公开(公告)号：US11223494B2

公开(公告)日：2022-01-11

申请号：US16741544

申请日：2020-01-13

Applicant: VMware, Inc.

Inventor： Rahul Mishra ,  Pierluigi Rolando ,  Stephen Tan ,  Raju Koganty

IPC: H04L12/18 ,  H04L12/761 ,  H04L29/12 ,  H04L12/46

Abstract: Some embodiments of the invention provide novel methods for providing transparent services for multicast data messages traversing a network edge device operating at a boundary between two networks. The method analyzes data messages received at the network edge device to determine whether they require a service provided at the boundary and whether they are unicast or multicast (including broadcast). The method modifies a multicast destination media access control (MAC) address of a multicast data message requiring a service to be a unicast destination MAC address and provides, without processing by a standard routing function, the modified data message directly to an interface associated with a service node that provides the particular service required by the data message. The method receives the serviced data message, restores the multicast destination MAC address, and forwards the serviced data message to a set of destinations associated with the multicast destination address.

公开(公告)号：US10530634B1

公开(公告)日：2020-01-07

申请号：US16048107

申请日：2018-07-27

Applicant: VMware, Inc.

Inventor： Kai-Wei Fan ,  Haihua Luo ,  Stephen Tan

IPC: H04L12/24 ,  H04L12/703 ,  H04L12/751 ,  H04L12/26 ,  H04L29/06 ,  H04L12/707 ,  H04L29/08

Abstract: A method for providing two-channel-based high-availability in a cluster of nodes is disclosed. In an embodiment, a method comprises: initiating, by a local control plane executing on a first node, a first state for an underlay control channel and a second state for a management control channel; detecting a bidirectional forwarding detection (“BFD”) control packet from a second node; determining whether the BFD control packet has been received from the underlay control channel; in response to determining that the BFD control packet was received from the underlay control channel: parsing the BFD control packet to extract a first diagnostic code; updating the first state with the first diagnostic code; determining whether both the first state and the second state indicate that the second node is unreachable; in response to determining that the second node is unreachable, initiating a switchover of services configured on the second node.

公开(公告)号：US12047298B2

公开(公告)日：2024-07-23

申请号：US18299686

申请日：2023-04-12

Applicant: VMware, Inc.

Inventor： Senthilkumar Karunakaran ,  Chidambareswaran Raman ,  Meenakshi Sundaram Selvaraj ,  Subin Cyriac Mathew ,  Stephen Tan

IPC: H04L47/125 ,  H04L12/46 ,  H04L47/193 ,  H04L47/80

CPC classification number: H04L47/125 ,  H04L12/4633 ,  H04L47/193 ,  H04L47/806

Abstract: A method of transmitting multicast traffic to workloads of tenants communicating over overlay networks provisioned on top of a physical network includes the steps of: detecting the multicast traffic; determining that the multicast traffic is bound for workloads of a first tenant and workloads of a second tenant; encapsulating one instance of the multicast traffic using a Layer 2 (L2) over Layer 3 (L3) encapsulation protocol to generate encapsulated traffic, wherein the encapsulated traffic includes an identifier of a first backplane network corresponding to the first tenant and an identifier of a second backplane network corresponding to the second tenant in a header portion of each packet of the encapsulated traffic; and transmitting, to a first host computing device, the encapsulated traffic with the identifiers of the first and second overlay networks.

公开(公告)号：US11784922B2

公开(公告)日：2023-10-10

申请号：US17367347

申请日：2021-07-03

Applicant: VMware, Inc.

Inventor： Senthilkumar Karunakaran ,  Subin Cyriac Mathew ,  Stephen Tan ,  Meenakshi Sundaram Selvaraj ,  Chidambareswaran Raman

IPC: H04L45/42 ,  H04L47/80 ,  H04L12/46 ,  H04L45/02

CPC classification number: H04L45/42 ,  H04L12/4633 ,  H04L45/02 ,  H04L47/806

Abstract: A method for offloading multicast replication from multiple tiers of edge nodes implemented by multiple host machines to a physical switch is provided. Each of the multiple host machines implements a provider edge node and a tenant edge node. One host machine among the multiple host machines receives a packet having an overlay multicast group identifier. The host machine maps the overlay multicast group identifier to an underlay multicast group identifier. The host machine encapsulates the packet with an encapsulation header that includes the underlay multicast group identifier to create an encapsulated packet. The host machine forwards the encapsulated packet to a physical switch of the network segment. The physical switch forwards copies of the encapsulated packet to tenant edge nodes at one or more ports that are determined to be interested in the underlay multicast group identifier.

公开(公告)号：US11349706B2

公开(公告)日：2022-05-31

申请号：US16724818

申请日：2019-12-23

Applicant: VMware, Inc.

Inventor： Kai-Wei Fan ,  Haihua Luo ,  Stephen Tan

IPC: H04L41/0663 ,  H04L41/0668 ,  H04L45/28 ,  H04L45/02 ,  H04L43/0829 ,  H04L69/22 ,  H04L45/00 ,  H04L67/10

Abstract: A method for providing two-channel-based high-availability in a cluster of nodes is disclosed. In an embodiment, a method comprises: initiating, by a local control plane executing on a first node, a first state for an underlay control channel and a second state for a management control channel; detecting a bidirectional forwarding detection (BFD) control packet from a second node; determining whether the BFD control packet has been received from the underlay control channel; in response to determining that the BFD control packet was received from the underlay control channel: parsing the BFD control packet to extract a first diagnostic code; updating the first state with the first diagnostic code; determining whether both the first state and the second state indicate a need to switch services configured on the second node; in response to the determining, initiating a switchover of services configured on the second node.

公开(公告)号：US20220078037A1

公开(公告)日：2022-03-10

申请号：US17528094

申请日：2021-11-16

Applicant: VMware, Inc.

Inventor： Rahul Mishra ,  Pierluigi Rolando ,  Stephen Tan ,  Raju Koganty

IPC: H04L12/18 ,  H04L12/761 ,  H04L29/12 ,  H04L12/46

Abstract: Some embodiments of the invention provide novel methods for providing transparent services for multicast data messages traversing a network edge device operating at a boundary between two networks. The method analyzes data messages received at the network edge device to determine whether they require a service provided at the boundary and whether they are unicast or multicast (including broadcast). The method modifies a multicast destination media access control (MAC) address of a multicast data message requiring a service to be a unicast destination MAC address and provides, without processing by a standard routing function, the modified data message directly to an interface associated with a service node that provides the particular service required by the data message. The method receives the serviced data message, restores the multicast destination MAC address, and forwards the serviced data message to a set of destinations associated with the multicast destination address.

公开(公告)号：US10924397B2

公开(公告)日：2021-02-16

申请号：US16283665

申请日：2019-02-22

Applicant: VMware, Inc.

Inventor： Rahul Mishra ,  Kantesh Mundaragi ,  Stephen Tan ,  Akhila Naveen ,  Pierluigi Rolando ,  Raju Koganty

IPC: H04L12/28 ,  H04L12/713 ,  H04L12/707 ,  H04L29/12

Abstract: In an embodiment, a method for a VRF and multi-service insertion on edge gateways is described. In an embodiment, the method comprises: detecting a packet; determining attributes for the packet; based on the attributes, determining whether the attributes match one or more rule attributes of a particular rule in a rule table; in response to determining that the attributes match the one or more rule attributes of a particular rule in the rule table: determining, based on the particular rule, a particular redirection identifier, a particular VRF identifier, a particular next_hop, a particular address pair, and a particular BFD status; based on the particular BFD status, determining whether to redirect the packet; and in response to determining to redirect the packet, redirecting the packet toward a service virtual machine from an interface indicated by one of addresses in the particular address pair.

公开(公告)号：US20200274791A1

公开(公告)日：2020-08-27

申请号：US16283656

申请日：2019-02-22

Applicant: VMware, Inc.

Inventor： Rahul Mishra ,  Kantesh Mundaragi ,  Stephen Tan ,  Akhila Naveen ,  Pierluigi Rolando ,  Raju Koganty

IPC: H04L12/707 ,  H04L12/24

Abstract: In an embodiment, a method for a VRF and multi-service insertion on edge gateways is described. In an embodiment, the method comprises obtaining a rule configuration. Based on, at least in part, the rule configuration, a rule table is created. The rule table comprises rule data records, wherein a rule data record comprises packet attributes and a redirection identifier. A policy configuration comprising policy records is obtained. Each policy record comprises a redirection identifier, a next_hop, and an address pair for interfaces. A mapping between VRF identifiers and address pairs is generated. Based on, at least in part, the mapping and the policy configuration, a policy table is generated. The policy table comprises table records, wherein a table record comprises a redirection identifier, a next_hop, and an address pair. The rule and policy tables are used to redirect a packet from an edge gateway to a service virtual machine.