Gatekeeper Software for Virtual Cluster Isolation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing shared computing environments lack an efficient method to form computer clusters without VLAN and storage access restriction devices, which increases costs and complexity, and there is a need to isolate and manage resources within these clusters effectively.

Innovation Solution

The method involves deploying gatekeeper software on host computers to interpose between computing platforms and hardware resources, allowing communication within a virtual computer cluster while isolating it from the rest of the shared environment, and controlling input and output operations to manage resource access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If VLAN devices and storage access restriction devices are added to existing networks to form computer clusters, then the ability to isolate and manage computer clusters is improved, but the cost and complexity of the shared computing environment increase

Engineering Contradiction:
Improvecluster isolation capabilityVSAvoidnetwork device complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a gatekeeper software component as an intermediary between computing platforms and hardware resources. This software mediator manages resource allocation and cluster isolation without requiring additional physical network devices like VLAN equipment or storage access restriction devices, thereby resolving the contradiction between improved isolation capability and reduced device complexity

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical/physical system of VLAN devices and storage access restriction devices with a software-based gatekeeper mechanism. This substitution eliminates the need for additional hardware components while achieving the same functional goals of cluster isolation and resource management, thus reducing device complexity while maintaining or improving isolation reliability

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If VLAN devices and storage access restriction devices are deployed to form computer clusters, then the ability to maintain network traffic isolation is improved, but the cost of the shared computing environment increases

Engineering Contradiction:
Improvenetwork traffic isolationVSAvoidcost
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The gatekeeper software acts as a cost-free intermediary that manages network traffic isolation through software-based resource allocation. It provides the same network traffic isolation functionality as expensive VLAN devices but without the associated hardware costs, thereby resolving the contradiction between improved isolation reliability and reduced quantity of substance (cost)

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates a software copy of the isolation functionality provided by physical VLAN devices. The gatekeeper software replicates the network traffic isolation capabilities of hardware VLAN equipment through virtualization techniques, eliminating the need to purchase and deploy expensive physical devices while maintaining the same isolation效果

Inventive Principle:
Principle #26Copying

3Device complexity

If gatekeeper software is used to form virtual computer clusters, then the cost and complexity are reduced, but the ability to isolate the virtual computer cluster from the remainder of the shared computing environment must be achieved through software alone

Engineering Contradiction:
Improvesystem complexityVSAvoidisolation reliability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The gatekeeper software is designed as a universal multi-functional component that simultaneously provides resource allocation, cluster isolation, network traffic management, and storage access control. By consolidating multiple functions into a single software agent, the system achieves reliable isolation through a simplified architecture, resolving the contradiction between reduced device complexity and maintained isolation reliability

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The gatekeeper software serves as a trusted intermediary between the virtual computer cluster and the shared computing environment. It enforces isolation policies and manages resource access through software-based control mechanisms, providing reliable isolation without requiring additional hardware layers, thus resolving the contradiction between software-based simplicity and isolation reliability

Inventive Principle:
Principle #24Intermediary (Mediator)

4Ease of operation

If gatekeeper software is deployed on host computers, then the ability to control input and output operations is improved, but the software deployment and configuration effort increases

Engineering Contradiction:
ImproveI/O control capabilityVSAvoidsoftware deployment effort
Core Design Contradiction:
Ease of operationVSEase of manufacture

Solution Approach 1:

The gatekeeper software is designed to self-configure and self-manage on each host computer. It automatically detects available hardware resources, establishes isolation policies, and begins controlling I/O operations without requiring extensive manual configuration or deployment effort. This self-service capability resolves the contradiction between improved I/O control capability and reduced software deployment effort

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS8095928B2Method of forming virtual computer cluster within shared computing environment
Publication Date: 2012.01.10 HEWLETT PACKARD ENTERPRISE DEV LP
  • US8095928B2 patent drawing
  • US8095928B2 patent drawing
  • US8095928B2 patent drawing

AI summary

An embodiment of a method of forming a virtual computer cluster within a shared computing environment begins with a step of placing gatekeeper software on each of a plurality of particular host computers of the shared computing environment. The method continues with a step of assigning computing platforms located on the particular host computers to the virtual computer cluster. The gatekeeper software interposes between the computing platforms and hardware resources of the particular host computers. The method concludes with a step of isolating the virtual computer cluster from a remainder of the shared computing environment using the gatekeeper software. The gatekeeper software allows communication between the computing platforms while precluding communication with other computing platforms of the shared computing environment. The gatekeeper software controls input and output operations for the virtual computer cluster.