Vmware, Inc.

Stephen Evanchik

Glenn Bruce McElhoe

John F Kilroy

Bradley R Neighbors

Jeff Moroski

Iliyan Lesev

Some embodiments provide a method for providing access in a scalable manner to resources in a first datacenter to clients operating in one or more public clouds. The method of some embodiments implements with multiple machines a public-cloud proxy to connect clients in the public cloud(s) to a reverse proxy in the first datacenter. For instance, in response to a request to access a first resource in the first datacenter from a first client executing outside of the first datacenter, the method: (1) assigns a first proxy-implementing machine operating outside of the first datacenter to establish a first connection with the first client, (2) assigns a second proxy-implementing machine operating outside of the first datacenter to establish a second connection with the reverse proxy that operates in the first datacenter and that provides access to the first resource, and (3) establishes a third connection between the first and second proxy-implementing machines to forward messages between the first client and the reverse proxy through the first, second, and third connections.

Providing access to datacenter resources in a scalable manner

An example method of managing rights in a cloud computing system includes: creating a role template having a role template set of rights to resources in the cloud computing system; assigning a tenant set of rights to the resources to each of a plurality of tenants of the cloud computing system, respectively; and creating a role instance for each respective tenant based on the role template and assigning the role instance to each respective tenant, where the role instance is linked to the role template in the cloud computing system and where the role instance includes a role instance set of rights that includes an intersection of the role template set of rights and the tenant set of rights for the respective tenant.

Role-template-based batch management of tenant-specific roles and rights in a computing system

System and method uses a defined entity type that describes a data structure of a defined computing entity and at least one behavior of the defined computing entity based on user input information. The at least one behavior of the defined computing entity is defined by associating at least one interface with the defined entity type, where the at least one interface represents a reference entity type with a collection of behavior information. An operation is then executed on the defined computing entity according to the at least one behavior of the defined computing entity.

Growing community of inventors

Danvers, MA, United States of America

Stephen Evanchik