Filter-based packet handling at virtual network adapters

    公开(公告)号:US11277382B2

    公开(公告)日:2022-03-15

    申请号:US16517670

    申请日:2019-07-22

    Applicant: VMware, Inc.

    Abstract: Example methods and computer systems are provided for filter-based packet handling at a virtual network adapter. The method may comprise: receiving an ingress packet destined for the virtualized computing instance that is supported by the host and connected to the virtual network adapter; and matching the ingress packet to one of multiple filters configured for the virtual network adapter. The multiple filters may include a first filter specifying one or more first packet characteristics and a second filter specifying one or more second packet characteristics. The method may also comprise: in response to matching the ingress packet to the first filter, assigning the ingress packet to a first packet queue; and in response to matching the ingress packet to the second filter, assigning the ingress packet to a second packet queue.

    Packet capture in software-defined networking (SDN) environments

    公开(公告)号:US11102186B2

    公开(公告)日:2021-08-24

    申请号:US15963187

    申请日:2018-04-26

    Applicant: VMware, Inc.

    Abstract: Example methods are provided for a network device to perform packet capture in a software-defined networking (SDN) environment. One example method may comprise detecting an egress packet that includes an inner header addressed from a first node to a second node; and identifying a security policy applicable to the egress packet by comparing one or more fields in the inner header with one or more match fields specified by the security policy. The method may further comprise: based on the security policy, capturing the egress packet in an unencrypted form; performing encryption on the egress packet to generate an encrypted packet that includes the egress packet in an encrypted form; and sending the encrypted packet to the second node.

    DYNAMIC CORE ALLOCATION
    14.
    发明申请

    公开(公告)号:US20210255903A1

    公开(公告)日:2021-08-19

    申请号:US16795376

    申请日:2020-02-19

    Applicant: VMware, Inc.

    Abstract: Some embodiments provide a method for updating a core allocation among processes of a gateway datapath executing on a gateway computing device having multiple cores. The gateway datapath processes include a first set of data message processing processes to which a first set of the cores are allocated and a second set of processes to which a second set of the cores are allocated in a first core allocation. Based on data regarding usage of the cores, the method determines a second core allocation that allocates a third set of the cores to the first set of processes and a fourth set of the cores to the second set of processes. The method updates a load balancing operation to load balance received data messages over the third set of cores rather than the first set of cores. The method reallocates the cores from the first allocation to the second allocation.

    SPECIALIZING VIRTUAL NETWORK DEVICE PROCESSING TO BYPASS FORWARDING ELEMENTS FOR HIGH PACKET RATE APPLICATIONS
    16.
    发明申请
    SPECIALIZING VIRTUAL NETWORK DEVICE PROCESSING TO BYPASS FORWARDING ELEMENTS FOR HIGH PACKET RATE APPLICATIONS 审中-公开
    将虚拟网络设备处理专用于旁路应用的高速缓存元件

    公开(公告)号:US20160182382A1

    公开(公告)日:2016-06-23

    申请号:US14574336

    申请日:2014-12-17

    Applicant: VMware, Inc.

    CPC classification number: H04L67/16 G06F9/45558 G06F2009/45595 H04L49/70

    Abstract: A method of optimizing network processing in a system comprising a physical host and a set of physical network interface controllers (PNICs) is provided. The physical host includes a forwarding element. The method includes determining that a set of conditions is satisfied to bypass the forwarding element for exchanging packets between a particular data compute node (DCN) and a particular PNIC. The set of conditions includes the particular DCN being the only DCN connected to the forwarding element and the particular PNIC being the only PNIC connected to the forwarding element. The method exchanges packets between the particular DCN and the particular PNIC bypassing the forwarding element. The method determines that at least one condition in said set of conditions is not satisfied. The method utilizes the forwarding element to exchange packets between the particular DCN and the particular PNIC.

    Abstract translation: 提供了一种在包括物理主机和一组物理网络接口控制器(PNIC)的系统中优化网络处理的方法。 物理主机包括转发元素。 该方法包括确定满足一组条件以绕过用于在特定数据计算节点(DCN)和特定PNIC之间交换分组的转发元件。 该组条件包括特定DCN是连接到转发元件的唯一DCN,特定的PNIC是连接到转发元件的唯一PNIC。 该方法在特定DCN和绕过转发元件的特定PNIC之间交换数据包。 该方法确定不满足所述条件集合中的至少一个条件。 该方法利用转发元件在特定DCN和特定PNIC之间交换分组。

    LOGICAL SWITCH LEVEL LOAD BALANCING OF L2VPN TRAFFIC

    公开(公告)号:US20230143157A1

    公开(公告)日:2023-05-11

    申请号:US17564274

    申请日:2021-12-29

    Applicant: VMWARE, INC.

    CPC classification number: H04L63/029 H04L63/162 H04L63/0428

    Abstract: The disclosure provides an approach for logical switch level load balancing of Layer 2 virtual private network (L2VPN) traffic. A method of securing communications with a peer gateway generally includes establishing, at a virtual tunnel interface of a local gateway, a plurality of security tunnels with the peer gateway. Each of the plurality of security tunnels is associated with a different set of one or more layer 2 segments and with one or more security associations (SAs) with the peer gateway. The method generally includes receiving a packet, at the local gateway, via a first L2 segment. The method generally includes selecting one of the plurality of security tunnels and an SA associated with the selected security tunnel based on the L2 segment via which the packet was received. The method generally includes encrypting and encapsulating the packet based on the selected security tunnel and SA.

    Dynamic core allocation
    19.
    发明授权

    公开(公告)号:US11599395B2

    公开(公告)日:2023-03-07

    申请号:US16795376

    申请日:2020-02-19

    Applicant: VMware, Inc.

    Abstract: Some embodiments provide a method for updating a core allocation among processes of a gateway datapath executing on a gateway computing device having multiple cores. The gateway datapath processes include a first set of data message processing processes to which a first set of the cores are allocated and a second set of processes to which a second set of the cores are allocated in a first core allocation. Based on data regarding usage of the cores, the method determines a second core allocation that allocates a third set of the cores to the first set of processes and a fourth set of the cores to the second set of processes. The method updates a load balancing operation to load balance received data messages over the third set of cores rather than the first set of cores. The method reallocates the cores from the first allocation to the second allocation.

Patent Agency Ranking