IP Library Granted Patent US 9,384,030
Granted Patent B2
US 9,384,030 · App. 13/207,813 · Granted Jul 5, 2016

System and method for deploying a dynamic virtual network address translation appliance

Inventor: Keith Richard Warno (Mastic Beach, NY)
Assignee: CA, Inc.
G06F9/45558H04L61/2514H04L61/2535G06F2009/45562
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,384,030
App. No.
13/207,813
Filed
Aug 11, 2011
Granted
Jul 5, 2016
Kind
B2
Art Unit
2443
USPC
709/220
Abstract

According to one embodiment of the present disclosure, a method for deploying a virtual network address translation (NAT) appliance includes receiving a request to generate a virtual machine environment. The method also includes generating the virtual machine environment from an environment template, the virtual machine environment comprising a first virtual machine. The method further includes configuring a hostname for a virtual NAT appliance instance, and configuring one or more private network settings for the virtual NAT appliance instance. The method also includes generating the virtual NAT appliance instance from the NAT appliance template, the NAT appliance instance comprising a public network interface and a private network interface.

Claims (61)

1. A method comprising:

receiving a first request to generate a first virtual machine environment;

generating the first virtual machine environment by cloning an environment template, the environment template comprising a first plurality of virtual machines comprising a web server image and a database server image;

receiving a second request to generate a second virtual machine environment;

generating the second virtual machine environment by cloning the environment template;

wherein the environment template, the first virtual machine environment and the second virtual machine environment each comprise a common hostname;

configuring first and second hostnames different from the common hostname for first and second virtual network address translation (NAT) appliance instances, respectively;

configuring first and second private network settings for the first and second virtual NAT appliance instances, respectively;

generating the first and second virtual NAT appliance instances from a NAT appliance template, the NAT appliance template comprising a public network interface and a private network interface;

logically deploying the first virtual NAT appliance instance between the first virtual machine environment and a network; and

logically deploying the second virtual NAT appliance instance between the second virtual machine environment and the network.

2. The method of claim 1 , further comprising generating a virtual switch, the virtual switch operable to facilitate communication between the first plurality of virtual machines and the first private network interface.

3. The method of claim 1 , wherein configuring the first and second private network settings for the first and second NAT appliance instances comprises configuring services on the first and second NAT appliance instances operable to provide host configuration services.

4. The method of claim 3 , wherein the host configuration services comprise domain name system (DNS) and dynamic host configuration protocol (DHCP) services.

5. The method of claim 1 , wherein configuring the first and second private network settings for the first and second NAT appliance instances comprises configuring virtual private network (VPN) services.

6. The method of claim 1 , wherein configuring the first and second private network settings for the first and second NAT appliance instances comprises applying port forwarding rules.

7. The method of claim 1 , wherein configuring the first and second private network settings for the first and second NAT appliance instances comprises configuring firewall rules.

8. The method of claim 1 , further comprising:

receiving an address from a host configuration server on the network; and

assigning the address to the public network interface of one of the first and second NAT appliance instances generated from the NAT appliance template.

9. A system, comprising:

one or more processors operable to:

receive a first request to generate a first virtual machine environment;

generate the first virtual machine environment by cloning an environment template, the environment template comprising a first plurality of virtual machines comprising a web server image and a database server image;

receive a second request to generate a second virtual machine environment;

generate the second virtual machine environment by cloning the environment template;

wherein the environment template, the first virtual machine environment and the second virtual machine environment each comprise a common hostname;

configure first and second hostnames different from the common hostname for first and second virtual NAT appliance instances, respectively;

configure first and second private network settings for the first and second virtual NAT appliance instances, respectively;

generate the first and second virtual NAT appliance instances from a NAT appliance template, the NAT appliance template comprising a public network interface and a private network interface;

logically deploy the first virtual NAT appliance between the first virtual machine environment and a network; and

logically deploy the second virtual NAT appliance between the second virtual machine environment and the network.

10. The system of claim 9 , the one or more processors being further operable to generate a virtual switch, the virtual switch operable to facilitate communication between the first plurality of virtual machines and the first private network interface.

11. The system of claim 9 , wherein the one or more processors operable to configure the first and second private network settings for the first and second NAT appliance instances are further operable to configure services on the first and second NAT appliance instances operable to provide host configuration services.

12. The system of claim 11 , wherein the host configuration services comprise domain name system (DNS) and dynamic host configuration protocol (DHCP) services.

13. The system of claim 9 , wherein the one or more processors operable to configure the first and second private network settings for the first and second NAT appliance instances are further operable to configure virtual private network (VPN) services on the first and second NAT appliance instances.

14. The system of claim 9 , wherein the one or more processors operable to configure the first and second private network settings for the first and second NAT appliance instances are further operable to apply port forwarding rules.

15. The system of claim 9 , wherein the one or more processors operable to configure the first and second private network settings for the first and second NAT appliance instances are further operable to configure firewall rules.

16. The system of claim 9 , the one or more processors being further operable to:

receive an address from a host configuration server on the network; and

assign the address to the public network interface of one of the first and second NAT appliance instances generated from the NAT appliance template.

17. Logic encoded in a non-transitory computer-readable medium, the logic comprising instructions that when executed by a processor are operable to:

receive a first request to generate a first virtual machine environment;

generate the first virtual machine environment by cloning an environment template, the environment template comprising a first plurality of virtual machines comprising a web server image and a database server image;

receive a second request to generate a second virtual machine environment;

generate the second virtual machine environment by cloning the environment template;

wherein the environment template, the first virtual machine environment and the second virtual machine environment each comprise a common hostname;

configure first and second hostnames different from the common hostname, for first and second virtual NAT appliance instances, respectively;

configure first and second private network settings for the first and second virtual NAT appliance instances, respectively;

generate the first and second virtual NAT appliance instances from a NAT appliance template, the NAT appliance template comprising a public network interface and a private network interface;

logically deploy the first virtual NAT appliance between the first virtual machine environment and a network; and

logically deploy the second virtual NAT appliance between the second virtual machine environment and the network.

18. The logic of claim 17 , further comprising instructions operable to generate a virtual switch, the virtual switch operable to facilitate communication between the first plurality of virtual machines and the first private network interface.

19. The logic of claim 17 , wherein the instructions operable to configure the first and second private network settings for the first and second NAT appliance instances are further operable to configure services on the first and second NAT appliance instances operable to provide host configuration services.

20. The logic of claim 19 , wherein the host configuration services comprise domain name system (DNS) and dynamic host configuration protocol (DHCP) services.

21. The logic of claim 17 , wherein the instructions operable to configure the first and second private network settings for the first and second NAT appliance instances are further operable to apply port forwarding rules.

22. The logic of claim 17 , wherein the instructions operable to configure the first and second private network settings for the first and second NAT appliance instances are further operable to configure firewall rules.

23. The logic of claim 17 , further comprising instructions operable to:

receive an address from a host configuration server on the network; and

assign the address to the public network interface of one of the first and second NAT appliance instances generated from the NAT appliance template.

24. The method of claim 6 , wherein each of the environment template, the first virtual machine environment and the second virtual machine environment comprise a common network address.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 17, 2016
From: COMPUTER ASSOCIATES THINK, INC.
To: CA, INC.
Reel/Frame 038014/0172 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 11, 2011
From: WARNO, KEITH RICHARD
To: COMPUTER ASSOCIATES THINK, INC.
Reel/Frame 026735/0892 →
Continuity (1)
Related Publication 20130041987A1 · Feb 14, 2013