A service control system manages a set of containers operating within one or more computing hosts. Containers may access a consistent runtime environment regardless which cloud provider the computing hosts come from. Each computing host also runs a control plane agent that interacts with the service control system to provide a set of services to the containers on the computing host and connect the containers to an overlay network of the service control system. The service control system thus may provide networking, firewall, storage, and load balancing services to the various containers. This permits a set of heterogeneous computing hosts to provide consistent services regardless of the underlying computing resources and containers that are managed by the service control system.

Cloud computing service architecture

Systems, methods, and software described herein provide enhancements for orbital satellite platforms. In one example, an orbital satellite platform includes a plurality of satellite devices each comprising a virtualized execution system configured to execute one or more software payloads as associated virtual nodes. An active satellite device is provided among the plurality of satellite devices and is configured to execute at least an active virtual node, determine state information related to the execution of the active virtual node, and periodically update the state information in a storage satellite device. The storage satellite device is configured to select a level of statefulness for delivery of the state information to a peer satellite device designated as an operational backup for the active satellite device.

Bandwidth aware state transfer among satellite devices

Systems, methods, and software described herein provide enhancements for orbital satellite platform. In one example, an orbital satellite platform includes a plurality of satellite devices configured to establish a pseudo-geosynchronous window corresponding to an underlying zone of interest by at least transferring state information related to execution of a designated software payload from outgoing satellite devices leaving the pseudo-geosynchronous window for receipt by target satellite devices entering the pseudo-geosynchronous window. During orbital passage within the pseudo-geosynchronous window, the target satellite devices are configured to execute the designated software payload in accordance with the state information.

Pseudo-geosynchronous configurations in satellite platforms

Various enhanced operations and orbital techniques for satellite devices are discussed herein. In one example, a method of operating an orbital satellite platform is provided. The method includes establishing relative distances between a plurality of satellite devices, and performing temporary adjustments to the relative distances between the satellite devices. The method also includes directing at least communication processes among the satellite devices based at least in part on the temporary adjustments to the relative distances.

Bandwidth optimizing range adjustments among satellites

A system, program and method are provided for monitoring and detecting changes for infrastructure orchestration templates. A computer provisions a stack using an existing template. The computer detects a change in the stack, wherein the detecting includes comparing at least one configuration element of the stack to at least one definition stored within a repository of a system. The computer determines whether the change is relevant to the existing template. In response to the change being relevant, the computer determines a type of change in the stack. The computer performs either updating a relevant section of the existing template or creating a new template by adding a new portion, which defines a new configuration element according to the type of change in the stack.

Closed-loop infrastructure orchestration templates

A service provider system may implement an enterprise catalog service that manages software products and portfolios of software products on behalf of service provider customer organizations. Through an administrator interface of the service, a customer organization administrator may create constraints on the use of the software products, and each constraint may include one or more rules about how the products can be launched. These may include environmental constraints (specifying a region in which a product launches), restrictions on input parameter values (including the types of resource instances on which a product can be launched), quotas (controlling the number of product installations), or billing constraints. Constraints may be applied on a user-to-product arc or on a portfolio-to-product arc. Constraints may be stored as objects, and reference to those objects may be added to product or portfolio objects. Constraints may be shared across object versions, portfolios, or service provider customer accounts.

Constraints and constraint sharing in a catalog service platform

Systems and methods are described for enabling users to model security resources and user access keys as resources in a template language. The template can be used to create and update a stack of resources that will provide a network-accessible service. The security resources and access keys can be referred to in the template during both stack creation process and the stack update process. The security resources can include users, groups and policies. Additionally, users can refer to access keys in the template as dynamic parameters without any need to refer to the access keys in plaintext. The system securely stores access keys within the system and allows for templates to refer to them once defined. These key references can then be passed within a template to resources that need them as well as passing them on securely to resources like server instances through the use of the user-data field.

Template representation of security resources

Systems and methods are described for bootstrapping an application with metadata specified in a template The template specifies a stack of resources that will be used to execute an application and also includes a set of metadata for customizing the resources and the application When the system receives the template, it instantiates a compute node which will execute the application The compute node may contain at least one initialization script for bootstrapping the application with the metadata contained in the template This functionality allows users to bootstrap the application running on the compute node with data from within the template that was used to create the stack of resources for executing the application In this manner, metadata, configuration files, package names and versions can be passed by the application owner to the remote compute node

Using scripts to bootstrap applications with metadata from a template

A service provider system may implement a notification service that manages actionable notification messages received from other services on behalf of a customer organization and its end users. An IT administrator of the customer organization may create and configure message inboxes to be maintained by the notification service. The messages stored in each inbox may be partitioned by source, type, targeted (authorized) recipients, or an associated message topic. Each message may include an identifier of the inbox to which it is directed, and active elements that, when selected by a recipient, cause a corresponding action to be performed. The service from which a message is received may, in response to a message recipient taking one of the available actions, submit a request to the notification service to update the message state. The notification service may provide APIs through which the other services and message recipients interact with the notification service.

Richard Curtis Edwards

Papers

Constraints and constraint sharing in a catalog service platform

Template representation of security resources

Using scripts to bootstrap applications with metadata from a template

Notification service for managing actionable messages from backend services