Patent Application
20090019535
1. Field of the Invention
The subject invention relates to a system and method to enable a user to remotely build and customize a server along with the IT infrastructure that fits the user's needs on-line and in real time.
2. Related Art
One of the critical infrastructures in the world of electronic commerce is the server. Servers are a combination of hardware and software that accepts inbound connections from the user in order to service requests by sending back responses. Typical infrastructures associated with the physical server itself may include firewalls, operating systems, applications, virtual private networking (VPN), storage networks and disks, Local and Wide Area Network capabilities as well as features necessary for the maintenance and monitoring of the server.
Creating the necessary custom-tailored server infrastructure and associated IT infrastructure is an arduous and time consuming process. In a typical situation, illustrated in
One of the possible solutions is to incorporate a virtual layer using server virtualization software for allocating and delivering IT resources to clients in a shared manner. A virtual layer allocates virtual memory among a rack of servers; hence it is possible for multiple users to have information located on the same server. However, such an arrangement can lead to various problems. For example, conflicting software packages or other setups that are located on the same server can cause the server to not function as the users had intended and could potentially induce a server failure. A server hardware, operating system (OS) or application failures under this setup can affect multiple users, thereby potentially crippling multiple businesses. Performance concerns and licensing issues are common problems faced with operating virtualized environments. Furthermore, shared memory storage subsystems could lead to longer response times as memory is not efficiently allocated. It is evident that such a virtual layer will therefore create an inefficient allocation of resources. Numerous security concerns arise in a shared virtual IT environment.
The problems described above are exacerbated in a co-location implementation. In a co-location implementation, a company serves as a real estate-like entity in that it creates a secure and redundant server hosting physical facility, and leases floor space to third parties to locate their servers at the company's facility. The benefits to the third parties is that they do not have to invest in infrastructure required for their servers, which include physical and electronic security, redundant power and cooling delivery, etc. However, it should be immediately apparent that the third party entities would not want to share physical servers with other entities, but rather would want to contain their servers autonomous and physically separated from other third party servers.
Managed hosting solutions provides prepackaged server offerings with associated IT resources in a co-location hosting facility. Such services can include server maintenance, server monitoring, OS, specific applications, storage, back-up services, internet, firewalls, overall management etc. Again, this provide great value to the third party customers, in that they do not need to maintain a large IT department, but can rely on the hosting company, who possesses expertise and employs highly trained professionals, to provide the services required to maintain the severs. However, under such scenario it is also beneficial to physically separate the physical hardware belonging to each third party customer. Such physical separation enables enhanced security and enables tailoring specific services to specific customers. These offerings limit the customer's control of the server environment and often times require the client to wait hours and days for any changes to the configuration. Additionally certain desired features are simply not available to the end user in a managed hosted business model. Dedicated hosting provides less support than managed hosting as the provider only offers the physical hardware with minimal support services for OS and applications.
A further service enabled by the managed or dedicated hosted concept is software services (also referred to in the industry as software as a service (SaaS)). That is, normally when an entity sets up a server it uploads various software required for running the specific applications assigned for the server. For example, an entity may install an operating system and an Exchange application to create an email server. Then, it also needs to install various security software, such as a firewall, anti-virus software, etc. However, in the managed hosting environment the customer may simply buy “seat” licenses for the various software it needs and let the hosting company take care of all the licensing, installation, maintenance, etc., required for running the applications it needs.
Under traditional co-location implementations, the third party customer leases the real estate space, and purchases the hardware to be set-up in the leased space, either by its own personnel or using the co-location company personnel. On the other hand, an emerging implementation is to simply lease server capacity. That is, the co-location company purchases and sets up the servers and all the software requested by the third party customer, and the customer simply leases the computing capacity it needs with the seat licenses for the software it needs. While under such a model the same hardware may be shared by several customers, thereby reducing the cost of hardware, it may lead to complexity, reduced reliability and security issues as different customers require different applications and impose different load levels on the same physical machines. Therefore, it would be beneficial to separate the machines for different customers.
The following summary of the invention is included in order to provide a basic understanding of some aspects and features of the invention. This summary is not an extensive overview of the invention and as such it is not intended to particularly identify key or critical elements of the invention or to delineate the scope of the invention. Its sole purpose is to present some concepts of the invention in a simplified form as a prelude to the more detailed description that is presented below.
According to an aspect of the invention, a method and a remote system are provided for building a custom dedicated and optimally managed hosted server along with the necessary server infrastructure in real time. The invention aims to reduce the time required to create a customized functional server and IT environment to real time and to solve the inherent collision problems within a virtual layer setup. Embodiments of the invention enable the speeds and convenience that are traditionally associated with virtualization and server lease, while at the same time maintaining the security and reliability associated with traditional dedicated and managed hosting, where each customer has separate physical machines.
Various aspects of the subject invention provide a server resources allocation system that reduces the time-consuming process of building a custom made server. In this system, the users merely logs on to the system and specify the customizations that are required for their needs. The system then checks what hardware and software resources are available within the inventory and immediately begins making the necessary arrangements. These customizations are then done in real time without any assembly required. Unlike the allocation techniques that a virtual layer would enact, the central processing system will allocate separate physical server and memory storage subsystems according to the user's requirements in order to provide total autonomy of operation. The operating system and other software that the user requires will then be promptly uploaded and installed onto the server. Other critical infrastructures that the user might require, such as bandwidth requirements, firewall, backup storage, etc., are also installed and/or configured automatically. This server is then connected to as communication network, such as the Internet or customer private network (intranet), rendering it available for immediate use to handle the inbound and outbound connections from the user and capable of handling the user's needs. Furthermore, if changes in the server or IT environment are needed, the user merely has to make those changes in the user interface or through web services application programming interface (API) of the central processing system, and the server along with the accompanying infrastructure is updated in real time. Furthermore, any software licenses needed for the software installed is taken care of by the system.
According to other aspects of the invention, the system also monitors the available inventory that the vendor has and provides inventory reports so as to enable maintaining a sufficient level of hardware or software parts. For example, if the inventory indicates a short supply of licenses for various software packages, more licenses will be ordered. If there is a short supply of storage or physical servers, more hardware is ordered. This is done in advance in order to meet planned or unexpected demands that users might require. Supply chain management (SCM) inventory data including calculations of requirements and projections are communicated to the suppliers from the system over a secure network link in near real time to minimize inventory shortages or accumulations of excess inventory.
According to aspects of the invention, a method of creating a customized IT infrastructure, comprising: receiving IT environment request from a user via a user interface or API; providing the request to a central processing system; operating the central processing system to execute the request in a series of processes in comparison to the available inventory to: select a server from a plurality of available servers and allocate the server as an assigned server to the user; select storage device from storage facility and allocate the storage device as an assigned storage facilities to the user; couple the assigned server to the assigned storage facility; install and configure software onto the assigned server according to the request; and, connect the assigned server to a communication network.
The coupling of the assigned server to the assigned storage facility may comprise interposing a backend network between the plurality of servers and the network storage facility, and operating switches of the backend network to enable communication between the assigned server and the assigned storage facility. Connecting the assigned server to a communication network may comprise coupling the plurality of servers to a frontend network and operating switches of the frontend network to enable communication between the assigned server and the communication network. Connecting the assigned server to the communication network may further comprise assigning firewall from a pool of firewall resources to the assigned server. The method may further comprise: operating a monitoring module to monitor the inventory of available hardware and software components and using predictive calculations to issue a notice when more components are needed to be added. The method may further comprise operating the central processing system to automatically assign and track seat licenses to the user according to the user's request, and install software onto the server according to the seat licenses. The method may further comprise operating the central processing system to assign an automated backup and archive policy according to the request of the user. The method may further comprise enabling the user to apply API function calls to control the customized IT infrastructure. The method may further comprise constructing a library of scripts and enabling the user access to apply any script from the library to the customized IT infrastructure. The method may further comprise operating the central processing system to issue alerts when resources of the customized IT infrastructure should be increased or decreased. The method may further comprise operating the central processing system to provide the user with an estimated cost associated with resources increase or decrease. The method may further comprise operating the central processing system to store a network environment store point, enabling restoring of the entire customized IT infrastructure.
The storing a network environment store point may comprise storing data representing configuration of the customized IT infrastructure's servers, storage, OS, applications, storage network, network switches and routers, Internet connectivity, Intranet connectivity, firewall, IDS, IPS and load balancing. The method may further comprise operating the central processing system to store a snapshot of the data stored in the storage device. When a storage disk of the storage resources is released to the storage facility, the central processing system may be operated to wipe the storage disk by writing patterns of 1's 0's and random data patterns. The method may further comprise: upon receiving an performance change request, operating the central processing system to migrate the assigned server to another server from a plurality of available servers and restoring the customized IT infrastructure utilizing the another server. The method may further comprise: upon receiving a repurpose request, operating the central processing system to store a snapshot of the assigned server and reboot the server using a modified configuration. The method may further comprise: upon receiving a request to restore a repurposed server, operating the central processing system to reboot the repurposed server the image of the assigned server. The method may further comprise: upon receiving a request to clone the customized IT infrastructure, operating the central processing system to: select a second server from a plurality of available servers, and allocate the second server as an assigned cloned server to the user; couple the assigned cloned server to the assigned image storage facility; and, connect the assigned cloned server to a communication network. The method may further comprise storing a golden image representing an IT infrastructure of a predetermined configuration, and when the IT environment request specifies to replicate the golden image, modifying the operations of the central processing system to: select the assigned server such that it has performance characteristics correlated to specification of the golden image; select the storage device such that it has performance characteristics correlated to specification of the golden image; and, connect the assigned cloned server to a communication network according to specification of the golden image. The method may further comprise, storing in the central processing system a list of users and enforcing an authority level corresponding to each user. The method may further comprise, storing in the central processing system a list of locks, each lock identifying a resource and at least one action that may not be performed upon the resource without authorization. The method may further comprise storing a plurality of IT environment images submitted by users, each representing an IT infrastructure of a predetermined configuration, and providing the list to other users. The method may further comprise providing remote user access to the assigned server at the keyboard, video, and mouse level, including access to bios level boot screens and command functions. The method may further comprise providing remote mounting utility, enabling a user to remotely mount a volume to the assigned server.
According to aspects of the invention, a system capable of creating a customized server environment in real time is provided, comprising: a plurality of servers; a plurality of storage disks; a switched network linking the plurality of servers to the plurality of storage disks; software components for a server infrastructure; a provisioning engine programmed to, upon receiving a user's instructions to generate a customized server environment: a. take inventory of the plurality of compute servers, plurality of storage disks, and software components; b. assign at least one server and one storage disk to the user to thereby define assigned computing resources and assigned storage resources dedicated to the user; c. configure the switched network to couple the assigned computing resources and assigned storage resources; d. configure the computing resources and assigned storage resources according to specification referenced by the user's instructions; and, e. install on the computing resources appropriate software components to thereby provide a customized server environment according to the specification referenced by the user's instructions. The switched network may comprise a backend network positioned between the plurality of servers and plurality of storage disks and a frontend network coupled between the plurality of servers and at least one of the Internet and an Intranet. The system may further comprise a storage network coupling the plurality of storage disks to the backend network. The frontend network may comprise a network switch and at least one intelligent high speed interconnect module, and wherein the network switch couples the intelligent high speed interconnect module to at least one of the Internet and Intranet.
The system may further comprise a secure portal enabling user communication with the provisioning engine. The portal may comprise a user interface and an administrator interface. The system may further comprise firewall facility, and wherein the provisioning engine is further configures to assign firewall to the customized server environment according to the specification referenced by the user's instructions. The system may further comprise a plurality of application adapters, each configured for communication between the provisioning engine and at least one of: compute servers, storage, OS, applications, storage network, network switches, routers, Internet connectivity, intranet connectivity, firewall, intrusion detection system (IDS), intrusion prevention system (IPS), load balancing and third party Enterprise applications. The plurality of servers may comprise a plurality of individual interconnected servers situated in server cabinets, wherein the plurality of storage disks comprises a network storage, and wherein the switched network comprises a backend network positioned between the cabinets and the network storage, and a frontend network coupled between the cabinets and at least one of the Internet and an intranet. The frontend network may comprise a first array of server switches and the backend network comprises a second array of server switches. The system may further comprise configuration inventory facility storing and tracking physical and logical inventory of all resources needed to support the automated near real time provisioning of IT assets. The system may further comprise authorization module storing authorize custodian's authorization roles for all other users for a designated account in the system. The system may further comprise a lock mechanism storing an authorized user's production lock on any component to a specific combination of group of users allowed to access the system to thereby prevents accidental change of an IT resource without having to confirm and authenticate that change to ensure availability of assets in the system. The system may further comprise an enterprise adapter coupling the system to other third party enterprise modules. The system may further comprise data replication module selectively replicating data stored on the plurality of storage disks. The system may further comprise disaster recovery module storing: environment configuration specifying hardware and software configuration of the customized server environment; and, data stored on the assigned storage resources. The system may further comprise a keyboard, video, and mouse (KVM) switch and KVM adapter providing remote user access to the assigned server at the keyboard, video, and mouse level, including access to bios level boot screens and command functions. The system may further comprise remote mounting utility, enabling a user to remotely mount a volume to the assigned server.
According to aspects of the invention, a computer readable storage medium holding computer software for executing on the destination computer is provided, the software embodying a method comprising: providing a user with an interface to enter user's instructions to generate a customized server environment; upon receiving the user's instructions, performing the steps:
Further aspects and features of the invention can be understood from the following description of various embodiments and illustrations according to the invention.
The accompanying drawings, which are incorporated in and constitute a part of this specification, exemplify the embodiments of the present invention and, together with the description, serve to explain and illustrate principles of the invention. The drawings are intended to illustrate major features of the exemplary embodiments in a diagrammatic manner. The drawings are not intended to depict every feature of actual embodiments nor relative dimensions of the depicted elements, and are not drawn to scale.
An embodiment of the invention will now be described in detail with reference to
The elements shown in
In the embodiment of
The system also provides various services needed for accomplishing communication between the various servers and storage subsystems, between the servers and the Internet, and between the servers and the system administrator's maintenance console. The services include DNS/DHCP cluster 255, i.e., Domain Name System that translates human readable addresses to IP (Internet Protocol) addresses and Dynamic Host Configuration Protocol that is used by networked devices (clients) to obtain various parameters necessary for the clients to operate in an IP network.
An enterprise management system (EMS) 260 enables maintenance and management of enterprise solutions installed on the customers' servers. These applications broadly include fault management, configuration management, accounting/billing management, performance management and security management. These may include software applications that perform business functions such as accounting, production scheduling, customer information management, bank account maintenance, etc.
Middleware/backend applications 265 are available for customers' installation via the out of band management network 285. These are applications that don't interact directly with the user but provide the underlying functionality and services. Examples include applications relating to directory services, monitoring, back up services, and device management. Middleware examples include database systems, telecommunications software, transaction monitors and messaging-and-queueing software, etc.
Web Tier 270 are the user-facing applications that provide functionality directly to the end user. Examples include server and storage provisioning.
Out of band Management Network 285 provides for overall provisioning, management and monitoring of devices independent of individual customer networks. In general, customers will have visibility to their own resources in their own VLAN segments and do not have visibility to each other's VLANs or to the out of band management network. The latter provides the necessary overall control and monitoring functions necessary to implement the functionality of embodiments of the invention.
As illustrated in
Notably, the provisioning engine makes it very simple and easy to re-configure, clone, expand, delete, etc., the configuration. For example, assume the user decides that the particular server configuration selected is not sufficiently fast for the required performance. The user may simply log onto the account and select and configure a different server or associated IT environment configuration. The provisioning engine would then select an appropriate server from the racks 210, re-configure the switches to couple the selected server to the storage facility, and load, install and configure the OS and software application on the newly selected server. The provisioning engine would then release the prior server to the available server pool. Similarly, if the user decides that the configuration satisfies the performance requirement, but another such configuration is needed, the user may simply select a clone request on the user's account. The provisioning engine already has all of the information required to select another server, select storage resources, configure the core switches, and upload, install and configure the OS and applications to generate a clone. The user may also upgrade to a larger server or downgrade to a smaller server in CPU and memory by a simple configuration command and the server's entire OS and application environment will be running on the a different performing system within seconds to minutes. This type of upgrade or downgrade is very time consuming and disruptive taking days to months in for companies using traditional IT environments. On the other hand, the user may simply expand the capability by, for example, selecting a larger size storage. The provisioning engine would then simply select additional storage and reconfigure the core switches to couple the storage to the server allowing the running server and OS to recognize the additional storage immediately without needing to be shutdown or rebooted. If the user elects to tear down the configuration, the provisioning engine simple instructs the core switches to disconnect the servers and storage, and then allocates the released server and storage to the available resource pool. As can be understood, all of these operations may be performed on the fly and in real time, as the user enters selections on the users account via the GUI. Moreover, using a VPN (Virtual Private Network) connection, the user is able to directly access its assigned servers and work with its assigned server much as if it had its own keyboard, mouse and monitor connected directly to the server.
The backend network is coupled to a storage network. The storage network is implemented using storage network switches 422 and server storage 420. The storage network switches are implemented using, e.g., Cisco Catalyst 3750-E stackable wiring closet switches. Together with the blade switches 432, the storage network switches 422 enable pairing of individual servers from racks 410 to individual storage hardware from storage 420. In this particular example, storage 420 is implemented using Dell's EquaLogic disk array but could be any solution such as iSCSI, direct storage, fibre channel, fibre channel over Ethernet, etc. Therefore, individual disks or disk arrays, e.g., RAID array, may be assigned to individual blades from racks 410, thereby creating configurable server computing facility without having to rack any hardware and without having to wire any hardware. In this manner, individual servers and disks may be assigned to a customer, without complication of sharing physical resources with other customers.
The frontend network blade switches 434 are coupled to access switches/routers 480, which form part of the frontend network. In this example, the access switches/routers 480 are implemented using Cisco Catalyst 6500-E switch, that is set up as a level 3 switch—basically a router that switches based on level 3 information. This enables routing at higher speeds as the routing is done in hardware (generally ASIC), rather than using code executed in microprocessors. The access switch enables access to and from the Internet or other networks, such as a data center hub (in
In this embodiment, there are four ports total on each blade in the chassis 410, two on-board for Internet connectivity and two more provided by an add-on iSCSI adapter card for external storage connectivity. There is one blade switch (CIGESM) per port that handles that particular port on all the blades in the chassis. The two blade switches connected to the ports designated for Internet connectivity are connected directly to the core switch-routers 480 for external network access. The other two are for storage and never need external connectivity, so all traffic would generally be between the storage devices and the servers. In this example, the core switches are not burdened with unnecessary storage traffic nor does the storage network need the advanced features the core switches provided, therefore all of the storage network is coupled via an extremely fast but feature-light 3750-E switches 422. This allows the storage network to be scalable (the 3750E's are stackable) while reducing the cost and complexity of rolling all traffic up to the core infrastructure and doubling the port requirements.
As can be understood from the above, the entire arrangement shown in
The arrangement shown in
To enable online purchase or lease of any computing environment configuration, the ESB 500 is also coupled to a billing module 565 and credit card module 575. The billing module provides the pricing corresponding to the requested configuration. Once an order is placed, the billing module 565 may activate the credit card module 575 to enable verification and charge of the credit card. If no credit card is used, the billing module may issue a billing statement. The ESB 500 is coupled to various corporate system for automation, e.g., enterprise resource planning (ERP) financial system, corporate SCM system, customer resource management (CRM) system, etc.
When an order is placed via the portal 505, the ESB 500 assigns a job number to the order and begins calling scripts in order to complete the provisioning of the customer's ordered environment. The major steps include, calling the hardware provisioning scripts and decrementing the inventory, updating the CMDB (configuration management database), enabling monitoring, enabling service level agreements, creating portal account, configuring automated billing, generating legal contracts, and issuing login information to the customer.
According to a feature of this embodiment, a web services module 585 is also coupled to the services bus 500. The web services module 585 enables experienced users to directly access their resources. For example, a user may want to generate a back-up image of a database residing on storage facility 520. The user may access the portal 505 and request a backup of the database via the portal 505, which would then transfer the request to the ESB 500. On the other hand, the user may directly access its resources via the web services module 585, allocate storage resources for the backup files, obtain a snapshot of the database, and store the snapshot in the allocated storage facility. This may be done using, e.g., a secure VPN connection directly to the user's assigned computing resources.
According to another feature of this embodiment, a scripting library 595 is provided. The scripting library enables users to perform various operations and various combinations of operations, using various scripts that are pre-stored in the scripting library. The scripting library may be accessed from the web services module 585 or from the portal 505. The scripting library may include scripts to cause the system, for example, to duplicate a given server, add storage resources to a given server, copy data from one storage disk to another, suspend server, add firewall, perform conditional actions, e.g., if event x occurs, perform action y, etc. Using this library, users are able to manage the resources and perform various operations by combining scripts from the library. For example, a user may be able to combine scripts to respond to events, e.g., if a particular server's load is over a given threshold, duplicate the server and run both servers in parallel, or add storage resources, or add communication bandwidth, etc. While this example is somewhat simplistic, it should be understood that the power of this feature is in enabling various new services without having to reprogram the entire system. Since all of the scripts in the scripting library have already been tested and are known to function properly in the system, a user may use any combination of these scripts at any order to generate new tailored functions. The various scripts can be provided as menu items on the portal as well for the user's selection.
In addition to the above, the user is also given the ability to remotely access its assigned servers at the console keyboard, video and mouse level, including access to bios level boot screens and command function. This is done by utilizing a KVM (keyboard, video, mouse) switch 512, either installed in the server or coupled to it externally. The KVM switch intercepts all keyboard, video, and mouse signals and an Intelligent Platform Management Interface (IPMI) is utilized to route these signals between the server and the user via portal 505. This may be done using a Java applet, etc., in conjunction with the IPMI. In this manner the user can directly access all levels of the server as if user's keyboard, mouse and monitor were directly connected to its server.
The architecture of
Once the customer selects the various hardware and software, the provisioning manager 650 selects the appropriate resources and implements the appropriate switching and software loading, installation and configuration. The provisioning manager also updates the inventory module 645 as to the resources used in assembling the customer's configuration. Furthermore, the provisioning manager 650 also sends the configuration to the monitoring module 655 to enable monitoring of the configuration and implementation of any new updates from infrastructure update module 660.
Among the resources available to the provisioning manager 650 are servers 652, storage 654, including back-up facilities 656 (e.g., tape, disk-to-disk or optical drive backup systems), networking 658, firewall 662, and intrusion detection system 664. Additionally, various applications 666 may be installed on the servers 652, upon which the proper license is activated using the license management module 668. The information of all of the resources used for the account is transmitted to the update portal 670 and to the billing module 675 for proper billing
The bus 710 enables communication among the various modules. The account module 715 manages account information, including user information, service information, escalation information and company information. The financial module 720 manages contracts, quotes, sales, inventory, accounts receivable, accounts payable, and order management. Agreements and licenses are managed by agreements module 722 and licensing module 724. Trouble tickets are managed by remedy module 707, which monitors incidents and remedies. Patch management 730 includes provisioning manager and configuration manager, which provision and configure the appropriate resources and switches to provide the service level requested by the customer.
As in previous embodiments, the various resources available to customers include hardware 732, which include servers, routers, load balancers, etc., databases 734, e.g., Oracle, MySQL, SQL Server, etc., each of which may be installed and configured on a selected server. Operating systems 736, e.g., Linux, Windows®, etc., may also be loaded and installed on any selected server. Various applications 738, e.g., Apache, Jboss, etc., are available for loading and installation. A virtualization instances module 740 enables installation of virtualization software on the selected server, should the customer wish to run virtualization on the configured server. Networking module 742 enables provisioning bandwidth and monitoring traffic using, e.g., Cacti or MRTG (multi router traffic grapher).
Storage 744 may be implemented as collections of single disks or as disk arrays, e.g., RAID array. Data in storage 744 can be backed up in backup facility 746, e.g., disk, tape, optical storage facility, etc. While not shown in this particular example, various storage drives, such as optical drives may be connected to servers directly. Firewall 748 may be applied to any selected network, according to the customer's selection. Communication over a network, e.g., the Internet, is facilitated by the active directory module 750, which includes DNS, DHCP, LDAP, Sub-Nets and IP Management resources. Finally, intrusion detection system (IDS) and/or intrusion prevention system (IPS) may be applied to any server as selected by the customer.
The Network Operation Center (NOC) 770 represents the main support organization for system. All technical administration as well as help desk organization are a functions of the NOC. Also, all of the monitoring and management of the customers' systems as well as the system infrastructure will be handled by the NOC. Of course, all of the provisioning and management tools will be made available to the customer as well through the client portal.
The following is a description of an example for a portal process. The portal web connection may be implemented using high grade encryption, (e.g., RC4 128 bit). A user may log on to the portal using username and password obtained during the initial registration and setting up the account and may be able to provision, configure and deploy IT environment from the portal. For example, the customer may be able to select the number and type of servers (e.g., number of processors/cores, amount of RAM, etc.), whether to run virtualization software on the servers and, if so, what software to use (e.g., VMware, Virtual Iron, etc.), the number and type of operating systems (e.g., Linux, Windows®, etc.), number of networks, amount of disk storage and its utilization (storage may be implemented in e.g., RAID 1, RAID 5, etc.), firewall speed, IDS, Internet bandwidth (e.g., Mbps base and Mbps peak or total amount of transferred data in a given time period), number and type of applications (e.g., IIS, MSSQL, Oracle, VMware Server, JBoss, Apache, Perl, etc.). According to a feature of the invention, the customer may also set a “spending amount” to enable provisioning and deployment of additional resources up to the set spending amount.
In adding a new server, the customer would be able to set a server name, select the type of hardware (e.g., number of CPUs, processor speed, local memory (RAM) size, etc.), select the OS (e.g., Windows® Server, Red Hat® Linux, etc.), setup and configure server failover (checkbox), setup and configure LAN network, Internet bandwidth, firewall, IDS, monitoring parameters and load balancing. Of course, the user may also be able to simply select an existing configuration and replicate it or delete a server configuration. Notably, the checkbox is a toggle on the “Server Provisioning” page of the portal that tells the system whether or not the system should automatically migrate to a new compatible server should it detect a hardware failure or meet predefined monitoring failover conditions on the current one. This is an advantageous capability that is made possible by the system's inherent knowledge and control over the customer's entire infrastructure.
Other functions available to the user include creating snapshots of a server, restoring a previously stored snapshot, setup and configure VPN connectivity, and flagging a server as failover. The user has the option of modifying current server environment, e.g., selecting or deselecting a failover checkbox, change or create a LAN network, change Internet bandwidth, change firewall, IDS, load balancing, and VPN connectivity settings, and increase disk space, etc. In managing the disk space the user is able to setup, configure, change size or delete a dedicated or common disk space for sharing by the servers. The user is also able to mount a local optical drive, disk volume or ISO image to a remote server detected and accessible by the server at the hardware boot stage regardless of the location of the remote user. Notably, while in the prior art various systems may utilize restore points to restore a server, restore data on a hard disk, the current invention enables something totally new: a restore point of an entire server environment. That is, since all of the resources provisioned for a particular server environment are recorded and monitored, the system may easily take a snap shot of the entire environment, including conventional parameters, such as software installed on the server and data stored on the disks, but also new parameters, such as bandwidth allocated, firewall parameters, etc. Thus, the inventive system may easily reconstruct a clone server and associated IT environment in case of failure or for increased capacity.
The portal also provides the current status of all the IT resources of the customer. Reporting may include server, storage, network and application health, including historical data of events. The user is able to view SLAs and near-real time performance to the established SLAs, billing information, bandwidth utilization, list of backup snapshots, disk size and description, and journaling of all provisioning activities. It also provide facility for establishing authorization level for various users in the organization. The authorization levels define which users are allowed to perform what functions, e.g., configuration changes, billing changes, etc. As indicated above, the users will also be able to enter, view and track trouble tickets via the portal.
In addition to reporting, the system may also provide the user with active management suggestions or actions. For example, the system may easily collect statistics about usage across the entire system. So, for example, the system may easily identify that on the last day of each month usage of accounting server is substantial. The system may then suggest to add extra capacity only for the duration of the high load. Similarly, the system may predict high usage in specific times of the year, e.g., prior to tax day, or during high shopping season, e.g., Christmas shopping season. The system may automatically suggest increasing the resources. Since the system may collect statistics across the entire system, it may easily develop predictive model to determine the period to increase the resources and also the amount of increased resources.
Conversely, the system may also issue alerts to the user when the resources allocated are excessive in view of current usage. That is, as the system monitors the usage on the user's server environment, it may determine that certain allocated resources are underutilized. For example, it may be that the assigned bandwidth is to high for the amount of traffic going to the server. The system may then issue an alert proposing to the user to select a lighter resource allocation, thereby saving the user unnecessary expense.
Using collected statistics the system may also generate predictive billing. For example, as noted above, the system may estimate that during December a certain user's server environment may need an increase in computing and bandwidth capacity of 30%. The system may then estimate the corresponding increase in costs associated with such an increase in resources and provide the user with an estimate, enabling the user to budget for such an increase.
According to an embodiment of the invention, the following process is used to allocate and configure resources according to a user's requirement. The user logs in to the provisioning engine via a user interface. The user is then prompted to select the computing capacity needed, the storage capacity needed, the OS system to be loaded onto the server, specific applications required, etc. The provisioning engine will then proceed to take inventory of available resources and reserve corresponding resources to the user's account. Once the resources have been reserve, the provisioning engine would run a setup process so as to associate the server with the storage and other selected resources, e.g., optical drives, backup storage, etc. The provisioning engine would then load and install the selected OS, and would make appropriate notation for the license required for use of the OS. The engine would load and install of the required applications and make appropriate notation for licensing requirements.
Other processes may also be employed in this setup stage, such as allocation of an IP address to a specific server, construction of a virtual local area network, allocating specific amounts of internet and internal bandwidth, creating a customized firewall along with various security configurations, a customized backup system in case of server failure, a domain name system (DNS) configuration, installation of a specified operating system, router configuration based on content, generating a vulnerability assessment, creating monitoring systems and other specifically requested hardware and software requirements. In this particular embodiment, each process is run in isolation of each other. They will each be started by the central processing system and will return the status of each process back to the system. This information is then given to the user, who can then view the building progress of his server infrastructure in real time.
While in the above example the engine assembled the server upon the user's indication, alternatively the engine may take inventory but would not reserve or configure the system yet. Instead, the server would provide pricing information to the user, which would include leasing or purchasing of the resources, and payment for the various software licensing required. The user may then make any changes before making a final decision to setup the system. Alternatively, the user may be simply prompted to enter high level requirement, such as business size or volume, and then the engine would provide a proposal for the proper computing capacity, storage capacity, suggested software package, etc., and pricing for such a proposal. This is especially helpful for users who are not highly technical.
The main user interface to the ESB 800 is the web portal 805. Client 810 may access the ESB 800 for managing its resources and provisioning via, e.g., HTTPS. Administrative access 815 is also enabled via the web portal 805, so that an administrator may provide services and support for the various customers. The ESB is also connected to and controls the infrastructure service cluster 820. The infrastructure service cluster 820 is responsible for maintaining the customers' environments under the ESB control. As in prior embodiments, the service cluster 820 include DNS, DHCP, monitoring, authentication, security, trouble ticketing, finance applications, SMTP processing, security, utility services, and security password storage. Database 830 stores information relating to the infrastructure and the environments.
Customer environments are generated using the resources 840, which include servers, switches, routers, firewalls and storage, KVM switches, VPM, etc., as explained above with respect to other embodiments. The resources of the customer environment are coupled to the ESB 800 via element control module 845, which includes the various adapters 847 that enable communication between the resources and the ESB. The adapters are specific to each resource and may be easily changed to suit the specifications of each vendor or resources. In this manner, the ESB 800 may be used to handle any brand of servers, storage disks, switches, routers, etc. This arrangement also enables direct user access via VPN, user operation over the server using KVM switches, and mounting of local devices 812.
The web services module 850 provides a mechanism to programmatically perform various tasks that can be done through the client web portal. This allows customers to create custom scripts that control their environment externally, or to enable third party vendors to write application “add-ons” to offer to mutual customers as a value-added product or service. A customer would prepare or select a script to be applied to its environment (web service API 857). The web services module 850, which is basically a port, would receive the script 857 and would transmit it to the system for execution on the customer's environment.
As can be seen, the illustrated embodiment enables the user to access all functionality of the system through two way communications of web services API function calls without having to access the portal system. All API function calls via command line interface, scripts or other interpreted or compiled languages can be executed with return codes and automatically update the portal inventory and configuration in real time. All activity may be authenticated and logged to ensure accountability and security of the system.
As can be understood form the above description of various embodiments of the invention, some features of the present invention include:
It should be understood that processes and techniques described herein are not inherently related to any particular apparatus and may be implemented by any suitable combination of components. Further, various types of general purpose devices may be used in accordance with the teachings described herein. It may also prove advantageous to construct specialized apparatus to perform the method steps described herein. The present invention has been described in relation to particular examples, which are intended in all respects to be illustrative rather than restrictive. Those skilled in the art will appreciate that many different combinations of hardware, software, and firmware will be suitable for practicing the present invention.
The present invention has been described in relation to particular examples, which are intended in all respects to be illustrative rather than restrictive. Those skilled in the art will appreciate that many different combinations of hardware, software, and firmware will be suitable for practicing the present invention. Moreover, other implementations of the invention will be apparent to those skilled in the art from consideration of the specification and practice of the invention disclosed herein. Various aspects and/or components of the described embodiments may be used singly or in any combination in the server arts. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the invention being indicated by the following claims.
This application claims priority from U.S. Provisional Application Ser. No. 60/948,891 filed on Jul. 10, 2007, the entire disclosure of which is incorporated herein by reference.
| Number | Date | Country | |
|---|---|---|---|
| 60948891 | Jul 2007 | US |
