System and method for managing virtual machine configurations

A non-transitory media having logic stored therein to perform operations comprising:

• receiving a plurality of command messages through a control channel, wherein the plurality of command messages includes one or more criteria;
• reconstructing the plurality of command messages to determine an intended command for configuring one or more virtual machines on a server device, wherein the intended command corresponds to an operation defined in a policy database;
• determining whether the plurality of command messages are received from a control proxy, wherein the server device is disabled from performing operations associated with the plurality of configuration commands based, at least in part, on whether they are received from the control proxy;
• determining if the operation is permitted by comparing one or more policies associated with the operation to the one or more criteria;
• and
• sending the plurality of command messages to the server device if the operation is permitted.

A control proxy, comprising:

• a memory component configured to store a policy database;
• and
• a processor operable to execute instructions associated with a protocol message module and a policy module, including:
• receiving a plurality of command messages through a control channel, wherein the plurality of command messages includes one or more criteria;
• reconstructing the plurality of command messages to determine an intended command for configuring one or more virtual machines on a server device, wherein the intended command corresponds to an operation defined in a policy database;
• determining whether the plurality of command messages are received from a control proxy, wherein the server device is disabled from performing operations associated with the plurality of configuration commands based, at least in part, on whether they are received from the control proxy;
• determining if the operation is permitted by comparing one or more policies associated with the operation to the one or more criteria;
• and
• sending the plurality of command messages to the server device if the operation is permitted.