Dynamic Client-Side IAM Routing with Health Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud IAM systems struggle with dynamic traffic routing, leading to degraded performance and availability when service cells experience stress or outages, impacting dependent cloud services without the ability to react to health changes.
Innovation Solution
Implementing a discovery service that periodically monitors the health of IAM service cells, creating and updating endpoint mappings based on traffic patterns to dynamically route identity and access requests, ensuring real-time rebalancing and high availability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static routing is used in cloud IAM systems, then system simplicity is maintained, but service availability and performance degrade when service cells experience stress or outages
Solution Approach 1:
The patent implements dynamic routing that automatically adjusts traffic distribution based on real-time health monitoring of service cells. The routing configuration changes from static to dynamic, allowing the system to adapt to varying service conditions and maintain availability during stress or outages.
Solution Approach 2:
The system incorporates health monitoring that continuously observes service cell status and feeds this information back to the routing mechanism. This feedback loop enables automatic routing adjustments based on actual service conditions, improving reliability without requiring manual intervention.
2Measurement precision
If health monitoring is performed frequently, then routing accuracy improves, but system overhead and latency increase
Solution Approach 1:
The system performs health monitoring at periodic intervals rather than continuously, striking a balance between obtaining accurate service status information and minimizing system overhead. This periodic approach reduces unnecessary monitoring operations while maintaining adequate awareness of service health for effective routing decisions.
Data Source
AI summary
Techniques are disclosed for enabling dynamic routing of identity and access (IA) requests to a cloud identity and access management (IAM) system. In some embodiments, the health (or service quality) of a cloud IAM system is continuously monitored in the background to update routing information for dynamically routing IA requests for client cloud services to the cloud IAM system in the foreground. In some embodiments, background monitoring is performed by sending first-type IA requests to the cloud IAM system to discover traffic patterns. In some embodiments, routing information may be mappings between client cloud services and identity endpoints of service cells in the cloud IAM system with configurable attributes that help rebalance and distribute the IA traffic.