Remote Service Orchestration via Local Intermediary Agents
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing environments face challenges in remote service orchestration and mirroring due to the need for additional disk space and processing power, which can be burdensome for systems with limited resources, potentially increasing risk vectors and impacting safety.
Innovation Solution
The implementation of a system that allows service managers of computing systems within a computing environment to listen for commands from other systems, enabling remote access and control, thereby reducing the footprint on remote computing systems and enhancing safety.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If configuration management tools use SSH protocols to securely access and control remote services, then remote service orchestration capability is improved, but additional disk space and processing power are required on remote systems
Solution Approach 1:
The patent introduces an intermediary component (service orchestration module) that runs on a local system rather than requiring full configuration management tools on remote systems. This intermediary handles the orchestration logic locally, eliminating the need for remote systems to host heavy SSH-based configuration management agents, thus reducing disk space and processing power requirements while maintaining remote service orchestration capability
Solution Approach 2:
The patent extracts the heavy configuration management functionality from remote systems and consolidates it on local systems. By taking out the SSH protocol requirements and configuration management agents from remote systems, the solution reduces the computational burden on resource-constrained remote devices while preserving the ability to orchestrate services remotely
2Ease of operation
If configuration management tools are deployed on remote computing systems, then remote access and control capability is improved, but system footprint increases
Solution Approach 1:
The patent uses an intermediary approach where a lightweight local service runs on the remote system that communicates with a more sophisticated orchestration module on the local system. This intermediary maintains remote access capability while keeping the remote system's footprint minimal by avoiding full configuration management tool deployments
Solution Approach 2:
The patent implements a lightweight local service on remote systems that copies only the essential remote access functionality needed, rather than deploying complete configuration management tools. This selective copying of necessary functions reduces system footprint while preserving remote access capabilities
3Ease of operation
If additional services and tools are installed on remote computing systems to enable remote access, then remote service orchestration is improved, but safety risks increase
Solution Approach 1:
The patent extracts the potentially unsafe configuration management tools and services from remote systems, concentrating them on local systems instead. This extraction eliminates the security vulnerabilities associated with having full-featured configuration management agents on resource-constrained remote systems, while maintaining orchestration functionality through the lightweight local service architecture
Solution Approach 2:
The patent introduces an intermediary lightweight service that acts as a secure bridge between local and remote systems. This intermediary provides controlled access without requiring full-featured configuration management tools on remote systems, thereby reducing the attack surface and safety risks while maintaining remote service orchestration capability
Data Source
AI summary
The technology disclosed herein enables receiving a first remote access command identifying a second computing system, a service on the second computing system, and an action to be performed with respect to the service by a service manager of a first computing system, and transmitting a first action command derived from the first remote access command to a service manager of the second computing system by the service manager of the first computing system. The service manager of the second computing system is enabled for remote access.