Global Tags for Dynamic Resource Reclassification Across Fabrics
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for interconnecting fabric networks in a federation are static and require resource deletion and recreation for reclassification, leading to performance impact and inefficiency when applications need to be dynamically reassigned or isolated due to security threats.
Innovation Solution
Implementing global tags on local resources within fabric networks to dynamically reclassify and isolate resources across the federation, allowing each fabric to independently manage and update configurations without a central controller, using key-value pairs to identify and organize resources based on characteristics.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a controller manages all fabrics and deploys applications across them, then resource deployment is achieved, but reclassification requires resource deletion and recreation causing performance impact and downtime
Solution Approach 1:
The patent implements dynamic resource reclassification by allowing resources to be moved between fabrics without deletion or recreation. The controller enables resources to dynamically change their fabric assignment while maintaining continuous operation, transforming the static delete-recreate process into a dynamic in-place migration process that preserves network performance during reclassification
Solution Approach 2:
The patent establishes preliminary routing configurations and resource mapping structures in advance that enable seamless resource migration. By pre-configuring the fabric interconnection framework and resource identification mechanisms, the system prepares the infrastructure beforehand to handle resource movements without interruption, avoiding performance degradation during reclassification operations
2Adaptability or versatility
If a controller manages all fabrics for resource deployment, then centralized control is achieved, but the system becomes static and reclassification is complex requiring deletion and recreation
Solution Approach 1:
The patent transforms the static controller-managed deployment model into a dynamic system where resources can be reassigned between fabrics through simplified operations. The controller provides dynamic resource mapping capabilities that allow resources to change fabric assignments without requiring complex deletion and recreation workflows, enabling adaptable resource management with reduced operational complexity
Solution Approach 2:
The patent creates a universal resource identification and mapping framework that works across all fabrics consistently. This universal approach allows the same resource to be managed across multiple fabrics using standardized mechanisms, simplifying the reclassification process by providing a unified method rather than fabric-specific complex procedures
3Reliability
If an application is compromised in one fabric, then security isolation is needed, but deleting and recreating the application affects performance and requires time
Solution Approach 1:
The patent segments the application instance concept by allowing the same logical application to exist as separate instances in different fabrics with independent security contexts. When compromise is detected in one fabric, the affected instance can be isolated or removed while other instances continue operating, enabling security containment without requiring global application recreation across all fabrics
Solution Approach 2:
The patent implements dynamic security isolation by enabling rapid reassignment of resources between fabrics based on security conditions. When compromise is detected, the resource can be dynamically moved to a different fabric or isolated through updated routing configurations without requiring deletion and recreation, achieving security containment while minimizing downtime and maintaining continuous service availability
Data Source
AI summary
Techniques and architecture are described for identifying objects, e.g., resources, across a federation in a network, and more particularly, to identifying objects, e.g., resources, across a federation of access networks, e.g., fabric networks, for extending access of the objects across the federation in a network. More particularly, the techniques and architecture provide for adding global tags to local resources within an access network, e.g., a fabric network. Once a resource has a global tag attached to it, this information is shared with all other fabrics. Each fabric can then build its own view of where global resources are located. A local resource with the same set of global tags may be seen as the same global resource across multiple fabrics. Simply changing global tags attached to a local resource allows for reclassifying local resources. No other configuration change is required.