Method and system to provision and manage a computing application hosted by a virtual instance of a machine

摘要

A system and method are described for provisioning and managing virtual instances of a computing application running within a public virtualization space (referred to as a hosted service system). A hosted service system may be configured to provide automated administration of the computing application, replacing the administration tasks that would otherwise be performed by the customer when running in an on-premise production deployment and to provide encrypted networking and other services that are specific to the public virtualization environment and are designed to provide a secure integration fabric between a customer's own private data center and virtual instances of the computing application running within an insecure public virtualization service.

主权项

1. A computer-implemented method comprising:
using one or more processors at a hosted service system to perform operations of: receiving a request from a client computer system to instantiate a computing application; in response to the request from the client computer system to instantiate the computing application:
requesting that a public virtualization service loads a virtual instance, the virtual instance being a virtual computing system hosting the computing application,providing a public encryption key to a public network storage system, the public encryption key to facilitate a secure communication channel between the hosted service system and the virtual instance,generating a launch configuration based on the request from the client computer system, the launch configuration including an instruction to employ an encrypted object stored at the public network storage system to provide a personalized state of the computing application,providing the launch configuration to the public network storage system; and facilitating configuring the virtual instance according to the launch configuration via the secure communication channel established between the virtual instance and the hosted service system using the public encryption key, the configuring including pushing a private decryption key from the hosted service system over the secure communication channel to the virtual instance to allow the virtual instance to decrypt the encrypted object and using the secure communication channel to monitor a state of the virtual instance, wherein the virtual instance is accessible by the client computer system via a browser application executing on the client computer system.