Network secure communications in a cluster computing environment

摘要

Secure communications are provided over a network in a distributed workload environment having target hosts which are accessed through a distribution processor by a common network address. Secure communications are provided by routing both inbound and outbound communications with target hosts which are associated with a secure network communication through the distribution processor. Both inbound and outbound secure network communications are processed at the distribution processor so as to provide network security processing of communications from the target host and network security processing of communications to the target host.

主权项

1. A secure network communications system in a distributed workload environment having target hosts which are accessed through a distribution processor by a common network address, comprising:
a computer memory configured to store program instructions; means for receiving at the distribution processor, network communications directed to the common network address; a processor configured to execute the program instructions in order to create: means for determining whether the network communications are secure network communications; means for processing secure network communications having:
means for routing both inbound and outbound communications with target hosts which are associated with an end-to-end secure network communication through the distribution processor;means for processing both inbound and outbound end-to-end secure network communications at the distribution processor so as to provide endpoint network security processing of communications from the target host to the distribution processor and endpoint network security processing of communications from the distribution processor to the target host such that the distribution processor serves as an endpoint for the end-to-end secure network communication; andmeans for distributing the received secure network communications that are directed to the common network address among selected ones of the target hosts so as to distribute workload associated with the network communications among the target hosts including means for encapsulating communications between the distribution processor and the selected ones of the plurality of target hosts which are associated with end-to-end secure network communications so as to distinguish communications between the distribution processor and the selected ones of the plurality of target hosts which are associated with secure network communications from other communications; and means for processing non-secure communications by distributing the received network communications that are directed to the common network address among the target hosts so as to distribute workload associated with the network communications among the target hosts.