System and method for restricting data transfers and managing software components of distributed computers

Abstract

A controller, referred to as the “BMonitor”, is situated on a computer. The BMonitor includes a plurality of filters that identify where data can be sent to and/or received from, such as another node in a co-location facility or a client computer coupled to the computer via the Internet. The BMonitor further receives and implements requests from external sources regarding the management of software components executing on the computer, allowing such external sources to initiate, terminate, debug, etc. software components on the computer. Additionally, the BMonitor operates as a trusted third party mediating interaction among multiple external sources managing the computer.

1 . One or more computer-readable media having stored thereon a computer program that, when executed by one or more processors of a node in a co-location facility, causes the one or more processors to perform acts including: 
 beginning and terminating execution of components on the node in response to received commands; and    restricting which other nodes in the co-location facility components that are executing on the node can receive data from and send data to.    
   
   
       2 . One or more computer-readable media as recited in  claim 1 , wherein a plurality of management devices share management responsibility for the node, and wherein beginning and terminating execution of components on the node is restricted to only one of the plurality of management devices at a time.  
   
   
       3 . One or more computer-readable media as recited in  claim 1 , wherein the restricting comprises: 
 checking whether it is permissible to forward received data to its intended target; and    forwarding the received data to its intended target only if it is permissible to do so.    
   
   
       4 . One or more computer-readable media as recited in  claim 3 , wherein the intended target comprises another node in the co-location facility.  
   
   
       5 . One or more computer-readable media as recited in  claim 3 , wherein the intended target comprises at least one of the components executing on the node.  
   
   
       6 . One or more computer-readable media as recited in  claim 1 , wherein the beginning and terminating execution of components comprises beginning and termination execution of the components based on commands received from an operations console at a location remote from the co-location facility.  
   
   
       7 . One or more computer-readable media as recited in  claim 1 , wherein one of the components comprises an operating system.  
   
   
       8 . A method comprising: 
 receiving, at a node in a co-location facility, a first request from a first control console that is local to the co-location facility;    implementing the first request;    receiving, at the node, a second request from a second control console that is remote from the co-location facility; and    implementing the second request.    
   
   
       9 . A method as recited in  claim 8 , wherein the first request comprises hardware operation oriented commands.  
   
   
       10 . A method as recited in  claim 8 , wherein the second request comprises software application control oriented commands.  
   
   
       11 . A method as recited in  claim 8 , wherein the first request corresponds to one of a first set of rights that are granted to the first control console, wherein the second request corresponds to one of a second set of rights that are granted to the second control console, and wherein the first set of rights is more restricted than the second set of rights.  
   
   
       12 . One or more computer-readable memories containing a computer program that is executable by a processor to perform the method recited in  claim 8 .  
   
   
       13 . One or more computer-readable media having stored thereon a computer program that, when executed by one or more processors of a node in a facility, causes the one or more processors to perform acts including: 
 establishing a boundary of a server cluster in the facility, wherein the server cluster includes the node; and    altering the boundary of the server cluster based on commands received from a console outside the server cluster.    
   
   
       14 . One or more computer-readable media as recited in  claim 13 , wherein the establishing comprises including a filter that restricts access to another node that is in the facility but that is not in the server cluster.  
   
   
       15 . One or more computer-readable media as recited in  claim 13 , wherein the establishing comprises generating a plurality of filters identifying only other nodes in the server cluster as being permissible to access.  
   
   
       16 . One or more computer-readable media as recited in  claim 13 , wherein the computer program, when executed, further causes the one or more processors to perform acts including executing a software engine in response to a command received from the console.  
   
   
       17 . One or more computer-readable, media as recited in  claim 13 , wherein the computer program, when executed, further causes the one or more processors to perform acts including terminating execution of a software engine in response to a command received from the console.  
   
   
       18 . One or more computer-readable media as recited in  claim 13 , wherein the facility comprises a co-location facility.