Cluster federation and trust in a cloud environment

    公开(公告)号:US10185497B2

    公开(公告)日:2019-01-22

    申请号:US15627101

    申请日:2017-06-19

    Abstract: An improved scalable object storage system allows multiple clusters to work together. In one embodiment, a trust and federation relationship is established between a first cluster and a second cluster. This is done by designating a first cluster as a trust root. The trust root receives contact from another cluster, and the two clusters exchange cryptographic credentials. The two clusters mutually authenticate each other based upon the credentials, and optionally relative to a third information service, and establish a service connection. Services from the remote cluster are registered as being available to the cluster designated as the trust root. Multi-cluster gateways can also be designated as the trust root, and joined clusters can be mutually untrusting. Two one-way trust and federation relationships can be set up to form a trusted bidirectional channel.

    VIRTUAL MULTI-CLUSTER CLOUDS
    4.
    发明申请
    VIRTUAL MULTI-CLUSTER CLOUDS 有权
    虚拟多集群云

    公开(公告)号:US20160226931A9

    公开(公告)日:2016-08-04

    申请号:US14249301

    申请日:2014-04-09

    Abstract: An improved scalable object storage system includes methods and systems allowing multiple clusters to work together. Users working with a first cluster, or with a multi-cluster gateway, can ask for services and have the request or data transparently proxied to a second cluster. This gives transparent cross-cluster replication, as well as multi-cluster compute or storage farms based upon spot availability or various provisioning policies. Vendors providing a cloud storage “frontend” can provide multiple backends simultaneously. In one embodiment, a multi-cluster gateway can have a two, three, or higher-level ring that transparently matches an incoming request with the correct cluster. In the ring, a request is first mapped to an abstract “partition” based on a consistent hash function, and then one or more constrained mappings map the partition number to an actual resource. In another embodiment, the multi-cluster gateway is a dumb gateway, and the rings are located only at the cluster level.

    Abstract translation: 改进的可扩展对象存储系统包括允许多个集群一起工作的方法和系统。 使用第一个集群或多集群网关的用户可以要求服务,并将请求或数据透明地代理到第二个集群。 这将提供透明的跨群集复制,以及基于现场可用性或各种配置策略的多群集计算或存储场。 提供云存储“前端”的厂商可以同时提供多个后端。 在一个实施例中,多集群网关可以具有两个,三个或更高级别的环,其使用正确的集群透明地匹配传入请求。 在环中,请求首先基于一致的哈希函数映射到抽象“分区”,然后一个或多个约束映射将分区号映射到实际资源。 在另一个实施例中,多群集网关是哑网关,而环仅位于群集级。

    CLUSTER FEDERATION AND TRUST
    5.
    发明申请
    CLUSTER FEDERATION AND TRUST 有权
    集群联合和信任

    公开(公告)号:US20150156136A1

    公开(公告)日:2015-06-04

    申请号:US14555289

    申请日:2014-11-26

    Abstract: An improved scalable object storage system allows multiple clusters to work together. In one embodiment, a trust and federation relationship is established between a first cluster and a second cluster. This is done by designating a first cluster as a trust root. The trust root receives contact from another cluster, and the two clusters exchange cryptographic credentials. The two clusters mutually authenticate each other based upon the credentials, and optionally relative to a third information service, and establish a service connection. Services from the remote cluster are registered as being available to the cluster designated as the trust root. Multi-cluster gateways can also be designated as the trust root, and joined clusters can be mutually untrusting. Two one-way trust and federation relationships can be set up to form a trusted bidirectional channel.

    Abstract translation: 改进的可扩展对象存储系统允许多个集群一起工作。 在一个实施例中,在第一集群和第二集群之间建立信任和联合关系。 这是通过将第一个集群指定为信任根来完成的。 信任根接收来自另一个集群的联系人,两个集群交换加密凭据。 两个集群基于证书彼此相互认证,并且可选地相对于第三信息服务,并建立服务连接。 远程集群的服务被注册为指定为信任根的集群可用。 多集群网关也可以指定为信任根,并且连接的集群可以相互不可信。 可以设置两个单向信任和联合关系,形成可信双向通道。

    System and Method for Exposing Cloud Stored Data to a Content Delivery Network
    6.
    发明申请
    System and Method for Exposing Cloud Stored Data to a Content Delivery Network 有权
    将云存储数据暴露给内容交付网络的系统和方法

    公开(公告)号:US20150220561A1

    公开(公告)日:2015-08-06

    申请号:US14690040

    申请日:2015-04-17

    Abstract: A system for exposing data stored in a cloud computing system to a content delivery network provider includes a database configured to receive and store metadata about the data, the database being implemented in the cloud computing system to store configuration metadata for the data related to the content delivery network, and an origin server configured to receive requests for the data from the content delivery network provider, and configured to provide the data to the content delivery network provider based on the metadata.

    Abstract translation: 用于将存储在云计算系统中的数据暴露给内容传送网络提供者的系统包括被配置为接收和存储关于数据的元数据的数据库,该数据库被实施在云计算系统中以存储与内容有关的数据的配置元数据 传送网络和源服务器,其被配置为从内容传送网络提供商接收对数据的请求,并且被配置为基于所述元数据向所述内容传送网络提供者提供所述数据。

    VIRTUAL MULTI-CLUSTER CLOUDS
    7.
    发明申请
    VIRTUAL MULTI-CLUSTER CLOUDS 有权
    虚拟多集群云

    公开(公告)号:US20140304334A1

    公开(公告)日:2014-10-09

    申请号:US14249301

    申请日:2014-04-09

    Abstract: An improved scalable object storage system includes methods and systems allowing multiple clusters to work together. Users working with a first cluster, or with a multi-cluster gateway, can ask for services and have the request or data transparently proxied to a second cluster. This gives transparent cross-cluster replication, as well as multi-cluster compute or storage farms based upon spot availability or various provisioning policies. Vendors providing a cloud storage “frontend” can provide multiple backends simultaneously. In one embodiment, a multi-cluster gateway can have a two, three, or higher-level ring that transparently matches an incoming request with the correct cluster. In the ring, a request is first mapped to an abstract “partition” based on a consistent hash function, and then one or more constrained mappings map the partition number to an actual resource. In another embodiment, the multi-cluster gateway is a dumb gateway, and the rings are located only at the cluster level.

    Abstract translation: 改进的可扩展对象存储系统包括允许多个集群一起工作的方法和系统。 使用第一个集群或多集群网关的用户可以要求服务,并将请求或数据透明地代理到第二个集群。 这将提供透明的跨群集复制,以及基于现场可用性或各种配置策略的多群集计算或存储场。 提供云存储“前端”的供应商可以同时提供多个后端。 在一个实施例中,多集群网关可以具有两个,三个或更高级别的环,其使用正确的集群透明地匹配传入请求。 在环中,请求首先基于一致的哈希函数映射到抽象“分区”,然后一个或多个约束映射将分区号映射到实际资源。 在另一个实施例中,多群集网关是哑网关,而环仅位于群集级。

    Virtual multi-cluster clouds
    10.
    发明授权
    Virtual multi-cluster clouds 有权
    虚拟多云云

    公开(公告)号:US09405781B2

    公开(公告)日:2016-08-02

    申请号:US14249301

    申请日:2014-04-09

    Abstract: An improved scalable object storage system includes methods and systems allowing multiple clusters to work together. Users working with a first cluster, or with a multi-cluster gateway, can ask for services and have the request or data transparently proxied to a second cluster. This gives transparent cross-cluster replication, as well as multi-cluster compute or storage farms based upon spot availability or various provisioning policies. Vendors providing a cloud storage “frontend” can provide multiple backends simultaneously. In one embodiment, a multi-cluster gateway can have a two, three, or higher-level ring that transparently matches an incoming request with the correct cluster. In the ring, a request is first mapped to an abstract “partition” based on a consistent hash function, and then one or more constrained mappings map the partition number to an actual resource. In another embodiment, the multi-cluster gateway is a dumb gateway, and the rings are located only at the cluster level.

    Abstract translation: 改进的可扩展对象存储系统包括允许多个集群一起工作的方法和系统。 使用第一个集群或多集群网关的用户可以要求服务,并将请求或数据透明地代理到第二个集群。 这将提供透明的跨群集复制,以及基于现场可用性或各种配置策略的多群集计算或存储场。 提供云存储“前端”的供应商可以同时提供多个后端。 在一个实施例中,多集群网关可以具有两个,三个或更高级别的环,其使用正确的集群透明地匹配传入请求。 在环中,请求首先基于一致的哈希函数映射到抽象“分区”,然后一个或多个约束映射将分区号映射到实际资源。 在另一个实施例中,多群集网关是哑网关,而环仅位于群集级。

Patent Agency Ranking