Unified network management for heterogeneous edge enterprise network
View Patent ↗A system and method are provided which facilitate a unified network management for a heterogeneous edge enterprise network. In one aspect, the system establishes, by a cloud controller, a secure connection to an edge device in an edge network. The cloud controller deploys to the edge device a module which includes a proxy agent, thereby allowing the module to be installed on the edge device. The system monitors data obtained from the edge device based on a set of rules. Responsive to detecting a trigger condition based on the monitored data, the system performs a predetermined action corresponding to the detected trigger condition. The predetermined action can comprise sending a configuration command to be executed on the edge device or sending an action to be performed by the proxy agent on other entities communicatively coupled to the edge network (e.g., client devices and applications).
1 . A computer-implemented method, comprising:
establishing, by a cloud controller, a secure connection to an edge device in an edge network;
deploying, by the cloud controller to the edge device, a module which includes a proxy agent, thereby allowing the module to be installed on the edge device;
monitoring data obtained from the edge device based on a set of rules; and
responsive to detecting a trigger condition based on the monitored data, performing a predetermined action corresponding to the detected trigger condition,
wherein the predetermined action comprises sending a configuration command to the edge device, thereby allowing the proxy agent to execute the configuration command on the edge device.
2 . The method of claim 1 , wherein establishing the secure connection to the edge device is based on the edge device starting up and connecting, registering, and authenticating with the cloud controller and further comprises:
establishing a secure tunnel between a network comprising the cloud controller and a site comprising the edge network.
3 . The method of claim 1 ,
wherein the module deployed to the edge device includes two or more proxy agents, and
wherein a respective proxy agent communicates via an application programming interface with the edge device, an application, a network entity, a network device, or a third party device.
4 . The method of claim 1 ,
wherein the module deployed to the edge device comprises a vendor-agnostic containerized client which can be deployed remotely in any network device.
5 . The method of claim 1 , wherein monitoring the data obtained from the edge device based on the set of rules further comprises at least one of:
retrieving data from the edge device; and
receiving data from the edge device based on a first message received from the edge device via a message bus, wherein the cloud controller subscribes to the first message from the edge device.
6 . The method of claim 5 , wherein the first message comprises at least one of:
a notification indicating to the cloud controller to retrieve certain data from the edge device; and
the certain data.
7 . The method of claim 1 , wherein the cloud controller comprises:
an orchestration manager which includes a container orchestrator component, wherein the container orchestrator component deploys the module to the edge device;
a workflow manager which includes a sensor component and a scheduler component, wherein the sensor component obtains the data from the edge device, and wherein the scheduler component schedules the monitoring of the data obtained from the edge device; and
a configuration manager which includes an action component.
8 . The method of claim 7 , wherein the configuration manager:
collects data related to a configuration of the edge device;
checks the collected data to determine whether to change the configuration of the edge device; and
responsive to determining to change the configuration of the edge device, sends the configuration command to the proxy agent installed on the edge device, thereby allowing the proxy agent to execute the configuration command on the edge device.
9 . The method of claim 1 ,
wherein the rules are configured by the cloud controller or by a user associated with the cloud controller or the edge device, and
wherein the rules define workflows to be automatically executed by the cloud controller based on the monitored data.
10 . The method of claim 9 ,
wherein the rules are configured by the user via a graphical user interface displayed on a display screen of a computing device associated with the user.
11 . The method of claim 1 ,
wherein the detected trigger condition is further based on a comparison of a predetermined threshold to at least one of the following:
a health of the edge device;
a current or expected power usage of the edge device; and
a metric relating to route statistics or traffic flow associated with the edge device; and
wherein the predetermined action corresponding to the detected trigger condition comprises at least one of:
power cycling the edge device;
rerouting traffic to mitigate damage to the edge device; and
configuring a setting of the edge device.
12 . The method of claim 1 , wherein the predetermined action corresponding to the detected trigger condition further comprises at least one of:
a first action associated with the edge device; and
a second action associated with an application or a network device to which the edge device is communicatively coupled, wherein the second action is performed on the application or the network device based on an application programming interface available to the proxy agent in the edge device.
13 . An apparatus comprising:
at least one processor;
a machine-readable storage medium comprising instructions executable by the at least one processor to implement a cloud controller comprising an orchestration manager, a workflow manager, a rules/workflows unit, and a configuration manager;
a message bus; and
network connectivity channels,
wherein a secure tunnel is established between a network comprising the cloud controller and a physical site comprising an edge network,
wherein the orchestration manager deploys to an edge device in the edge network a module which includes a proxy agent, thereby allowing the module to be installed on the edge device;
wherein the workflow manager obtains data from the edge device and monitors the obtained data from the edge device based on a set of rules managed by the rules/workflows unit, and
wherein responsive to the cloud controller detecting a trigger condition based on the monitored data, the cloud controller performs a predetermined action corresponding to the detected trigger condition.
14 . The apparatus of claim 13 ,
wherein the proxy agent communicates via an application programming interface with the edge device, an application, a network entity, a network device, or a third party device.
15 . The apparatus of claim 13 , wherein the configuration manager:
collects data related to a configuration of the edge device;
checks the collected data to determine whether to change the configuration of the edge device; and
responsive to determining to change the configuration of the edge device, sends the configuration command to the proxy agent installed on the edge device, thereby allowing the proxy agent to execute the configuration command on the edge device.
16 . The apparatus of claim 13 ,
wherein the module deployed to the edge device further includes a data aggregator component which aggregates collected data, and
wherein the proxy agent returns the aggregated collected data to a sensor component of the workflow manager.
17 . The apparatus of claim 13 ,
wherein the edge network comprises a plurality of edge devices.
18 . The apparatus of claim 13 ,
wherein the detected trigger condition is further based on a comparison of a predetermined threshold to at least one of the following:
a health of the edge device;
a current or expected power usage of the edge device; and
a metric relating to route statistics or traffic flow associated with the edge device; and
wherein the predetermined action corresponding to the detected trigger condition comprises at least one of:
power cycling the edge device;
rerouting traffic to mitigate damage to the edge device; and
configuring a setting of the edge device.
19 . A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method, the method comprising:
establishing, by a cloud controller, a secure connection to an edge device in an edge network;
deploying, by the cloud controller to the edge device, a module which includes a proxy agent, thereby allowing the module to be installed on the edge device;
monitoring data obtained from the edge device based on a set of rules; and
responsive to detecting a trigger condition based on the monitored data, performing a predetermined action corresponding to the detected trigger condition,
wherein the predetermined action comprises at least one of:
sending a configuration command to the edge device to be executed on the edge device; and
sending an action to be performed by the proxy agent on other entities communicatively coupled to the edge network, thereby allowing the proxy agent to perform the predetermined action.
20 . The non-transitory storage medium of claim 19 ,
wherein the module deployed to the edge device comprises a vendor-agnostic containerized client which can be deployed remotely in any network device.