公开(公告)号：US20220377009A1

公开(公告)日：2022-11-24

申请号：US17344959

申请日：2021-06-11

Applicant: VMware, Inc.

Inventor： Chidambareswaran Raman ,  Ganesh Sadasivan ,  Dileep K. Devireddy ,  Hongwei Zhu ,  Sreenivas Duvvuri

IPC: H04L12/721 ,  H04L12/707

Abstract: Some embodiments provide policy-driven methods for deploying edge forwarding elements in a public or private SDDC for tenants or applications. For instance, the method of some embodiments allows administrators to create different traffic groups for different applications and/or tenants, deploys edge forwarding elements for the different traffic groups, and configures forwarding elements in the SDDC to direct data message flows of the applications and/or tenants through the edge forwarding elements deployed for them. The policy-driven method of some embodiments also dynamically deploys edge forwarding elements in the SDDC for applications and/or tenants after detecting the need for the edge forwarding elements based on monitored traffic flow conditions.

公开(公告)号：US20210314193A1

公开(公告)日：2021-10-07

申请号：US16906902

申请日：2020-06-19

Applicant: VMware, Inc.

Inventor： Ganesan Chandrashekhar ,  Hongwei Zhu ,  Jia Yu ,  Abhishek Goliya

IPC: H04L12/66 ,  H04L12/46 ,  H04L12/741 ,  H04L12/713 ,  H04L12/931 ,  H04L29/12

Abstract: Some embodiments provide a method for an edge computing device in a first datacenter that implements a logical network gateway for processing data traffic for a particular LFE between the first datacenter and multiple other datacenters. For each particular other datacenter, the method stores a record that maps logical network addresses for DCNs connected to the particular LFE and operating in the particular datacenter to a group of TEP addresses corresponding to logical network gateways that handle data traffic for the particular LFE between the particular datacenter and the other datacenters, including the first datacenter. Upon receiving a data message for the particular LFE from a host computer in the first datacenter, the method uses a destination address of the data message to identify one of the groups of TEP addresses. The method encapsulates the data message with one of the TEP addresses from the identified group of TEP addresses.

公开(公告)号：US11799761B2

公开(公告)日：2023-10-24

申请号：US17571409

申请日：2022-01-07

Applicant: VMware, Inc.

Inventor： Yong Wang ,  Xinhua Hong ,  Hongwei Zhu

IPC: H04L45/24 ,  H04L45/02 ,  H04L12/46 ,  H04L47/2441 ,  H04L45/7453

CPC classification number: H04L45/24 ,  H04L12/4641 ,  H04L45/02 ,  H04L45/7453 ,  H04L47/2441

Abstract: Some embodiments provide a method for forwarding data messages between edge nodes that perform stateful processing on flows between a logical network and an external network. At a particular edge node, the method receives a data message belonging to a flow. The edge nodes use a deterministic algorithm to select one of the edge nodes to perform processing for each flow. The method identifies a first edge node to perform processing for the flow in a previous configuration and a second edge node to perform processing for the flow in a new configuration according to the algorithm. When the first and second edge nodes are different, the method uses a probabilistic filter and a stateful connection tracker to determine whether the flow existed prior to a particular time. When the flow did not exist prior to that time, the method selects the second edge node for the received data message.

公开(公告)号：US20220311714A1

公开(公告)日：2022-09-29

申请号：US17839336

申请日：2022-06-13

Applicant: VMware, Inc.

Inventor： Dileep Devireddy ,  Ganesh Sadasivan ,  Chidambareswaran Raman ,  Hongwei Zhu ,  Sreenivas Duvvuri

IPC: H04L47/783 ,  H04L12/66 ,  H04L12/46 ,  H04L45/74 ,  H04L61/2514 ,  H04L61/5014

Abstract: Some embodiments provide a method for deploying edge forwarding elements in a public or private software defined datacenter (SDDC). For an entity, the method deploys a default first edge forwarding element to process data message flows between machines of the entity in a first network of the SDDC and machines external to the first network of the SDDC. The method subsequently receives a request to allocate more bandwidth to a first set of the data message flows entering or exiting the first network of the SDDC. In response, the method deploys a second edge forwarding element to process the first set of data message flows of the entity in order to allocate more bandwidth to the first set of the data message flows, while continuing to process a second set of data message flows of the entity through the default first edge node. The method in some embodiments receives the request for more bandwidth by first receiving a request to create a traffic group and then receiving a list of network addresses that are associated with the traffic group. In some embodiments, the method receives the list of network addresses associated with the traffic group by receiving a prefix of network addresses and receiving a request to associate the prefix of network addresses with the traffic group. Based on this request, the method then creates an association between the traffic group and the received prefix of network addresses.

公开(公告)号：US11233824B2

公开(公告)日：2022-01-25

申请号：US16886575

申请日：2020-05-28

Applicant: VMware, Inc.

Inventor： Hongwei Zhu ,  Dileep Devireddy ,  Ganesan Chandrashekhar ,  Feng Gu ,  Sreenivas Duvvuri ,  Chidambareswaran Raman

IPC: H04L29/06 ,  H04L12/755 ,  H04L12/741 ,  H04L29/08 ,  H04L12/721

Abstract: In some embodiments, a method receives, by a first network device, a packet from a first workload that is located in first site. The first site includes stretched networks across a second site and a third site. The packet includes a destination IP address for a device in the second site. The method determines that the destination IP address does not match an eligible route in a routing table. The first workload was migrated from the second site to the first site and is located on a stretched network between the first site and the second site. A site identifier associated with the first workload is determined where the site identifier identifies the second site. The method selects a site policy based on the site identifier and uses the site policy to send the packet through a layer 2 channel to the second network device in the second site.

公开(公告)号：US11843547B2

公开(公告)日：2023-12-12

申请号：US17839336

申请日：2022-06-13

Applicant: VMware, Inc.

Inventor： Dileep Devireddy ,  Ganesh Sadasivan ,  Chidambareswaran Raman ,  Hongwei Zhu ,  Sreenivas Duvvuri

IPC: H04L61/2514 ,  H04L12/46 ,  H04L47/783 ,  H04L12/66 ,  H04L45/74 ,  H04L61/5014

CPC classification number: H04L47/783 ,  H04L12/4633 ,  H04L12/66 ,  H04L45/74 ,  H04L61/2514 ,  H04L61/5014

Abstract: Some embodiments provide a method for deploying edge forwarding elements in a public or private software defined datacenter (SDDC). For an entity, the method deploys a default first edge forwarding element to process data message flows between machines of the entity in a first network of the SDDC and machines external to the first network of the SDDC. The method subsequently receives a request to allocate more bandwidth to a first set of the data message flows entering or exiting the first network of the SDDC. In response, the method deploys a second edge forwarding element to process the first set of data message flows of the entity in order to allocate more bandwidth to the first set of the data message flows, while continuing to process a second set of data message flows of the entity through the default first edge node. The method in some embodiments receives the request for more bandwidth by first receiving a request to create a traffic group and then receiving a list of network addresses that are associated with the traffic group. In some embodiments, the method receives the list of network addresses associated with the traffic group by receiving a prefix of network addresses and receiving a request to associate the prefix of network addresses with the traffic group. Based on this request, the method then creates an association between the traffic group and the received prefix of network addresses.

公开(公告)号：US20210314358A1

公开(公告)日：2021-10-07

申请号：US16886575

申请日：2020-05-28

Applicant: VMware, Inc.

Inventor： Hongwei Zhu ,  Dileep Devireddy ,  Ganesan Chandrashekhar ,  Feng Gu ,  Sreenivas Duvvuri ,  Chidambareswaran Raman

IPC: H04L29/06 ,  H04L12/755 ,  H04L12/741 ,  H04L12/721 ,  H04L29/08

Abstract: In some embodiments, a method receives, by a first network device, a packet from a first workload that is located in first site. The first site includes stretched networks across a second site and a third site. The packet includes a destination IP address for a device in the second site. The method determines that the destination IP address does not match an eligible route in a routing table. The first workload was migrated from the second site to the first site and is located on a stretched network between the first site and the second site. A site identifier associated with the first workload is determined where the site identifier identifies the second site. The method selects a site policy based on the site identifier and uses the site policy to send the packet through a layer 2 channel to the second network device in the second site.

公开(公告)号：US20210314289A1

公开(公告)日：2021-10-07

申请号：US16906901

申请日：2020-06-19

Applicant: VMware, Inc.

Inventor： Ganesan Chandrashekhar ,  Hongwei Zhu ,  Jia Yu ,  Abhishek Goliya

IPC: H04L29/12 ,  H04L12/66

Abstract: Some embodiments provide a method for an MFE, in a first datacenter, to implement an LN spanning the first datacenter and a set of additional datacenters. The method stores records that each map one or more LN addresses for DCNs belonging to the LN and operating in the first datacenter to a different TEP address. The method stores an additional record that maps addresses for DCNs connected to a particular LFE of the LN and operating in the additional datacenters to a group of TEP addresses corresponding to LN gateways that handle data traffic for the particular LFE between the first datacenter and the additional datacenters. Upon receiving a data message with a destination address corresponding to a DCN connected to the particular LFE and operating in one of the additional datacenters, the method uses the additional record to identify a TEP address for encapsulating the data message.

公开(公告)号：US20230396536A1

公开(公告)日：2023-12-07

申请号：US18235874

申请日：2023-08-20

Applicant: VMware, Inc.

Inventor： Ganesh Sadasivan ,  Chidambareswaran Raman ,  Dileep K. Devireddy ,  Hongwei Zhu ,  Sreenivas Duvvuri

IPC: H04L45/00 ,  H04L45/44 ,  H04L45/24 ,  H04L45/42 ,  H04L45/586 ,  H04L47/762 ,  H04L47/78 ,  H04L47/80 ,  H04L45/74

CPC classification number: H04L45/38 ,  H04L45/44 ,  H04L45/24 ,  H04L45/72 ,  H04L45/42 ,  H04L45/586 ,  H04L47/762 ,  H04L47/781 ,  H04L47/803 ,  H04L45/74 ,  H04L47/801

Abstract: Some embodiments provide policy-driven methods for deploying edge forwarding elements in a public or private SDDC for tenants or applications. For instance, the method of some embodiments allows administrators to create different traffic groups for different applications and/or tenants, deploys edge forwarding elements for the different traffic groups, and configures forwarding elements in the SDDC to direct data message flows of the applications and/or tenants through the edge forwarding elements deployed for them. The policy-driven method of some embodiments also dynamically deploys edge forwarding elements in the SDDC for applications and/or tenants after detecting the need for the edge forwarding elements based on monitored traffic flow conditions.

公开(公告)号：US11805051B2

公开(公告)日：2023-10-31

申请号：US17344956

申请日：2021-06-11

Applicant: VMware, Inc.

Inventor： Ganesh Sadasivan ,  Chidambareswaran Raman ,  Dileep K. Devireddy ,  Hongwei Zhu ,  Sreenivas Duvvuri

IPC: H04L47/762 ,  H04L45/00 ,  H04L45/44 ,  H04L45/24 ,  H04L45/42 ,  H04L45/586 ,  H04L47/78 ,  H04L47/80 ,  H04L45/74

CPC classification number: H04L45/38 ,  H04L45/24 ,  H04L45/42 ,  H04L45/44 ,  H04L45/586 ,  H04L45/72 ,  H04L45/74 ,  H04L47/762 ,  H04L47/781 ,  H04L47/801 ,  H04L47/803

Abstract: Some embodiments provide policy-driven methods for deploying edge forwarding elements in a public or private SDDC for tenants or applications. For instance, the method of some embodiments allows administrators to create different traffic groups for different applications and/or tenants, deploys edge forwarding elements for the different traffic groups, and configures forwarding elements in the SDDC to direct data message flows of the applications and/or tenants through the edge forwarding elements deployed for them. The policy-driven method of some embodiments also dynamically deploys edge forwarding elements in the SDDC for applications and/or tenants after detecting the need for the edge forwarding elements based on monitored traffic flow conditions.