachable over the network connection for a predetermined period of time; and
redirecting, by the edge management computers, the managed devices to the management service in response to the management service becoming reachable over the network connection.
11 . The method of claim 10 , further comprising:
upon assuming management of the managed devices, communicating, by the edge management computers with the managed devices, over hypertext transfer protocol (HTTP) channels or short-range communication channels.
12 . The method of claim 10 , further comprising:
synchronizing, by the edge management computers, device data and user data with the management service during a period of time in which the edge management service assumes management of the managed devices.
13 . One or more non-transitory computer-readable media embodying program instructions that, when executed, cause a management computer and a plurality of edge management computers to at least:
identify the edge management computers, which are executing an edge management service;
identify a population of managed devices configured to be remotely managed by a management service;
assign each of the managed devices to a respective one of the edge management computers based upon at least one proximity factor;
synchronize, by the edge management computers, data corresponding to respective managed devices with the management service;
periodically poll the management service to determine whether the management service is unreachable over a network connection between the edge management computers and the management computer; and
in response to determining that the management service is unreachable over the network connection, assume management of the managed devices by the edge management computers, including instructing each of the managed devices to communicate with a respective one of the edge management computers.
14 . The one or more non-transitory computer-readable media of claim 13 , wherein the at least one proximity factor comprises locations assigned to users of the managed devices.
15 . The one or more non-transitory computer-readable media of claim 13 , wherein the management service assigns each of the managed devices to a respective one of the edge management computers based upon a geographic proximity to the respective one of the edge management computers.
16 . The one or more non-transitory computer-readable media of claim 13 , wherein
the edge management service determines that the management service is unreachable over the network connection for a predetermined period of time, and
the edge management service further redirects the managed devices to the management service in response to the management service becoming reachable over the network connection.
17 . The one or more non-transitory computer-readable media of claim 16 , wherein upon assuming management of the managed devices, the edge management computers communicate with the managed devices over hypertext transfer protocol (HTTP) channels or short-range communication channels.
18 . The one or more non-transitory computer-readable media of claim 16 , wherein the edge management service synchronizes device data and user data with the management service during a period of time in which the edge management service assumes management of the managed devices.