Agentless Cluster Backup via Local Encryption Server

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing container management systems face challenges in securely backing up and restoring sensitive configuration data, such as secrets, particularly for offsite backups.

Innovation Solution

A computing cluster backup system that uses a local backup server to encrypt and store secrets locally, and a remote backup server to securely back up and restore encrypted secrets offsite, without requiring an agent on the computing cluster.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If secrets are backed up in plaintext for offsite storage, then backup simplicity is improved, but data security deteriorates

Engineering Contradiction:

Improvebackup simplicityVSAvoiddata security

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary encryption of secrets before they are backed up to offsite storage. The local backup server encrypts secrets using encrypted secret keys before transmission to the remote backup server, ensuring that sensitive data is protected in advance before leaving the secure environment.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The local backup server acts as an intermediary between the computing cluster and the remote backup server. It handles the encryption process using locally stored encrypted secret keys, transforming plaintext secrets into encrypted form before they are transmitted to remote storage, thus mediating between security requirements and backup simplicity.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Productivity

If an agent is installed on the computing cluster for backup operations, then backup functionality is improved, but system complexity deteriorates

Engineering Contradiction:

Improvebackup functionalityVSAvoidsystem complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The backup agent functionality is extracted from the computing cluster and consolidated into a separate local backup server. This externalized architecture allows the cluster to perform backup operations without requiring additional software or agents installed on its nodes, reducing system complexity while maintaining full backup functionality.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The local backup server serves multiple functions: it communicates with the computing cluster to retrieve secrets, performs encryption using stored key material, and manages communication with the remote backup server. This multi-functional design consolidates backup operations into a single component rather than distributing agent functionality across multiple cluster nodes.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS20250132911A1Agentless computing cluster backup

Publication Date: 2025.04.24 HEWLETT PACKARD ENTERPRISE DEV LP

AI summary

A computing cluster backup system securely backs up and restores secrets of a computing cluster. The computing cluster backup system includes a local backup server, which is in a same network as the computing cluster, and a remote backup server, which may be in a different geographic location than the local backup server. The local backup server encrypts secrets of the computing cluster, and sends the encrypted secrets to the remote backup server for offsite backup. The local backup server is separate from the computing cluster, and thus backup and restoration may be agentless.