Oracle International Corporation

Sanjeeb Kumar Sahoo

Anthony Long

Jagwinder Singh Brar

Graham Bromley

Thomas James Andrews

Mauruthi Geetha Mohan

Mina Anes

Mina Michel Gorgy Anes

Yingyu Yang

Bakhtiyar Uddin

Benjamin Charles Gay

Shane Burgess

Rajesh Desai

According to certain implementations, a certificate management service of a cloud service provider requests a certificate for a domain from a certificate authority utilizing an HTTP-based challenge. The certificate authority responds with a challenge string and a subdirectory within the domain. The challenge string and subdirectory within the domain are sent from the certificate management service to a proxy server of the cloud service provider that manages a flow of data to a host that hosts the domain. When the certificate authority sends a request to the sub directory within the domain, the request is intercepted at the proxy server. Instead of forwarding the request to the host that hosts the domain, the proxy server responds to the certificate authority with the challenge string. This verifies ownership of the domain, which is required to obtain the certificate for the domain.

Obtaining a domain certificate utilizing a proxy server

Techniques described herein relate to authorization between integrated cloud products. An example includes receiving, by a computing device and from a first resource, a first request for permission to access a certificate to verify a requestor's identity. The computing device can transmit a second request to a second resource to authorize permitting access to the certificate. The computing device can receive a response from the second resource comprising an authorization to permit access to the certificate. The computing device can grant permission to the first resource to access the certificate, wherein the first resource is configured to verify the requestor's identity based on accessing the certificate. The computing device can receive a third request from the first resource to generate an association object between the first resource and the certificate. The computing device can generate the association object, wherein the association object associates the first resource and the certificate.

Authorization between integrated cloud products using association

In response to a request to replicate resources from a primary region data center to a secondary region data center, an executable configuration file that describes the resources and their configuration is created utilizing information about the resources at the primary region data center. A correspondence table is also updated to include entries for to such resources. Utilizing the correspondence table, the executable configuration file is transformed to create a transformed executable configuration file that references the resources utilizing generic resource identifiers instead of primary region identifiers used within the primary region data center. The transformed executable configuration file is then executed at the secondary region data center to create replicated resources at the secondary region data center.

Replicating resources between regional data centers

When a cloud services provider infrastructure (CSPI) receives a request from an administrator to perform an operation on an appliance, a load balancer may select a first server within the CSPI to process the request. If the first server does not have a connection with the appliance, the first server may generate a redirect response that includes server identification information identifying a particular server having a pre-established connection with the appliance. The first server may send the redirect response to the application that the administrator used to send the request. The application may then generate a second request that includes the server identification information, and send the second request to the CSPI. A load balancer in the CSPI may then forward the second request to the particular server, and the particular server may use the pre-established connection to send a request to the appliance requesting performance of the operation.

Routing of web requests to on-premise network in a multi-tenant environment

Growing community of inventors

Fremont, CA, United States of America

Sanjeeb Kumar Sahoo