Cloud Application Topology Mapping Without Production Instrumentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for discovering cloud application topology require intrusive instrumentation of production environments, which can be resisted by owners due to sensitive data concerns, and fail to account for non-physical connections in distributed applications.
Innovation Solution
A method that identifies a sandbox environment's communication links and production system's structural dependencies to create a complete topology without intrusive instrumentation, using passive querying and instrumenting test/staging environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If intrusive instrumentation tools are used to discover topology in production environments, then topology discovery capability is improved, but system security and data sensitivity are compromised
Solution Approach 1:
The patent creates a sandbox environment that replicates the production environment's structure and services. By analyzing this copy instead of the actual production system, the method achieves topology discovery without compromising production security. The sandbox serves as a safe replica where intrusive analysis can be performed without affecting the real system.
Solution Approach 2:
The sandbox environment acts as an intermediary between the topology analysis tool and the production system. Rather than directly instrumenting the production environment, the tool analyzes the sandbox as a mediator, which then reflects the production topology through matched service relationships.
2Object-affected harmful factors
If passive querying of production systems is used, then system security is maintained, but topology discovery completeness deteriorates
Solution Approach 1:
The patent performs comprehensive topology analysis in advance within the sandbox environment before deploying to production. By pre-instrumenting and analyzing the sandbox replica, all topology information is discovered beforehand, allowing complete topology knowledge to be obtained without needing to query the production system extensively.
Solution Approach 2:
The sandbox environment serves as a complete copy of the production topology, allowing full instrumentation and analysis to be performed on the copy. This enables complete topology discovery in the sandbox that can then be mapped to production, achieving information completeness without production intrusion.
3Ease of operation
If sandbox environment analysis is performed, then non-invasive topology discovery is achieved, but direct production topology accuracy may be reduced
Solution Approach 1:
The patent implements a feedback mechanism where services in the sandbox are matched to corresponding services in the production environment based on infrastructure information. This feedback loop allows verification and adjustment of the topology mapping, ensuring that the sandbox-derived topology accurately reflects the production system despite the non-invasive approach.
Solution Approach 2:
The method transforms the topology data from the sandbox environment by applying parameter changes to match production environment characteristics. By adjusting identifiers, service names, and infrastructure parameters, the sandbox topology is converted into an accurate representation of the production topology.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computer implemented method for identifying an application topology includes identifying a sandbox environment corresponding to an application of interest, analyzing the sandbox environment to identify a set of communication links between services within the sandbox environment indicating a first topology, identifying a production system corresponding to the application of interest, querying the production system to identify a set of structural dependencies indicating a second topology, and creating a complete topology of the cloud application by combining the first topology and the second topology. A computer program product and computer system for identifying an application topology are additionally disclosed herein.