Patent ID: 9201704
Filing Date: 2015-12-01
Classification: G06F

Abstract:
1. A method, comprising: managing a virtual machine (VM) in a cloud extension, wherein the VM communicates with a part of a distributed virtual switch (DVS) of an enterprise network, wherein the DVS extends into the cloud extension through a virtual interface of the DVS in the cloud extension; abstracting an interface that is transparent to a cloud infrastructure of the cloud extension with a nested VM container (NVC) in the cloud extension such that the VM executes in the NVC irrespective of hardware and operating system of the cloud infrastructure, wherein the NVC hosts the VM in the cloud extension and facilitates compute, storage and networking services for the VM over a network overlay using emulation techniques; authenticating the NVC with the virtual interface of the DVS in the cloud extension to establish a secure tunnel between the VM and the virtual interface of the DVS through the NVC; intercepting, by the NVC, network traffic to and from the VM; and filtering out, by the NVC, network traffic to the VM from outside the enterprise network.