Cloud Boundary Access Control for Off-Cloud Resource Contention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud-based applications accessing off-cloud network resources can cause resource contention, unpredictable performance, security risks, and increased costs due to unrestricted access, leading to potential SLA violations and inefficient resource usage.
Innovation Solution
Implementing a network management system to enforce policies and manage access constraints, using data shaping, queuing, and policing techniques to regulate interactions between cloud and off-cloud network resources, ensuring compliance with quality of service requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If cloud-based applications are allowed unrestricted access to off-cloud network resources, then application functionality and data collection capabilities are improved, but resource contention and unpredictable performance occur
Solution Approach 1:
A network management system is introduced as an intermediary between cloud-based applications and off-cloud network resources. This mediator enforces access policies, regulates traffic flow, and manages resource allocation, thereby maintaining application functionality while preventing resource contention and ensuring predictable performance through centralized control mechanisms.
2Productivity
If multiple cloud applications access the same off-cloud resources frequently, then data collection and support services are enhanced, but resource contention and SLA violations increase
Solution Approach 1:
The network management system implements periodic action by regulating and scheduling access patterns of multiple cloud applications to off-cloud resources. It enforces rate limiting and traffic shaping policies that control the frequency and timing of access requests, ensuring that data collection operations proceed efficiently while preventing resource overload and maintaining SLA compliance through structured, periodic resource utilization.
3Productivity
If access to off-cloud resources is unrestricted, then application performance is improved, but security risks and cost increases occur
Solution Approach 1:
The network management system serves as a security intermediary that filters and monitors traffic between cloud applications and off-cloud resources. It enforces security policies, validates access requests, and controls data flow, thereby maintaining high application performance through efficient resource access while simultaneously reducing security risks through centralized security enforcement and threat detection capabilities.
Data Source
AI summary
This disclosure describes techniques for managing and/or regulating access, by applications executing in a cloud environment, to network resources operating outside of the cloud environment. In one example, this disclosure describes receiving, from a first application executing in a cloud environment, a first request to be delivered to an off-cloud network resource; receiving, from a second application executing in the cloud environment, a second request to be delivered to the off-cloud network resource; and managing, based on a policy, delivery of the first request and the second request to the off-cloud network resource.