公开(公告)号：US11489720B1

公开(公告)日：2022-11-01

申请号：US17569520

申请日：2022-01-06

Applicant: VMware, Inc.

Inventor： Raghav Kempanna ,  Rajagopal Sreenivasan ,  Sudarshana Kandachar Sridhara Rao ,  Kumara Parameshwaran ,  Vipin Padmam Ramesh

IPC: G06F15/177 ,  H04L41/0806 ,  H04L67/10 ,  H04L43/0811

Abstract: Some embodiments of the invention provide a method of deploying tenant deployable elements on resource elements in public cloud datacenters. The method receives a request to deploy a particular tenant deployable element in one of a first public cloud datacenter (PCD) and a second PCD, the first public cloud datacenter belonging to a first cloud service provider (CSP) and the second public cloud datacenter belonging to a second CSP. For each candidate resource element in the first PCD, the method identifies a first set of performance metrics associated with the candidate resource element. For each candidate resource element in the second PCD, the method identifies a second set of performance metrics associated with the candidate resource element. The method evaluates the identified first and second sets of metrics to select a resource element to implement the particular tenant deployable element in one of the first and second PCDs. The method uses the selected resource element to implement the particular tenant deployable element in one of the first and second PCDs.

公开(公告)号：US20250023820A1

公开(公告)日：2025-01-16

申请号：US18373568

申请日：2023-09-27

Applicant: VMware, Inc.

Inventor： Raghav Kempanna ,  Tathagat Priyadarshi ,  Vipin Padmam Ramesh ,  Kumara Parameshwaran Rathnavel ,  Srinivasa Srikanth Podila ,  Rajagopal Sreenivasan ,  Samar Yadav

IPC: H04L47/125 ,  H04L47/24

Abstract: Some embodiments provide a novel method for dynamically processing data message flows using different non-uniform memory access (NUMA) nodes of a processing system. Each NUMA node includes a memory and processors that can access data other memories of other NUMA nodes. A load balancing application associated with a first NUMA node receives flows destined for an endpoint application. The flows are assigned to the first NUMA node to be forwarded to the endpoint application. The load balancing application monitors a central processing (CPU) usage of the first NUMA node to determine whether the CPU usage of the first NUMA node exceeds a particular threshold. When the CPU usage of the first NUMA node exceeds the particular threshold, the load balancing application reassigns at least a subset of the flows to the second NUMA node for processing.

公开(公告)号：US20250021409A1

公开(公告)日：2025-01-16

申请号：US18373580

申请日：2023-09-27

Applicant: VMware, Inc.

Inventor： Raghav Kempanna ,  Tathagat Priyadarshi ,  Vipin Padmam Ramesh ,  Kumara Parameshwaran Rathnavel ,  Srinivasa Srikanth Podila ,  Rajagopal Sreenivasan ,  Samar Yadav

IPC: G06F9/54 ,  G06F12/02

Abstract: Some embodiments provide a novel method for processing data message flows using several non-uniform memory access (NUMA) nodes of a processing system. Each NUMA node includes a local memory and a set of processors that can access data from local memories of other NUMA nodes. A load balancing application associated with a first NUMA node receives a data message flow destined for an endpoint application. The load balancing application determines whether the first NUMA node should perform a middlebox service operation on the data message flow that is destined to the endpoint application. Based on a determination that the first NUMA node should not process the data message flow, the load balancing application directs the data message flow to a second NUMA node for performing the middlebox service operation.

公开(公告)号：US20240015133A1

公开(公告)日：2024-01-11

申请号：US18371703

申请日：2023-09-22

Applicant: VMware, Inc.

Inventor： Sudarshana Kandachar Sridhara Rao ,  Rajagopal Sreenivasan ,  Raghav Kempanna ,  Sreeram Iyer

IPC: H04L61/4511 ,  H04L61/5007

CPC classification number: H04L61/4511 ,  H04L61/5007

Abstract: Some embodiments provide a method that, at a first domain name system (DNS) cluster of a set of DNS clusters, receives a DNS request from a client. The first DNS cluster identifies, based on an identifier of the client in the DNS request, a home DNS cluster of the client. The method forwards the DNS request to the home DNS cluster. The home DNS cluster supplies a DNS response to the client. Identifying the home DNS cluster, in some embodiments, includes performing a hash on the identifier of the client. Supplying the DNS response, in some embodiments, includes receiving a virtual IP (VIP) address associated with one of a plurality of sets of application servers to the client and providing the received VIP address to the client in the DNS response.

公开(公告)号：US11431606B2

公开(公告)日：2022-08-30

申请号：US17179113

申请日：2021-02-18

Applicant: VMware, Inc.

Inventor： Sudarshana Kandachar Sridhara Rao ,  Aravindhan K ,  Srinivasa Srikanth Podila ,  Tathagat Priyadarshi ,  Raghav Kempanna ,  Rajagopal Sreenivasan ,  Vipin Padmam Ramesh

IPC: H04L43/50 ,  H04L41/0816 ,  H04L41/147 ,  H04L43/062

Abstract: Some embodiments provide a method for generating a test traffic configuration for testing a first network. From a second network, the method receives a set of data streams representing data traffic observed in the second network. The method uses a machine learning engine to analyze the set of data streams in order to determine traffic patterns in the second network. The method generates the test traffic configuration for testing the first network by replicating the traffic patterns of the second network in the first network.

公开(公告)号：US20220210044A1

公开(公告)日：2022-06-30

申请号：US17179113

申请日：2021-02-18

Applicant: VMware, Inc.

Inventor： Sudarshana Kandachar Sridhara Rao ,  Aravindhan K. ,  Srinivasa Srikanth Podila ,  Tathagat Priyadarshi ,  Raghav Kempanna ,  Rajagopal Sreenivasan ,  Vipin Padmam Ramesh

IPC: H04L12/26 ,  H04L12/24

Abstract: Some embodiments provide a method for generating a test traffic configuration for testing a first network. From a second network, the method receives a set of data streams representing data traffic observed in the second network. The method uses a machine learning engine to analyze the set of data streams in order to determine traffic patterns in the second network. The method generates the test traffic configuration for testing the first network by replicating the traffic patterns of the second network in the first network.

公开(公告)号：US11824874B2

公开(公告)日：2023-11-21

申请号：US17239530

申请日：2021-04-23

Applicant: VMWARE, INC.

Inventor： Sudarshana Kandachar Sridhara Rao ,  Raghav Kempanna ,  Rajagopal Sreenivasan ,  Kumara Parameshwaran

IPC: H04L9/40

CPC classification number: H04L63/1416 ,  H04L63/0236 ,  H04L63/0876 ,  H04L63/1425 ,  H04L63/1466 ,  H04L63/20

Abstract: Example methods and systems for application security enforcement are described. In one example, a computer system may detect, from a client device, a packet requiring processing by a first server pool; and determine whether the packet is associated with a security attack. In response to determination that the packet is not associated with the security attack, the packet may be steered towards the first server pool to cause processing of the packet by one of multiple first application servers. Otherwise, the packet may be steered towards a second server pool to cause processing of the packet by one of multiple second application servers and to learn attack information associated with the security attack. The multiple second application servers in the second server pool may be capable of mimicking behavior of the multiple first application servers in the first server pool.

公开(公告)号：US11792155B2

公开(公告)日：2023-10-17

申请号：US17837368

申请日：2022-06-10

Applicant: VMware, Inc.

Inventor： Sudarshana Kandachar Sridhara Rao ,  Rajagopal Sreenivasan ,  Raghav Kempanna ,  Sreeram Iyer

IPC: H04L61/4511 ,  H04L61/2514 ,  H04L61/5007 ,  H04L67/1095 ,  H04L61/5038

CPC classification number: H04L61/4511 ,  H04L61/2514 ,  H04L61/5007 ,  H04L67/1095 ,  H04L61/5038

Abstract: Some embodiments provide a method that, at a first domain name system (DNS) cluster of a set of DNS clusters, receives a DNS request from a client. The first DNS cluster identifies, based on an identifier of the client in the DNS request, a home DNS cluster of the client. The method forwards the DNS request to the home DNS cluster. The home DNS cluster supplies a DNS response to the client. Identifying the home DNS cluster, in some embodiments, includes performing a hash on the identifier of the client. Supplying the DNS response, in some embodiments, includes receiving a virtual IP (VIP) address associated with one of a plurality of sets of application servers to the client and providing the received VIP address to the client in the DNS response.

公开(公告)号：US20220407820A1

公开(公告)日：2022-12-22

申请号：US17569523

申请日：2022-01-06

Applicant: VMware, Inc.

Inventor： Raghav Kempanna ,  Rajagopal Sreenivasan ,  Sudarshana Kandachar Sridhara Rao ,  Kumara Parameshwaran ,  Vipin Padmam Ramesh

IPC: H04L47/70

Abstract: Some embodiments of the invention provide a method of deploying first and second tenant deployable elements to a set of one or more public clouds, the first and second tenant deployable elements being different types of elements. The method identifies first and second sets of performance metrics respectively for first and second sets of candidate resource elements to use to deploy the first and second tenant deployable elements, the two sets of performance metrics being different sets of metrics because the first and second tenant deployable elements being different types of elements, the first set of performance metrics having at least one metric that is not included in the second set of performance metrics. The method uses the different sets of metrics evaluate the first and second sets of candidate resource elements, in order to select one of the first set of candidate resource elements for the first tenant deployable element and to select one of the second set of candidate resource elements for the second tenant deployable element. The method deploys the first and second tenant deployable elements in the set of PCDs by using the selected candidate resource elements.

公开(公告)号：US20220400097A1

公开(公告)日：2022-12-15

申请号：US17837359

申请日：2022-06-10

Applicant: VMware, Inc.

Inventor： Sudarshana Kandachar Sridhara Rao ,  Rajagopal Sreenivasan ,  Raghav Kempanna ,  Sreeram Iyer

IPC: H04L61/4511 ,  H04L61/5007 ,  H04L61/2514

Abstract: Some embodiments provide a method that, at a first domain name system (DNS) cluster of a set of DNS clusters, receives a DNS request from a client. The first DNS cluster identifies, based on an identifier of the client in the DNS request, a home DNS cluster of the client. The method forwards the DNS request to the home DNS cluster. The home DNS cluster supplies a DNS response to the client. Identifying the home DNS cluster, in some embodiments, includes performing a hash on the identifier of the client. Supplying the DNS response, in some embodiments, includes receiving a virtual IP (VIP) address associated with one of a plurality of sets of application servers to the client and providing the received VIP address to the client in the DNS response.