System and Method for Distributed Management of Shared Computers

Abstract

A multi-tiered server management architecture is employed including an application development tier, an application operations tier, and a cluster operations tier. In the application development tier, applications are developed for execution on one or more server computers. In the application operations tier, execution of the applications is managed and sub-boundaries within a cluster of servers can be established. In the cluster operations tier, operation of the server computers is managed without concern for what applications are executing on the one or more server computers and boundaries between clusters of servers can be established. The multi-tiered server management architecture can also be employed in co-location facilities where clusters of servers are leased to tenants, with the tenants implementing the application operations tier and the facility owner (or operator) implementing the cluster operations tier.

1 . A method comprising: 
 allowing a tenant to which a cluster of one or more computers at a facility have been leased to communicate with the one or more computers; and    implementing cluster boundaries at the facility to prevent computers within the cluster from communicating any data with computers in another cluster.    
   
   
       2 . A method as recited in  claim 1 , wherein the facility comprises a co-location facility.  
   
   
       3 . A method as recited in  claim 1 , wherein the allowing comprises establishing secure communications channels between the one or more computers and a corresponding tenant operations management console.  
   
   
       4 . A method as recited in  claim 1 , wherein the implementing cluster boundaries comprises adding one or more filters to each of the one or more computers in the cluster.  
   
   
       5 . A method as recited in  claim 4 , wherein the implementing cluster boundaries further comprises including, in filters of each of the one or more computers, the addresses of the other computers at the facility that are not in the cluster.  
   
   
       6 . A method as recited in  claim 4 , further comprising: 
 allowing the tenant to establish sub-boundaries within the cluster to prevent one or more computers in the cluster from communicating with one or more other computers in the cluster.    
   
   
       7 . A method as recited in  claim 6 , wherein allowing the tenant to establish sub-boundaries comprises allowing the tenant to add one or more additional filters to one or more computers in the cluster, wherein each of the one or more additional filters is at least as restrictive as the one or more filters added in implementing the cluster boundaries.  
   
   
       8 . A computer comprising: 
 a controller including an interface via which a tenant to which a cluster of computers at a facility have been leased can communicate with the computer, wherein the computer is included in the cluster;    a plurality of filters, each filter restricting communication with one or more other computers at the facility; and    wherein the controller uses the plurality of filters to implement a cluster boundary at the facility to prevent all data communications between the computer and other computers in other clusters.    
   
   
       9 . A computer as recited in  claim 8 , wherein one of the plurality of filters indicates that no data can be sent to a particular one or more of the other computers.  
   
   
       10 . A computer as recited in  claim 8 , wherein one of the plurality of filters indicates that no data can be received from a particular one or more of the other computers.  
   
   
       11 . A computer as recited in  claim 8 , wherein each of the plurality of filters includes an address of one of the other computers in one of the other clusters.  
   
   
       12 . A computer as recited in  claim 8 , further comprising: 
 one or more additional filters, each of the one or more additional filters restricting communication with one or more computers in the cluster of computers; and    wherein the controller uses the one or more additional filters to implement a sub-boundary within the cluster of computers to prevent the computer from communicating with one or more additional computers in the cluster.    
   
   
       13 . A computer as recited in  claim 12 , wherein each of the one or more additional filters is at least as restrictive as the plurality of filters.  
   
   
       14 . One or more computer-readable media having stored thereon instructions that, when executed by one or more processors, cause the one or more processors to: 
 allow a tenant to which a cluster of one or more computers at a facility have been leased to communicate with the one or more computers; and    implement cluster boundaries at the facility to prevent all data communications between computers within the cluster and computers in another cluster.    
   
   
       15 . One or more computer-readable media as recited in  claim 14 , wherein the instructions further cause the one or more processors to: 
 perform at least some management of the computers via a landlord operations management console; and    establish secure communications channels between each of the plurality of computers and the landlord operations management console.    
   
   
       16 . One or more computer-readable media as recited in  claim 15 , wherein the landlord operations management console is located at the facility.  
   
   
       17 . One or more computer-readable media as recited in  claim 14 , wherein to implement cluster boundaries is to add one or more filters to each of the one or more computers in the cluster.  
   
   
       18 . One or more computer-readable media as recited in  claim 17 , wherein to implement cluster boundaries is further to include, in filters of each of the one or more computers, the addresses of the other computers at the facility that are not in the cluster.  
   
   
       19 . One or more computer-readable media as recited in  claim 17 , wherein the instructions further cause the one or more processors to: 
 allow the tenant to establish sub-boundaries within the cluster to prevent one or more computers in the cluster from communicating with one or more other computers in the cluster.    
   
   
       20 . One or more computer-readable media as recited in  claim 19 , wherein to allow the tenant to establish sub-boundaries is to allow the tenant to add one or more additional filters to one or more computers in the cluster, wherein each of the one or more additional filters is at least as restrictive as the one or more filters added in implementing the cluster boundaries.