20240039804. AUTOMATING SECURED DEPLOYMENT OF CONTAINERIZED WORKLOADS ON EDGE DEVICES simplified abstract (VMWARE, INC.)

AUTOMATING SECURED DEPLOYMENT OF CONTAINERIZED WORKLOADS ON EDGE DEVICES

Organization Name

VMWARE, INC.

Inventor(s)

EROL Aygar of Maynard MA (US)

MARGARET NATASHA Drew of San Francisco CA (US)

MARK Peek of Anacortes WA (US)

DANIEL Beveridge of Valrico FL (US)

RAUNAK RAVINDRA Singwi of Pune (IN)

NILANJAN Daw of Bangalore (IN)

PRANAY Pareek of Sunnyvale CA (US)

SAIRAM Veeraswamy of Coimbatore (IN)

AMARNATH Raghunathan of San Jose CA (US)

AUTOMATING SECURED DEPLOYMENT OF CONTAINERIZED WORKLOADS ON EDGE DEVICES - A simplified explanation of the abstract

This abstract first appeared for US patent application 20240039804 titled 'AUTOMATING SECURED DEPLOYMENT OF CONTAINERIZED WORKLOADS ON EDGE DEVICES

Simplified Explanation

The patent application describes computer-implemented methods, media, and systems for automating the secured deployment of containerized workloads on edge devices.

• The method involves receiving resource quotas for a compute service from a remote manager by a software-defined wide area network (SD-WAN) edge device.
• Pre-deployment sanity checks are performed to confirm the availability of resources that satisfy the resource quotas at the SD-WAN edge device.
• If the resources are available, security constructs are set up to isolate SD-WAN network functions from the compute service at the SD-WAN edge device.
• The compute service is then attached to the SD-WAN network by the SD-WAN edge device.
• An acknowledgement is sent to the remote manager to confirm that the compute service is enabled at the SD-WAN edge device.

Potential applications of this technology:

• Automation of secured deployment of containerized workloads on edge devices.
• Efficient utilization of resources by confirming availability before deployment.
• Isolation of SD-WAN network functions from compute services for enhanced security.

Problems solved by this technology:

• Streamlining the deployment process by automating resource availability checks.
• Ensuring security by isolating SD-WAN network functions from compute services.
• Simplifying the management of containerized workloads on edge devices.

Benefits of this technology:

• Improved efficiency and resource utilization.
• Enhanced security and isolation of network functions.
• Simplified deployment and management processes.

Original Abstract Submitted

computer-implemented methods, media, and systems for automating secured deployment of containerized workloads on edge devices are disclosed. one example computer-implemented method includes receiving, by a software defined wide area network (sd-wan) edge device and from a remote manager, resource quotas for a compute service to be enabled at the sd-wan edge device. pre-deployment sanity checks are performed by confirming availability of resources satisfying the resource quotas, where the resources are at the sd-wan edge device. in response to the confirmation of the availability of resources satisfying the resource quotas, one or more security constructs are set up to isolate sd-wan network functions at the sd-wan edge device from the compute service at the sd-wan edge device. the compute service is attached to a sd-wan network by the sd-wan edge device. an acknowledgement that the compute service is enabled at the sd-wan edge device is sent to the remote manager.