Multi-Class Cloud Service Isolation on Shared Infrastructure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional cloud computing systems are limited in providing multiple classes of service on a shared infrastructure, as they typically offer the same set of services to all tenants, requiring separate environments for different service level agreements and infrastructure capabilities, which is inefficient and inflexible.
Innovation Solution
Implementing a cloud system architecture that allows for multiple classes of service by using virtualization to create virtual environments on a shared infrastructure, where users can specify their class of service, and a cloud manager system configures resources accordingly, enabling differentiated services and isolation between users based on their service requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If separate cloud environments are implemented for different service level agreements, then service differentiation capability is improved, but infrastructure complexity and cost increase
Solution Approach 1:
The patent combines multiple service level agreements and tenant requirements into a single shared cloud infrastructure environment. Instead of maintaining separate physical or virtualized cloud environments for different SLAs, the system allows multiple tenants with different service requirements to coexist on the same infrastructure, reducing complexity while maintaining service differentiation through logical isolation and configuration.
Solution Approach 2:
The shared cloud infrastructure is designed to serve multiple functions and support multiple service level agreements simultaneously. The infrastructure can dynamically allocate resources and apply different service policies to different tenants based on their specific requirements, making the infrastructure universal rather than specialized for a single service type.
2Productivity
If the same infrastructure is used to provide resources to multiple tenants, then resource utilization efficiency is improved, but service isolation and differentiation capability deteriorate
Solution Approach 1:
The patent segments the shared infrastructure into isolated tenant environments using virtualization technologies. Each tenant receives dedicated virtualized resources (CPU, memory, storage, network) that are logically separated from other tenants, ensuring service isolation while maintaining physical sharing of the underlying infrastructure. This segmentation prevents resource contention and interference between tenants.
Solution Approach 2:
The patent introduces a cloud management platform as an intermediary layer between the shared physical infrastructure and multiple tenants. This intermediary handles resource allocation, isolation enforcement, and service differentiation, allowing the infrastructure to efficiently serve multiple tenants while maintaining proper isolation through the mediating management layer.
3Adaptability or versatility
If virtualization is used to create virtual environments on shared infrastructure, then service flexibility and isolation are improved, but system complexity increases
Solution Approach 1:
The patent implements self-service capabilities within the virtualized environment, allowing tenants to automatically provision and manage their own virtual resources through standardized interfaces and automation. This reduces the operational complexity burden on the system administrator while maintaining the flexibility benefits of virtualization, as the system manages itself to a large extent.
Data Source
AI summary
In various exemplary embodiments, a system, article of manufacture, and method for providing, a cloud computing infrastructure on a system infrastructure comprising, a first virtual computing environment associated with a first class of service, the first class of service defining, in one embodiment, a first set of obligations, restrictions, and/or capabilities; providing, in the same cloud, a second virtual computing environment associated with a second class of service, the second class of service defining a second set of obligations, restrictions, and/or capabilities different from those of the first class of service; and executing the first virtual computing environment according to the first class of service and the second virtual computing environment according to the second class of service, the first virtual computing environment having a different access to the hardware platform than the second virtual environment based on the respective class of service.