公开(公告)号：US20210184970A1

公开(公告)日：2021-06-17

申请号：US16715247

申请日：2019-12-16

Applicant: VMware, Inc.

Inventor： Xinhua HONG ,  Yong WANG ,  Jia YU ,  Dexiang WANG

IPC: H04L12/713 ,  H04L12/66 ,  H04L12/46 ,  H04L12/715 ,  H04L12/931 ,  H04L12/751

Abstract: The disclosure provides an approach for routing traffic in a network. Embodiments include receiving, by a service router of an edge services gateway (ESG), a packet comprising a virtual network identifier (VNI) and a virtual local area network (VLAN) identifier. Embodiments include sending, by the service router, the packet to a virtual switch of the ESG based on the VNI of the packet. Embodiments include determining, by the virtual switch, a virtual routing and forwarding (VRF) router of the ESG for the packet based on the VLAN identifier. Embodiments include forwarding, by the virtual switch, the packet to the VRF router.

公开(公告)号：US20210029004A1

公开(公告)日：2021-01-28

申请号：US16520331

申请日：2019-07-23

Applicant: VMware, Inc.

Inventor： Yong WANG ,  Xinhua HONG ,  Jia YU

IPC: H04L12/26 ,  H04L29/06

Abstract: Example methods and systems are provided for packet event tracking. One example method may comprise: in response to a logical forwarding element detecting a packet event for a first packet, determining a first packet signature of the first packet; and tracking the packet event by updating a set membership filter based on the first packet signature to indicate that the first packet is a member of a set associated with the packet event. The method may also comprise: in response to receiving a query as to whether the packet event has been detected and tracked for a second packet, determining a second packet signature of the second packet. Based on the second packet signature, the set membership filter may be applied to determine whether the second packet is a possible member of the set associated with the packet event.

公开(公告)号：US20220303231A1

公开(公告)日：2022-09-22

申请号：US17208608

申请日：2021-03-22

Applicant: VMware, Inc.

Inventor： Jia YU ,  Yong WANG ,  Xinhua HONG ,  Wenyi JIANG ,  Guolin YANG ,  Dexiang WANG

IPC: H04L12/861 ,  H04L29/06 ,  H04L12/715 ,  H04L12/66

Abstract: In some embodiments, a method fragments a first packet into a plurality of fragments when a length of an encapsulated first packet is larger than a maximum transmission unit size. For each fragment in the plurality of fragments, fragmentation information is generated. The method encapsulates each fragment in the plurality of fragments with an outer header to form a plurality of encapsulated packets. The respective fragmentation information for each fragment is inserted in a portion of the outer header that is processed by endpoints of an overlay tunnel and not processed by a device along a path of the overlay tunnel. The plurality of encapsulated packets are sent via the overlay tunnel.

公开(公告)号：US20220210074A1

公开(公告)日：2022-06-30

申请号：US17694586

申请日：2022-03-14

Applicant: VMware, Inc.

Inventor： Yong WANG ,  Jia YU ,  David LEROY

IPC: H04L47/125 ,  H04L9/40

Abstract: In an embodiment, a computer-implemented method for using virtual tunnel interface teaming to achieve load balance and redundancy in virtual private networks (“VPNs”) is disclosed. In an embodiment, a method comprises: receiving, by a gateway, configuration data from a control plane; based on the configuration data, configuring on the gateway a bonded virtual tunnel interface (“bonded VTI”) having a plurality of slave virtual tunnel interfaces (“slave VTIs”); configuring a plurality of VPN tunnels between the plurality of slave VTIs configured on the gateway and a plurality of slave VTIs configured on a remote gateway; configuring an IPsec VPN tunnel between the bonded VTI configured on the gateway and a corresponding bonded VTI configured on the remote gateway; logically combining the plurality of VPN tunnels into the IPsec VPN tunnel; and enabling communications of IPsec VPN traffic via the IPsec VPN tunnel.

公开(公告)号：US20220078109A1

公开(公告)日：2022-03-10

申请号：US17456054

申请日：2021-11-22

Applicant: VMware, Inc.

Inventor： Xinhua HONG ,  Yong WANG ,  Jia YU ,  Dexiang WANG

IPC: H04L12/713 ,  H04L12/66 ,  H04L12/46 ,  H04L12/931 ,  H04L12/751 ,  H04L12/715

Abstract: The disclosure provides an approach for routing traffic in a network. Embodiments include receiving, by a service router of an edge services gateway (ESG), a packet comprising a virtual network identifier (VNI) and a virtual local area network (VLAN) identifier. Embodiments include sending, by the service router, the packet to a virtual switch of the ESG based on the VNI of the packet. Embodiments include determining, by the virtual switch, a virtual routing and forwarding (VRF) router of the ESG for the packet based on the VLAN identifier. Embodiments include forwarding, by the virtual switch, the packet to the VRF router.

公开(公告)号：US20220006734A1

公开(公告)日：2022-01-06

申请号：US16920765

申请日：2020-07-06

Applicant: VMware, Inc.

Inventor： Yong WANG ,  Dexiang WANG ,  Xinhua HONG ,  Jia YU

IPC: H04L12/713 ,  H04L12/717 ,  H04L29/06 ,  H04L29/08 ,  H04L12/46 ,  G06F9/455

Abstract: Example methods and computer systems for encapsulated fragmented packet handling. One example may comprise a first computer system detecting an egress packet that requires fragmentation and determining an outer connectionless transport layer value based on content of an inner transport layer header of the egress packet. The first computer system may generate a first encapsulated fragmented packet that includes a first fragment of the inner payload, the inner transport layer header and a first outer header specifying the outer connectionless transport layer value; and a second encapsulated fragmented packet that includes a second fragment of the inner payload and a second outer header specifying the outer connectionless transport layer value. The first encapsulated fragmented packet and the second encapsulated fragmented packet may be forwarded towards a second computer system to cause receive-side processing based on the outer connectionless transport layer value.

公开(公告)号：US20160315908A1

公开(公告)日：2016-10-27

申请号：US15200931

申请日：2016-07-01

Applicant: VMware, Inc.

Inventor： Mukesh BAPHNA ,  Chi-Hsiang SU ,  Mallik MAHALINGAM ,  Jia YU

IPC: H04L29/12

Abstract: MAC addresses are flexibly and dynamically allocated across groups of devices that need MAC addresses. MAC address pools are defined for the groups by non-overlapping ranges of MAC addresses. The range of MAC addresses defined for any pool may be shrunk to support an expansion of the range of MAC addresses of another pool. The maximum number of universally-administered MAC addresses that can be defined for any MAC address pool is greater than 216, and the maximum number of locally-administered MAC addresses that can be defined for any MAC address pool is greater than 238.

Abstract translation: MAC地址在需要MAC地址的设备组之间灵活和动态地分配。 通过MAC地址的非重叠范围为组定义MAC地址池。 为任何池定义的MAC地址范围可能会缩小，以支持扩展另一个池的MAC地址范围。 可以为任何MAC地址池定义的通用MAC地址的最大数量大于216，并且可以为任何MAC地址池定义的本地管理的MAC地址的最大数量大于238。

公开(公告)号：US20160196158A1

公开(公告)日：2016-07-07

申请号：US14986041

申请日：2015-12-31

Applicant: VMware, Inc.

Inventor： Nilesh NIPANE ,  Jia YU ,  Chi-Hsiang SU

IPC: G06F9/455 ,  H04L12/931

CPC classification number: G06F9/45558 ,  G06F2009/4557 ,  G06F2009/45595

Abstract: Techniques are described for migrating virtual machines (VMs) across virtual switches. To migrate a VM, a destination distributed virtual switch module may, prior to migration, instantiate a distributed virtual port on a destination VM host and reserve the distributed virtual port for each virtual network adapter of the VM. Further, a configuration file for the VM specifying the distributed virtual ports reserved for the virtual network adapters may be copied from a source VM host to the destination VM host or created in the destination VM host. As part of the migration, network state data of the distributed virtual ports used by the VM at the source VM host is copied and applied to the appropriate reserved distributed virtual ports on the destination host. Then, when the migrated VM is powered on at the destination host, the VM configuration specifying the reserved distributed virtual ports is used to attach the virtual network adapters of the VM to the reserved distributed virtual ports.

Abstract translation: 描述了跨虚拟交换机迁移虚拟机（VM）的技术。 要迁移VM，目标分布式虚拟交换机模块可以在迁移之前实例化目标VM主机上的分布式虚拟端口，并为虚拟机的每个虚拟网络适配器预留分布式虚拟端口。 此外，可以将指定为虚拟网络适配器预留的分布式虚拟端口的VM的配置文件从源VM主机复制到目的地VM主机，或者在目的地VM主机中创建。 作为迁移的一部分，虚拟机在源VM主机使用的分布式虚拟端口的网络状态数据将被复制并应用于目标主机上相应的保留的分布式虚拟端口。 然后，当迁移的VM在目标主机上打开电源时，将使用指定保留的分布式虚拟端口的VM配置将VM的虚拟网络适配器附加到预留的分布式虚拟端口。