Cluster federation and trust in a cloud environment

    公开(公告)号:US10185497B2

    公开(公告)日:2019-01-22

    申请号:US15627101

    申请日:2017-06-19

    Abstract: An improved scalable object storage system allows multiple clusters to work together. In one embodiment, a trust and federation relationship is established between a first cluster and a second cluster. This is done by designating a first cluster as a trust root. The trust root receives contact from another cluster, and the two clusters exchange cryptographic credentials. The two clusters mutually authenticate each other based upon the credentials, and optionally relative to a third information service, and establish a service connection. Services from the remote cluster are registered as being available to the cluster designated as the trust root. Multi-cluster gateways can also be designated as the trust root, and joined clusters can be mutually untrusting. Two one-way trust and federation relationships can be set up to form a trusted bidirectional channel.

    VIRTUAL MULTI-CLUSTER CLOUDS
    4.
    发明申请
    VIRTUAL MULTI-CLUSTER CLOUDS 有权
    虚拟多集群云

    公开(公告)号:US20140304334A1

    公开(公告)日:2014-10-09

    申请号:US14249301

    申请日:2014-04-09

    Abstract: An improved scalable object storage system includes methods and systems allowing multiple clusters to work together. Users working with a first cluster, or with a multi-cluster gateway, can ask for services and have the request or data transparently proxied to a second cluster. This gives transparent cross-cluster replication, as well as multi-cluster compute or storage farms based upon spot availability or various provisioning policies. Vendors providing a cloud storage “frontend” can provide multiple backends simultaneously. In one embodiment, a multi-cluster gateway can have a two, three, or higher-level ring that transparently matches an incoming request with the correct cluster. In the ring, a request is first mapped to an abstract “partition” based on a consistent hash function, and then one or more constrained mappings map the partition number to an actual resource. In another embodiment, the multi-cluster gateway is a dumb gateway, and the rings are located only at the cluster level.

    Abstract translation: 改进的可扩展对象存储系统包括允许多个集群一起工作的方法和系统。 使用第一个集群或多集群网关的用户可以要求服务,并将请求或数据透明地代理到第二个集群。 这将提供透明的跨群集复制,以及基于现场可用性或各种配置策略的多群集计算或存储场。 提供云存储“前端”的供应商可以同时提供多个后端。 在一个实施例中,多集群网关可以具有两个,三个或更高级别的环,其使用正确的集群透明地匹配传入请求。 在环中,请求首先基于一致的哈希函数映射到抽象“分区”,然后一个或多个约束映射将分区号映射到实际资源。 在另一个实施例中,多群集网关是哑网关,而环仅位于群集级。

    Multi-Cluster Container Replication
    5.
    发明申请
    Multi-Cluster Container Replication 审中-公开
    多集群容器复制

    公开(公告)号:US20160269481A1

    公开(公告)日:2016-09-15

    申请号:US14979035

    申请日:2015-12-22

    Abstract: An improved scalable object storage system includes methods and systems allowing multiple clusters to work together. In one embodiment, there is a multi-cluster synchronization system between two or more clusters. Each cluster has a cluster-internal network, with object storage services and container services. The container services track and replicate metadata associated with the object storage service. An intercluster network connects the two clusters and performs a one-way synchronization of the objects and metadata associated with a particular container. This can be done either through the direct association of the container and object storage services, such as through a trust and federation relationship, or it can be opaque, so that the cross-cluster replication treats the remote repository as a black box and uses the external API to call and manipulate the files. In a further embodiment, multiple synchronization relationships can be set up, either in a cycle (with two or more participants), in a line, or in a tree. For example, the multi-cluster replication could be used to transparently synchronize objects in a CDN network.

    Abstract translation: 改进的可扩展对象存储系统包括允许多个集群一起工作的方法和系统。 在一个实施例中,在两个或更多个集群之间存在多集群同步系统。 每个集群都有一个集群内部网络,具有对象存储服务和容器服务。 容器服务跟踪和复制与对象存储服务相关联的元数据。 集群间网络连接两个集群,并执行与特定容器关联的对象和元数据的单向同步。 这可以通过容器和对象存储服务的直接关联来完成,例如通过信任和联合关系,或者它可以是不透明的,使得跨群集复制将远程存储库视为黑盒子,并使用 外部API来调用和操作文件。 在另一个实施例中,可以在循环(具有两个或多个参与者),一行或一个树中建立多个同步关系。 例如,多集群复制可用于透明地同步CDN网络中的对象。

    VIRTUAL MULTI-CLUSTER CLOUDS
    6.
    发明申请
    VIRTUAL MULTI-CLUSTER CLOUDS 有权
    虚拟多集群云

    公开(公告)号:US20160226931A9

    公开(公告)日:2016-08-04

    申请号:US14249301

    申请日:2014-04-09

    Abstract: An improved scalable object storage system includes methods and systems allowing multiple clusters to work together. Users working with a first cluster, or with a multi-cluster gateway, can ask for services and have the request or data transparently proxied to a second cluster. This gives transparent cross-cluster replication, as well as multi-cluster compute or storage farms based upon spot availability or various provisioning policies. Vendors providing a cloud storage “frontend” can provide multiple backends simultaneously. In one embodiment, a multi-cluster gateway can have a two, three, or higher-level ring that transparently matches an incoming request with the correct cluster. In the ring, a request is first mapped to an abstract “partition” based on a consistent hash function, and then one or more constrained mappings map the partition number to an actual resource. In another embodiment, the multi-cluster gateway is a dumb gateway, and the rings are located only at the cluster level.

    Abstract translation: 改进的可扩展对象存储系统包括允许多个集群一起工作的方法和系统。 使用第一个集群或多集群网关的用户可以要求服务,并将请求或数据透明地代理到第二个集群。 这将提供透明的跨群集复制,以及基于现场可用性或各种配置策略的多群集计算或存储场。 提供云存储“前端”的厂商可以同时提供多个后端。 在一个实施例中,多集群网关可以具有两个,三个或更高级别的环,其使用正确的集群透明地匹配传入请求。 在环中,请求首先基于一致的哈希函数映射到抽象“分区”,然后一个或多个约束映射将分区号映射到实际资源。 在另一个实施例中,多群集网关是哑网关,而环仅位于群集级。

    CLUSTER FEDERATION AND TRUST
    7.
    发明申请
    CLUSTER FEDERATION AND TRUST 有权
    集群联合和信任

    公开(公告)号:US20150156136A1

    公开(公告)日:2015-06-04

    申请号:US14555289

    申请日:2014-11-26

    Abstract: An improved scalable object storage system allows multiple clusters to work together. In one embodiment, a trust and federation relationship is established between a first cluster and a second cluster. This is done by designating a first cluster as a trust root. The trust root receives contact from another cluster, and the two clusters exchange cryptographic credentials. The two clusters mutually authenticate each other based upon the credentials, and optionally relative to a third information service, and establish a service connection. Services from the remote cluster are registered as being available to the cluster designated as the trust root. Multi-cluster gateways can also be designated as the trust root, and joined clusters can be mutually untrusting. Two one-way trust and federation relationships can be set up to form a trusted bidirectional channel.

    Abstract translation: 改进的可扩展对象存储系统允许多个集群一起工作。 在一个实施例中,在第一集群和第二集群之间建立信任和联合关系。 这是通过将第一个集群指定为信任根来完成的。 信任根接收来自另一个集群的联系人,两个集群交换加密凭据。 两个集群基于证书彼此相互认证,并且可选地相对于第三信息服务,并建立服务连接。 远程集群的服务被注册为指定为信任根的集群可用。 多集群网关也可以指定为信任根,并且连接的集群可以相互不可信。 可以设置两个单向信任和联合关系,形成可信双向通道。

    Virtual multi-cluster clouds
    9.
    发明授权
    Virtual multi-cluster clouds 有权
    虚拟多云云

    公开(公告)号:US09405781B2

    公开(公告)日:2016-08-02

    申请号:US14249301

    申请日:2014-04-09

    Abstract: An improved scalable object storage system includes methods and systems allowing multiple clusters to work together. Users working with a first cluster, or with a multi-cluster gateway, can ask for services and have the request or data transparently proxied to a second cluster. This gives transparent cross-cluster replication, as well as multi-cluster compute or storage farms based upon spot availability or various provisioning policies. Vendors providing a cloud storage “frontend” can provide multiple backends simultaneously. In one embodiment, a multi-cluster gateway can have a two, three, or higher-level ring that transparently matches an incoming request with the correct cluster. In the ring, a request is first mapped to an abstract “partition” based on a consistent hash function, and then one or more constrained mappings map the partition number to an actual resource. In another embodiment, the multi-cluster gateway is a dumb gateway, and the rings are located only at the cluster level.

    Abstract translation: 改进的可扩展对象存储系统包括允许多个集群一起工作的方法和系统。 使用第一个集群或多集群网关的用户可以要求服务,并将请求或数据透明地代理到第二个集群。 这将提供透明的跨群集复制,以及基于现场可用性或各种配置策略的多群集计算或存储场。 提供云存储“前端”的供应商可以同时提供多个后端。 在一个实施例中,多集群网关可以具有两个,三个或更高级别的环,其使用正确的集群透明地匹配传入请求。 在环中,请求首先基于一致的哈希函数映射到抽象“分区”,然后一个或多个约束映射将分区号映射到实际资源。 在另一个实施例中,多群集网关是哑网关,而环仅位于群集级。

Patent Agency Ranking