Policy-driven workload launching based on software defined networking encryption policies
AssigneeJuniper Networks, Inc.
InventorPrasad Miriyala
Life of this patent
Estimating the term…
Abstract
Techniques are disclosed for implementing scalable policies across a plurality of categories that support application workloads. In one example, the policy is a security policy that indicates which types of virtualized application workloads are required to communicate with encryption and groups computing devices into zones that communicate via respective tunnels configured to carry encrypted communication. An orchestration engine selects a computing device based on the zones fined in the security policy to ensure that the virtualized application workloads requiring encrypted communication communicate via tunnels configured to carry encrypted communication.
Claims16
A method comprising:
- configuring, by a software defined networking (SDN) controller, a network to form tunnels between computing devices in accordance with a security policy, wherein the security policy defines one or more types of virtualized application workloads that require encrypted communications and groups the computing devices into one or more zones that communicate via a respective subset of tunnels, wherein at least one of the subsets of the tunnels is configured to carry encrypted communication, and wherein each of the computing devices provides an execution environment for a plurality of virtualized application workloads;
- responsive to a request to execute a virtualized application workload, accessing, by an orchestration engine, the security policy implemented by the SDN controller;
- determining, by the orchestration engine, that the virtualized application workload requires encrypted communication based on the security policy;
- selecting, by the orchestration engine, a computing device from the computing devices in one of the zones defined in the security policy for communicating via at least one tunnel that is configured to carry encrypted communication;
- and
- deploying, by the orchestration engine, the application workload to the selected computing device.
A system comprising:
- a software defined networking (SDN) controller configured to configure a network to form tunnels between computing devices in accordance with a security policy, wherein the security policy defines one or more types of virtualized application workloads that require encrypted communications and groups the computing devices into one or more zones that communicate via a respective subset of tunnels, wherein at least one of the subsets of the tunnels is configured to carry encrypted communication, and wherein each of the computing devices provides an execution environment for a plurality of virtualized application workloads;
- and
- an orchestration engine configured to:
- access the security policy implemented by the SDN controller, responsive to a request to execute a virtualized application workload;
- determine that the virtualized application workload requires encrypted communication based on the security policy;
- select a computing device from the computing devices in one of the zones defined in the security policy for communicating via at least one tunnel that is configured to carry encrypted communication;
- and
- deploy the application workload to the selected computing device.
Dependencies are inferred from the claim text.