Gatekeeper Software for Virtual Cluster Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing shared computing environments lack an efficient method to form computer clusters without VLAN and storage access restriction devices, which increases costs and complexity, and there is a need to isolate and manage resources within these clusters effectively.
Innovation Solution
The method involves deploying gatekeeper software on host computers to interpose between computing platforms and hardware resources, allowing communication within a virtual computer cluster while isolating it from the rest of the shared environment, and controlling input and output operations to manage resource access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VLAN devices and storage access restriction devices are added to existing networks to form computer clusters, then the ability to isolate and manage computer clusters is improved, but the cost and complexity of the shared computing environment increase
Solution Approach 1:
The patent introduces a gatekeeper software component as an intermediary between computing platforms and hardware resources. This software mediator manages resource allocation and cluster isolation without requiring additional physical network devices like VLAN equipment or storage access restriction devices, thereby resolving the contradiction between improved isolation capability and reduced device complexity
Solution Approach 2:
The patent replaces the mechanical/physical system of VLAN devices and storage access restriction devices with a software-based gatekeeper mechanism. This substitution eliminates the need for additional hardware components while achieving the same functional goals of cluster isolation and resource management, thus reducing device complexity while maintaining or improving isolation reliability
2Reliability
If VLAN devices and storage access restriction devices are deployed to form computer clusters, then the ability to maintain network traffic isolation is improved, but the cost of the shared computing environment increases
Solution Approach 1:
The gatekeeper software acts as a cost-free intermediary that manages network traffic isolation through software-based resource allocation. It provides the same network traffic isolation functionality as expensive VLAN devices but without the associated hardware costs, thereby resolving the contradiction between improved isolation reliability and reduced quantity of substance (cost)
Solution Approach 2:
The patent creates a software copy of the isolation functionality provided by physical VLAN devices. The gatekeeper software replicates the network traffic isolation capabilities of hardware VLAN equipment through virtualization techniques, eliminating the need to purchase and deploy expensive physical devices while maintaining the same isolation效果
3Device complexity
If gatekeeper software is used to form virtual computer clusters, then the cost and complexity are reduced, but the ability to isolate the virtual computer cluster from the remainder of the shared computing environment must be achieved through software alone
Solution Approach 1:
The gatekeeper software is designed as a universal multi-functional component that simultaneously provides resource allocation, cluster isolation, network traffic management, and storage access control. By consolidating multiple functions into a single software agent, the system achieves reliable isolation through a simplified architecture, resolving the contradiction between reduced device complexity and maintained isolation reliability
Solution Approach 2:
The gatekeeper software serves as a trusted intermediary between the virtual computer cluster and the shared computing environment. It enforces isolation policies and manages resource access through software-based control mechanisms, providing reliable isolation without requiring additional hardware layers, thus resolving the contradiction between software-based simplicity and isolation reliability
4Ease of operation
If gatekeeper software is deployed on host computers, then the ability to control input and output operations is improved, but the software deployment and configuration effort increases
Solution Approach 1:
The gatekeeper software is designed to self-configure and self-manage on each host computer. It automatically detects available hardware resources, establishes isolation policies, and begins controlling I/O operations without requiring extensive manual configuration or deployment effort. This self-service capability resolves the contradiction between improved I/O control capability and reduced software deployment effort
Data Source
AI summary
An embodiment of a method of forming a virtual computer cluster within a shared computing environment begins with a step of placing gatekeeper software on each of a plurality of particular host computers of the shared computing environment. The method continues with a step of assigning computing platforms located on the particular host computers to the virtual computer cluster. The gatekeeper software interposes between the computing platforms and hardware resources of the particular host computers. The method concludes with a step of isolating the virtual computer cluster from a remainder of the shared computing environment using the gatekeeper software. The gatekeeper software allows communication between the computing platforms while precluding communication with other computing platforms of the shared computing environment. The gatekeeper software controls input and output operations for the virtual computer cluster.


