# US 2021/0344754 A1 · Self-Replicating Management Services for Distributed Computing Architectures > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0344754 A1 - Document ID: US20210344754A1 - Status: Published application - Kind: A1 - Application number: 17/376,652 - Filed: 2021-07-15 - Published: 2021-11-04 - Earliest claimed: 2018-02-27 - Assignees: Elasticsearch B.V. - Applicants: Elasticsearch B.V. - Inventors: Alex Brasetvik; Njal Karevoll - Web page: https://patentgrep.com/patent/US20210344754A1 ## CPC - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 67/1095: Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - H04L 41/28: Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration - H04L 67/1001: for accessing one among a plurality of replicated servers - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Self-replicating management services for distributed computing architectures are provided herein. An example method includes providing one or more nodes providing services; and maintaining a quorum of a plurality of management servers by: providing a distributed coordination service for the one or more nodes on each of the plurality of management servers; managing, via a director, requests for data on the distributed coordination service from the one or more nodes; promoting at least one of the one or more nodes to being one of the plurality of management servers; and maintaining secure tunnels between the plurality of management servers and the one or more nodes. ## Claims ### Claim 1 A system comprising: one or more nodes providing services; and a plurality of management servers, each of the plurality of management servers comprising: at least a distributed coordination service for the one or more nodes, the distributed coordination service being a datastore; a director that manages the distributed coordination service, the director being configured to: manage requests for data of the distributed coordination service from the one or more nodes; promote at least one of the one or more nodes to being one of the plurality of management servers; and maintain secure tunnels between the plurality of management servers and the one or more nodes. ### Claim 2 (depends on 1) The system according to claim 1, wherein the at least one of the one or more nodes that was promoted to being one of the plurality of management servers is also configured to promote at least one of the one or more nodes to being one of the plurality of management servers. ### Claim 3 (depends on 1) The system according to claim 1, wherein a number of the one or more nodes promoted by the director is based on a server quorum value. ### Claim 4 (depends on 1) The system according to claim 1, wherein the director is further configured to write distributed coordination service configuration files in such a way that a uniqueness of an identification of the distributed coordination service is maintained. ### Claim 5 (depends on 1) The system according to claim 1, wherein the director is further configured to verify that replication of the distributed coordination service on the at least one of the one or more nodes has resulted in synchronization with the plurality of management servers. ### Claim 6 (depends on 1) The system according to claim 1, wherein the encryption infrastructure provides transparent encryption of traffic. ### Claim 7 (depends on 1) The system according to claim 1, wherein the director is further configured to discover all other directors on the plurality of management servers. ### Claim 8 (depends on 1) The system according to claim 1, wherein the plurality of management servers each comprise a dedicated management interface providing unrestricted access to the distributed coordination service. ### Claim 9 (depends on 1) The system according to claim 1, wherein the plurality of management servers each comprise one or more client ports. ### Claim 10 (depends on 9) The system according to claim 9, wherein the director is further configured to: issue certificates to any of the one or more nodes that desire to connect to any of the plurality of management servers; and grant access to certificate bearing nodes on the one or more client ports. ### Claim 11 (depends on 1) The system according to claim 1, wherein each of the plurality of management servers comprise a client forwarder that cooperates with the director to forward a known set of local ports and transparently handle encryption of traffic and automatically update the forwarded ports when any of the directors of the plurality of management servers are unavailable. ### Claim 12 (depends on 1) The system according to claim 1, wherein the director is further configured to implement a blueprinter that assigns each of the one or more nodes to at least one of the plurality of management servers based on a role associated with the one or more nodes. ### Claim 13 (depends on 11) The system according to claim 11, wherein the blueprinter is further configured to dynamically reassign a node of the one or more nodes when the role changes or a role of a currently assigned management server is changed. ### Claim 14 (depends on 13) The system according to claim 13, wherein the role is defined using a token, wherein the blueprinter cryptographically verifies that the token is valid and untampered. ### Claim 15 (depends on 14) The system according to claim 14, wherein the blueprinter is configured to ensure that automatically assigned management server relationships do not conflict with manually assigned management server relationships. ### Claim 16 A method, comprising: providing one or more nodes providing services; and maintaining a quorum of a plurality of management servers by: providing at least a distributed coordination service for the one or more nodes on each of the plurality of management servers, the distributed coordination service being a datastore; managing, via a director, requests for data on the distributed coordination service from the one or more nodes; promoting at least one of the one or more nodes to being one of the plurality of management servers; and maintaining secure tunnels between the plurality of management servers and the one or more nodes. ### Claim 17 (depends on 16) The method according to claim 16, further comprising: receiving a request from at least one or more nodes providing services to connect with the distributed coordination service; and connecting the at least one or more nodes to the distributed coordination service through a client forwarder. ### Claim 18 (depends on 17) The method according to claim 17, wherein the at least one of the one or more nodes that is promoted is the at least one or more nodes that has connected to the distributed coordination service through the client forwarder. ### Claim 19 (depends on 16) The method according to claim 16, wherein promoting further comprises writing distributed coordination service configuration files to the at least one of the one or more nodes in such a way that a uniqueness of an identification of the distributed coordination service is maintained. ### Claim 20 (depends on 16) The method according to claim 16, wherein the secure tunnels provide transparent encryption of traffic. ### Claim 21 (depends on 16) The method according to claim 16, wherein promoting comprises replicating the distributed coordination service. ### Claim 22 (depends on 16) The method according to claim 16, wherein promoting comprises starting a new director on the at least one or more nodes. ### Claim 23 (depends on 16) The method according to claim 16, wherein the director is further configured to discover all other directors on the plurality of management servers. ### Claim 24 (depends on 16) The method according to claim 16, wherein the plurality of management servers each comprise a dedicated management interface providing unrestricted access to the distributed coordination service. ### Claim 25 (depends on 16) The method according to claim 16, wherein the plurality of management servers each comprise one or more client ports.