Abstract:
A method and system for the resource allocation for an interactive session on a grid computing system. When a user-request for an interactive session is received, the particular applications needed to be launched in the interactive session are identified, as are resource requirements for the interactive session including processor, network bandwidth, executables and files requirements. A contract is then generated for the interactive session specifying resource allocations and authorizations, and resources for the interactive session are allocated in accordance with the contract. The system includes a distributed resource management node, a contract generation engine, and a contract repository.

Description:
FIELD OF THE INVENTION 
   The present invention relates generally to grid computing systems, and more specifically, to methods and systems for managing the resource allocation to enable interactive sessions on grid computing systems. 
   BACKGROUND OF THE INVENTION 
   Grid computing is a form of computer networking. Whereas conventional computer networks focus on communication between devices, grid computing typically harnesses the processing power of multiple computers within a network, and can thus be used for solving problems which are too intensive for any stand-alone machine. Grid computing also involves the sharing of computer resources. A single computer user whose normal requirements for computer processing power are fairly minor may occasionally have more substantial needs, and the existence of a computer grid enables the user to “borrow” external computer resources for a period of time. 
   Grid computing has to date typically been applied to scientific or technical problems that require a large number of computer processing cycles or access to large amounts of data. An example of a grid computing project is the SETI @ Home project, in which computer users connected to the Internet donate the unused processing power of their computers to process data associated with signals coming from outer space, to help the search for signs of extraterrestrial life. In a typical grid computing application, a large problem is divided and farmed out to a large number of computers, before the results are returned and collated. Grid computing can be confined to the network of computer workstations within a corporation or it can be a public collaboration. Whereas the Internet enables the exchange of information, grid computing enables the exchange of computer power, data storage, and access to large databases, without users having to search for these resources manually. However, existing systems and methods, have not fully addressed the issues relating to grid computing. Currently unresolved issues include the enabling of interactive sessions on a grid computer network, and appropriate methods for controlling and managing the resource allocation. 
   SUMMARY OF THE INVENTION 
   In brief, the present invention provides a method and system for the resource allocation for an interactive session on a grid computing system. When a user request for the interactive session is received, applications to be launched in the interactive session are identified, as are resource requirements for the interactive session including processor, network bandwidth, executables and files requirements. A contract is then generated for the interactive session specifying resource allocations and authorizations, and resources for the interactive session are allocated in accordance with the contract. The system of the present invention includes in one embodiment a distributed resource management node, a contract generation engine, and a contract repository. 
   The use of contracts in accordance with the invention permits appropriate control and management of interactive sessions in a grid computing system. It also addresses scalability issues in terms of grid-users, accounts, policies, resources, contracts in grid computing systems. 
   It is to be understood that other aspects of the present invention will become readily apparent to those skilled in the art from the following detailed description where, simply by way of illustration, example embodiments of the invention are shown and described. As will be realized, the invention is capable of other and different embodiments, and its several details are capable of modifications in various respects, all without departing from the invention. Accordingly, the drawings and description are to be regarded as illustrative in nature and not as restrictive. 

   
     BRIEF DESCRIPTION OF THE DRAWINGS 
       FIG. 1  is a functional block diagram of an operating environment of a grid computing system embodiment of the present invention. 
       FIG. 2  is a detailed process diagram of a distributed resource management (DRM) node embodiment of the present invention. 
       FIG. 3  is a flow chart of a contract generation engine process embodiment of the present invention. 
       FIG. 4  is a block diagram of an architecture for a general purpose computer embodiment of the present invention. 
       FIG. 5  is an example application profile for a contract generation embodiment of the present invention. 
   

   DETAILED DESCRIPTION 
     FIG. 1  represents grid computing system embodiment of the present invention, and is referred to herein by the general reference numeral  100 . Grid computing system  100  includes a distributed resource management (DRM) node  110 , one or more submission nodes  112 , and an execution nodes  114 . The DRM node  110  receives input from one or more policies  118 , one or more application profile repositories  120 , and an information service  122 . Such information service  122  stores information about resources in the system. The application profile repositories  120  store application profiles. The distributed resource management framework is distributed across the submission nodes  112 , the DRM node  110 , and the execution nodes  114 . The user may submit requests through the one or more submission nodes  112 . 
   In one application of the grid computing system  100 , the application domain is extended to include graphical, interactive sessions to remote nodes. An end-user submits job requests through a submission node and is given access to a remote execution nodes for graphical, interactive use. The end-user in the interactive grid computing system may create a global session to the remote execution node during which it can launch multiple application sessions. The global session may be provided by exporting the desktop environment of the remote resource for a certain period of time. Through the desktop environment, the user can then launch multiple applications and interact with them. These operations may be done through a command line shell, through icons on the desktop, or any other suitable execution process. More specifically, this above-described situation may include hierarchical interactive sessions; a global session through the desktop environment, and per-application sessions within the global sessions. 
   A global interactive session is an association between an end-user and a remote execution node, wherein the end-user interacts with the remote execution node to launch one or more applications, and subsequently interacts with the launched applications through per-application sessions. One example of a global interactive session is the virtual network computing (VNC) remote display session wherein the graphical desktop of the remote node is exported. In one embodiment, the global interactive sessions are graphical, but they may also occur with text only applications or any other desired interface. 
   A per-application interactive session for an application executing on the remote execution node is the association between the end-user and the executing application, wherein the end-user interacts directly with the application. The per-application interactive session occurs in the context of a global interactive session. In one embodiment, the per-application interactive sessions are graphical, but they may also occur with text only applications or any other desired interface. 
   In one embodiment of the present invention, an end-user submits requests for interactive sessions to the DRM node. The DRM node then matches the user&#39;s requirements, based on the submitted interactive session request, with the available resources, and allocates a remote execution node for interactive use. The end-user then interactively launches applications directly on the remote execution node and interacts with the launched applications. The interaction is controlled through a controlled shell, controlled desktop, and/or monitoring/management agents. The controlled shell, desktop, and management agents may be driven through authorization policies, which, in one embodiment, are access control lists. The authorization policies specify the allowed list of executables, files, network interfaces, and IP addresses for the particular global session. The interactive session is also subject to the service level agreements (SLA). The SLA&#39;s specify, among other information, the CPU and network bandwidth requirements for the session. The authorization policies and the SLA&#39;s for a session as may be referred to as contracts. 
   In one embodiment of the interactive grid computing system, the contract generation engine is provided as a mechanism to automate the generation of the contracts. The generated contracts are associated with classes of dynamic accounts. Whenever a dynamic account is assigned to a user, the corresponding contract associated with the dynamic account class is used to bind the users&#39; session. In one embodiment, the contract generation engine is used offline as a tool by the system administrator to generate authorization policy files and SLA&#39;s, which are stored in a contract repository. In another embodiment, the contract generation engine is used to generate the contracts dynamically in an interactive grid computing system based on the list of applications specified by the end-user. 
   As used in this specification, an engine may be, for example, a computer program, application, process, function, or set of computer executable commands that performs a function for other programs. An engine can be a central or focal program in an operating system, subsystem, or application program that coordinates the overall operation of other programs and engines. An engine may also describe a special-purpose program that includes one or more algorithms or uses rules of logic to derive an output. The term “engine” is not limited to the above examples but is intended to inclusively describe computer-executable programs. 
     FIG. 1  represents a distributed resource management (DRM) embodiment of the present invention, and is referred to herein by the general reference numeral  200 . Such DRM node includes a contract generation engine  201 , a contract repository  202 , a DRM interface  204 , a user membership directory  206 , and a grid scheduler  208 . The DRM interface  204  receives the user request  210 . The grid scheduler  208  outputs an admission control decision  212 . In one embodiment, the contract generation engine  200  generates the contracts for the interactive sessions in the interactive grid computing system. The inputs to the contract generation engine  200  include (1) the dynamic account class name under consideration with its associated policies, (2) the list of applications specified for a user assigned this dynamic account, (3) the contract templates, (4) application profiles, and (5) policies. The contract generation engine  200  outputs the contract in the form of the authorization policy files and the SLA&#39;s, which are stored in the contract repository  202 . 
     FIG. 3  represents a process embodiment of the present invention, and is referred to herein by the general reference numeral  300 , e.g., for execution on contract generation engine  200 . In step  301 , the contract generation engine reads in a name of a dynamic account class under consideration, along with associated policies. In step  302 , the contract generation engine reads in a list of applications specified for a user of a considered dynamic account class. In a offline mode, a list is specified by a system administrator. Otherwise, the list is specified by the end-user in a job request. In step  304 , using the information provided in steps  300  and  302 , and based on the provided policies, a contract generation engine determines the executables, files, network interfaces, IP addresses that would be required for the users&#39; requested session, as a controlled user and controlled super user respectively. In step  306 , also using the information provided in steps  300  and  302 , and based on any provided policies, the contract generation engine determines any CPU, network bandwidth required for a user&#39;s session. This is achieved as follows:
         a. for each of the allowed applications, determine the class of applications that the requested application belongs to. Obtain from the application profiles, the CPU and bandwidth usage requirement for this application; and   b. estimate the total CPU and network bandwidth required for all the listed applications using the values from (a). This estimation is performed using some execution order of applications and/or based on policies.       
   In step  308 , the authorization policy files and SLA&#39;s are generated using the information from steps  304  and  306 , and using appropriate templates. The format of the generated contracts may be driven by the policies. The authorization policy files are generated for controlled user and controlled super user accounts. In step  310 , the generated authorization policy files and SLA&#39;s are stored in the contract repository  202 . 
   An example XML authorization policy file, generated by the contract generation engine for dynamic account class ‘A’ is as follows: 
   
     
       
             
           
         
             
                 
             
           
           
             
               &lt;!-- Dynamic Account Class ‘A’ Controlled User --&gt; 
             
             
               &lt;acl&gt; 
             
             
               &lt;subject&gt; 
             
             
               &lt;group&gt; CLASS A &lt;/group&gt; 
             
             
               &lt;user_account&gt; CONTROLLED USER &lt;/user_account&gt; 
             
             
               &lt;/subject&gt; 
             
             
               &lt;!-- Allowed list of files --&gt; 
             
             
               &lt;target&gt; 
             
             
               &lt;name&gt;files &lt;/name&gt; 
             
             
               &lt;list&gt; 
             
             
               &lt;file&gt; “$HOME/*” &lt;/file&gt; 
             
             
               &lt;file&gt; “/usr/local/engg/examples/*” &lt;/file&gt; 
             
             
               &lt;file&gt; “/usr/local/mcad/include/*” &lt;/file&gt; 
             
             
               &lt;file&gt; “/usr/include/*” &lt;/file&gt; 
             
             
               &lt;file&gt; “/etc/*” &lt;/file&gt; 
             
             
               &lt;/list&gt; 
             
             
               &lt;action name= “read/write” permission= “grant” /&gt; 
             
             
               &lt;/target&gt; 
             
             
               &lt;!-- Allowed list of IP addresses for connection --&gt; 
             
             
               &lt;target&gt; 
             
             
               &lt;name&gt;IP addresses &lt;/name&gt; 
             
             
               &lt;list&gt; 
             
             
               &lt;ip_address&gt; “12.9.79.*” &lt;/ip_address&gt; 
             
             
               &lt;ip_address&gt; “12.9.72. *” &lt;/ip_address&gt; 
             
             
               &lt;ip_address&gt; “192.3.56. 68” &lt;/ip_address&gt; 
             
             
               &lt;ip_address&gt; “12.5.73.123” &lt;/ip_address&gt; 
             
             
               &lt;/list&gt; 
             
             
               &lt;action name “network access” permission= “grant” constraint= “HTTP 
             
             
               Port 80 connection” /&gt; 
             
             
               &lt;/target&gt; 
             
             
               &lt;/acl&gt; 
             
             
                 
             
           
        
       
     
   
   An example SLA, in XML format, generated by the contract generation engine for dynamic account class ‘A’ is as follows: 
                                           &lt;!-- SLA for Dynamic Account Class ‘A’ --&gt;           &lt;SLA&gt;           &lt;! -- SLA Title --&gt;           &lt;Title&gt;           CLASS A SESSION SLA           &lt;/Title&gt;           &lt;!--SLA ID--&gt;           &lt;ID&gt;           3054_CLASSA           &lt;/ID&gt;           &lt;!-- Maximum and Minimum CPU Allocation --&gt;           &lt;ALLOCATED_CPU_PERCENTAGE&gt;           &lt;MIN&gt;15 &lt;/MIN&gt;           &lt;MAX&gt; 30 &lt;/MAX&gt;           &lt;/ALLOCATED_CPU_PERCENTAGE&gt;           &lt;!-- Maximum and Minimum Network Bandwidth Allocation --&gt;           &lt;ALLOCATED_NETWORK_PERCENTAGE&gt;           &lt;MIN&gt;40 &lt;/MIN&gt;           &lt;MAX&gt; 70 &lt;/MAX&gt;           &lt;!ALLOCATED_NETWORK_PERCENTAGE&gt;           &lt;/SLA&gt;                        
The above example includes only CPU and network bandwidth fields. However, other fields may similarly be included, e.g., memory and disk usage.
 
   The contract generation engine may also be used to generate contracts dynamically in the interactive grid computing system. In such a case, the contract generation engine  200  is invoked dynamically by the interactive grid DRM module. The newly generated contracts can then be optionally stored in the contract repository  202  for future use. 
   Referring again to  FIG. 2 , the following steps are taken in an example dynamic contract generation process. The end-user submits request for an interactive session to the grid DRM. The end-user also specifies the list of applications desired for the interactive session. The dynamic account class to which the user must be assigned is determined from the user membership directory. The contract generation engine  200  is then invoked to generate the contracts for this session dynamically. The generated contract can also now be optionally stored in the contract repository  202 . The generated contract is then submitted to the grid scheduler  208  along with the user&#39;s request. The contract may also be optionally sent to the user for the user&#39;s record. The grid scheduler  208  determines the appropriate execution node for the user&#39;s session. The grid scheduler  208  dispatches the job to the chosen execution node along with the contract. The user is allocated the appropriate dynamic account on the execution node. The session is started with this allocated account on the chosen execution node, and the contract is enforced for this session. 
     FIG. 4  is a general purpose computer  400  suitable for performing the functions of the grid computing system and associated applications. The illustrated general purpose computer may also be suitable for running other network applications. A microprocessor  401 , including of a central processing unit (CPU)  405 , a memory cache  410 , and a bus interface  415 , is connected via a system bus  480  to a main memory  420  and an Input/Output (I/O) control unit  475 . The I/O interface control unit  475  is connected via an I/O local bus  470  to a disk storage controller  445 , video controller  450 , a keyboard controller  455 , a network controller  460 , and I/O expansion slots  465 . The disk storage controller  445  is connected to the disk storage device  425 . The video controller is connected to the video monitor  430 . The keyboard controller  455  is connected to the keyboard  435 . The network controller  460  is connected to the communications device  440 . The communications device  440  is adapted to allow the network inventory adapter operating on the general purpose computer to communicate with a communications network, such as the Internet, a Local Area Network (LAN), a Wide Area Network (WAN), a virtual private, network, or a middleware bus, or with other software objects over the communications network. 
   Computer program instructions for implementing the grid computing system may be stored on the disk storage device  425  until the processor  400  retrieves the computer program instructions, either in full or in part, and stores them in the main memory  420 . The processor  400  then executes the computer program instructions stored in the main memory  420  to implement the features of grid computing system. The program instructions may be executed with a multiprocessor computer having more than one processor. 
   The general purpose computer illustrated in  FIG. 4  is an example of a grid computing system. The grid computing system, and any other associated programs, applications, components, and operations, may also run on a plurality of computers, a network server, or other suitable computers and devices. 
     FIG. 5  is an example application profile  500  for contract generation embodiment of the present invention. Application profile  500  may be used as input to the contract generation engine  200 . 
   The previous description of the example embodiments is provided to enable any person skilled in the art to make or use the present invention. While the invention has been described with respect to particular illustrated embodiments, various modifications to these embodiments will readily be apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. The present embodiments should be considered in all respects as illustrative and not restrictive. Accordingly, the present invention is not intended to be limited to the embodiments described above, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.