公开(公告)号：US20220094666A1

公开(公告)日：2022-03-24

申请号：US17091734

申请日：2020-11-06

Applicant: VMware, Inc.

Inventor： Dileep Devireddy ,  Ganesh Sadasivan ,  Chidambareswaran Raman ,  Hongwei Zhu ,  Sreenivas Duvvuri

IPC: H04L29/12 ,  H04L12/46 ,  H04L12/741

Abstract: Some embodiments provide a method for deploying edge forwarding elements in a public or private software defined datacenter (SDDC). For an entity, the method deploys a default first edge forwarding element to process data message flows between machines of the entity in a first network of the SDDC and machines external to the first network of the SDDC. The method subsequently receives a request to allocate more bandwidth to a first set of the data message flows entering or exiting the first network of the SDDC. In response, the method deploys a second edge forwarding element to process the first set of data message flows of the entity in order to allocate more bandwidth to the first set of the data message flows, while continuing to process a second set of data message flows of the entity through the default first edge node. The method in some embodiments receives the request for more bandwidth by first receiving a request to create a traffic group and then receiving a list of network addresses that are associated with the traffic group. In some embodiments, the method receives the list of network addresses associated with the traffic group by receiving a prefix of network addresses and receiving a request to associate the prefix of network addresses with the traffic group. Based on this request, the method then creates an association between the traffic group and the received prefix of network addresses.

公开(公告)号：US11171878B1

公开(公告)日：2021-11-09

申请号：US17091714

申请日：2020-11-06

Applicant: VMware, Inc.

Inventor： Dileep Devireddy ,  Ganesh Sadasivan ,  Chidambareswaran Raman ,  Hongwei Zhu ,  Sreenivas Duvvuri

IPC: H04L12/911 ,  H04L12/66 ,  H04L12/46

Abstract: Some embodiments provide a method for deploying edge forwarding elements in a public or private software defined datacenter (SDDC). For an entity, the method deploys a default first edge forwarding element to process data message flows between machines of the entity in a first network of the SDDC and machines external to the first network of the SDDC. The method subsequently receives a request to allocate more bandwidth to a first set of the data message flows entering or exiting the first network of the SDDC. In response, the method deploys a second edge forwarding element to process the first set of data message flows of the entity in order to allocate more bandwidth to the first set of the data message flows, while continuing to process a second set of data message flows of the entity through the default first edge node. The method in some embodiments receives the request for more bandwidth by first receiving a request to create a traffic group and then receiving a list of network addresses that are associated with the traffic group. In some embodiments, the method receives the list of network addresses associated with the traffic group by receiving a prefix of network addresses and receiving a request to associate the prefix of network addresses with the traffic group. Based on this request, the method then creates an association between the traffic group and the received prefix of network addresses.

公开(公告)号：US11843547B2

公开(公告)日：2023-12-12

申请号：US17839336

申请日：2022-06-13

Applicant: VMware, Inc.

Inventor： Dileep Devireddy ,  Ganesh Sadasivan ,  Chidambareswaran Raman ,  Hongwei Zhu ,  Sreenivas Duvvuri

IPC: H04L61/2514 ,  H04L12/46 ,  H04L47/783 ,  H04L12/66 ,  H04L45/74 ,  H04L61/5014

CPC classification number: H04L47/783 ,  H04L12/4633 ,  H04L12/66 ,  H04L45/74 ,  H04L61/2514 ,  H04L61/5014

Abstract: Some embodiments provide a method for deploying edge forwarding elements in a public or private software defined datacenter (SDDC). For an entity, the method deploys a default first edge forwarding element to process data message flows between machines of the entity in a first network of the SDDC and machines external to the first network of the SDDC. The method subsequently receives a request to allocate more bandwidth to a first set of the data message flows entering or exiting the first network of the SDDC. In response, the method deploys a second edge forwarding element to process the first set of data message flows of the entity in order to allocate more bandwidth to the first set of the data message flows, while continuing to process a second set of data message flows of the entity through the default first edge node. The method in some embodiments receives the request for more bandwidth by first receiving a request to create a traffic group and then receiving a list of network addresses that are associated with the traffic group. In some embodiments, the method receives the list of network addresses associated with the traffic group by receiving a prefix of network addresses and receiving a request to associate the prefix of network addresses with the traffic group. Based on this request, the method then creates an association between the traffic group and the received prefix of network addresses.

公开(公告)号：US11784842B2

公开(公告)日：2023-10-10

申请号：US17942948

申请日：2022-09-12

Applicant: VMware, Inc.

Inventor： Subin Cyriac Mathew ,  Alexander Tessmer ,  Chidambareswaran Raman

IPC: H04L12/18 ,  H04L12/46 ,  H04L41/0893 ,  H04L67/563

CPC classification number: H04L12/1886 ,  H04L12/185 ,  H04L12/4633 ,  H04L41/0893 ,  H04L67/563

Abstract: Some embodiments provide a method of replicating messages for a logical network. At a particular tunnel endpoint in a particular datacenter, the method receives a message to be replicated to members of a replication group. The method replicates the message to a set of tunnel endpoints of the replication group located in a same segment of the particular datacenter as the particular tunnel endpoint. The method replicates the message to a first set of proxy endpoints of the replication group, each of which is located in a different segment of the particular datacenter and for replicating the message to tunnel endpoints located in its respective segment of the particular datacenter. The method replicates the message to a second set of proxy endpoints of the replication group, each of which is located in a different datacenter and for replicating the message to tunnel endpoints located in its respective datacenter.

公开(公告)号：US11722409B2

公开(公告)日：2023-08-08

申请号：US17306810

申请日：2021-05-03

Applicant: VMware, Inc.

Inventor： Subin Cyriac Mathew ,  Chidambareswaran Raman

IPC: H04L45/64 ,  H04L45/745 ,  G06F9/455 ,  H04L12/46

CPC classification number: H04L45/64 ,  G06F9/45558 ,  H04L12/4633 ,  H04L45/745 ,  G06F2009/45595

Abstract: The disclosure provides an approach for deploying an software defined networking (SDN) solution for overlay routing of traffic on a host with colocated a workload virtual machine (VM), addressable on an overlay network and VM addressable on an underlay network. An overlay interceptor in a hypervisor of the host can intercept traffic from a virtual switch and route the traffic to destination VM. The overlay interceptor can route the traffic directly, without the traffic exiting the host. A fast path can be created for the routing.

公开(公告)号：US20230122596A1

公开(公告)日：2023-04-20

申请号：US18083311

申请日：2022-12-16

Applicant: VMware, Inc.

Inventor： Rishi Kanth Alapati ,  Parasuramji Rajendran ,  Weiming Xu ,  Shireesh Kumar Singh ,  Aditi Vutukuri ,  Anuprem Chalvadi ,  Chidambareswaran Raman ,  Margaret Angeline Petrus

IPC: H04L9/40 ,  H04L41/0806 ,  H04L41/00 ,  H04L61/5007

Abstract: Described herein are systems and methods to manage blacklists and duplicate addresses in software defined networks (SDNs). In one implementation, a method includes, in a control plane and data plane of an SDN environment, obtaining a blacklist for a logical port in the SDN environment. The method further includes deleting realized address bindings in a realized address list for the logical port that match the one or more address bindings in the blacklist and preventing subsequent address bindings that match the one or more address bindings in the blacklist from being added to the realized address list.

公开(公告)号：US11575642B2

公开(公告)日：2023-02-07

申请号：US17068670

申请日：2020-10-12

Applicant: VMware, Inc.

Inventor： Subin Cyriac Mathew ,  Chidambareswaran Raman

IPC: H04L61/2592 ,  H04L45/64 ,  H04L45/00 ,  H04L69/166 ,  H04L61/2517 ,  H04L49/00 ,  H04L12/46 ,  H04L69/326 ,  H04L69/325 ,  H04L45/24

Abstract: In some embodiments, a method receives a packet for a flow from a first application in a first workload to a second application in a second workload. The packet includes an inner header that includes layer 4 information for the first application. The method determines if a setting indicates an outer source port in an outer header should be generated using layer 4 information from the inner header. The setting is based on an analysis of packet types in the flow to determine if fragmented packets are sent. When the setting indicates the outer source port in the outer header should be generated using layer 4 information from the inner header, the method generates the outer source port using the layer 4 information for the first application from the inner header. The packet is encapsulated using the outer header, wherein the outer header includes the outer source port.

公开(公告)号：US20230006922A1

公开(公告)日：2023-01-05

申请号：US17367347

申请日：2021-07-03

Applicant: VMware, Inc.

Inventor： Senthilkumar Karunakaran ,  Subin Cyriac Mathew ,  Stephen Tan ,  Meenakshi Sundaram Selvaraj ,  Chidambareswaran Raman

IPC: H04L12/717 ,  H04L12/751 ,  H04L12/46 ,  H04L12/927

Abstract: A method for offloading multicast replication from multiple tiers of edge nodes implemented by multiple host machines to a physical switch is provided. Each of the multiple host machines implements a provider edge node and a tenant edge node. One host machine among the multiple host machines receives a packet having an overlay multicast group identifier. The host machine maps the overlay multicast group identifier to an underlay multicast group identifier. The host machine encapsulates the packet with an encapsulation header that includes the underlay multicast group identifier to create an encapsulated packet. The host machine forwards the encapsulated packet to a physical switch of the network segment. The physical switch forwards copies of the encapsulated packet to tenant edge nodes at one or more ports that are determined to be interested in the underlay multicast group identifier.

公开(公告)号：US20220311669A1

公开(公告)日：2022-09-29

申请号：US17214254

申请日：2021-03-26

Applicant: VMware, Inc.

Inventor： Parasuramji Rajendran ,  Li Sun ,  Chidambareswaran Raman

IPC: H04L12/24

Abstract: Some embodiments provide a method, for configuring logical network entities at a host computer. The method receives configuration data for a particular logical networking entity implemented at the host computer. The method identifies that the configuration data for the particular logical networking entity includes at least two conflicting configuration settings for the particular logical networking entity. At least one of the configuration settings for the particular logical networking entity is based on association of a configuration profile to a group of logical entities that includes the particular logical networking entity. The method determines a particular one of the conflicting configuration settings with a highest priority to apply to the particular logical networking entity at the host computer.

公开(公告)号：US20210314358A1

公开(公告)日：2021-10-07

申请号：US16886575

申请日：2020-05-28

Applicant: VMware, Inc.

Inventor： Hongwei Zhu ,  Dileep Devireddy ,  Ganesan Chandrashekhar ,  Feng Gu ,  Sreenivas Duvvuri ,  Chidambareswaran Raman

IPC: H04L29/06 ,  H04L12/755 ,  H04L12/741 ,  H04L12/721 ,  H04L29/08

Abstract: In some embodiments, a method receives, by a first network device, a packet from a first workload that is located in first site. The first site includes stretched networks across a second site and a third site. The packet includes a destination IP address for a device in the second site. The method determines that the destination IP address does not match an eligible route in a routing table. The first workload was migrated from the second site to the first site and is located on a stretched network between the first site and the second site. A site identifier associated with the first workload is determined where the site identifier identifies the second site. The method selects a site policy based on the site identifier and uses the site policy to send the packet through a layer 2 channel to the second network device in the second site.