Cloud Application Migration for Bandwidth Deterioration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud computing infrastructures often suffer from under-provisioning, leading to compromised network performance and vulnerability to Denial-of-Service (DoS) attacks due to the lack of control and visibility for consumers over the underlying infrastructure, which can result in degraded bandwidth for applications sharing the same subnet.
Innovation Solution
A method and system that employs a monitoring agent to detect bandwidth deterioration in cloud data centers, allowing for the migration of applications to alternate subnets with increased bandwidth, thereby mitigating the effects of hostile attacks or high-volume usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If applications are co-located in the same subnet to localize communication, then communication efficiency is improved, but vulnerability to DoS attacks and bandwidth degradation increases
Solution Approach 1:
The patent segments applications into different subnets based on their traffic patterns and vulnerability profiles. By dividing the network into multiple subnets, the system can localize communication for performance while isolating critical applications from DoS attacks. Applications are assigned to different subnets depending on their communication needs and security requirements, resolving the contradiction between communication efficiency and security vulnerability.
Solution Approach 2:
The patent applies local quality by treating different subnets differently based on their specific characteristics and requirements. Each subnet is configured with customized security measures, bandwidth allocations, and traffic management policies tailored to the applications housed within. This allows high-performance communication for certain subnets while providing enhanced security protection for others, addressing both performance and security needs simultaneously.
2Productivity
If cloud infrastructure is scaled up to handle more applications, then service capacity is improved, but under-provisioning and bandwidth degradation worsen
Solution Approach 1:
The patent implements dynamic subnet assignment and bandwidth allocation based on real-time application needs and network conditions. The system dynamically adjusts which subnet an application uses based on current traffic patterns, security threats, and available resources. This dynamic approach allows the cloud infrastructure to scale capacity while maintaining bandwidth reliability through adaptive resource allocation rather than static provisioning.
Solution Approach 2:
The patent introduces a network manager as an intermediary component that mediates between applications and the underlying network infrastructure. This intermediary actively manages bandwidth allocation, subnet assignment, and traffic routing to ensure reliable service even as the cloud scales up. The network manager coordinates resource distribution to prevent under-provisioning issues and maintains quality of service across expanding infrastructure.
3Ease of operation
If consumers have no control over underlying infrastructure, then cloud service simplicity is improved, but ability to mitigate DoS attacks deteriorates
Solution Approach 1:
The patent implements self-service by enabling applications to automatically monitor their own network conditions and trigger migrations to safer subnets without human intervention. Applications can detect bandwidth degradation and DoS attack attempts, then autonomously request relocation to alternative subnets through the network manager. This self-service capability maintains cloud simplicity while providing active DoS mitigation, as applications manage their own security without requiring infrastructure control.
Solution Approach 2:
The patent establishes feedback mechanisms where applications continuously report network conditions to the network manager, which then adjusts subnet assignments in response. This feedback loop enables the system to detect and respond to DoS attacks and bandwidth issues automatically. The feedback mechanism provides security awareness and response capability while maintaining the simplified cloud model, as applications receive information about their network environment without needing direct infrastructure access.
Data Source
AI summary
A method and system for managing an application in a cloud data center by monitoring the bandwidth of a subnet of which the primary operating instance of an application is a member. If a severe deterioration in the bandwidth caused by an over consumption of the subnet resources from other subnet constituents is detected, a suitable secondary instance in an alternate, uncompromised subnet is located and primary operation of the application is transferred from the former primary operating instance to the secondary instance. The secondary instance can be pre-launched or dynamically requisitioned according to various embodiments.