METHODS FOR IDENTIFYING A SOURCE LOCATION IN A SERVICE CHAINING TOPOLOGY

    公开(公告)号:US20210036891A1

    公开(公告)日:2021-02-04

    申请号:US16580456

    申请日:2019-09-24

    申请人: VMware, Inc.

    摘要: In an embodiment, a computer-implemented method provides mechanisms for identifying a source location in a service chaining topology. In an embodiment, a method comprises: receiving a query, from a service plane implementation module executing on a host of a service virtual machine (“SVM”), for a location of a source host implementing a guest virtual machine (“source GVM”) that originated a packet in a computer network and that serviced the packet; in response to receiving the query, performing a search of bindings associated with one or more virtual network identifiers (“VNIs”) or service virtual network identifiers (“SVNIs”) to identify a particular binding that includes a MAC address of the host implementing the source GVM; identifying, in the particular binding, the location of the source host; and providing the location of the source host to the host of the SVM to facilitate forwarding of the packet from the SVM to the GVM.

    Traffic replication in overlay networks spanning multiple sites

    公开(公告)号:US10778457B1

    公开(公告)日:2020-09-15

    申请号:US16445030

    申请日:2019-06-18

    申请人: VMware, Inc.

    摘要: Some embodiments provide a method of replicating messages for a logical network. At a particular tunnel endpoint in a particular datacenter, the method receives a message to be replicated to members of a replication group. The method replicates the message to a set of tunnel endpoints of the replication group located in a same segment of the particular datacenter as the particular tunnel endpoint. The method replicates the message to a first set of proxy endpoints of the replication group, each of which is located in a different segment of the particular datacenter and for replicating the message to tunnel endpoints located in its respective segment of the particular datacenter. The method replicates the message to a second set of proxy endpoints of the replication group, each of which is located in a different datacenter and for replicating the message to tunnel endpoints located in its respective datacenter.

    Parallel execution of services on packets using multicast-based service insertion

    公开(公告)号:US10649805B1

    公开(公告)日:2020-05-12

    申请号:US16177855

    申请日:2018-11-01

    申请人: VMware, Inc.

    摘要: A method for a parallel execution of services, of a serial service chain, on packets using multicast-based service insertion is disclosed. In an embodiment, a method comprises detecting a packet of a data flow and storing the packet in memory. From a plurality of multicast groups, a first multicast group is identified. The first multicast group includes a plurality of service machines configured to provide a plurality of services to the data flow. The first multicast group includes all services machines of the plurality of service machines. The packet is multicast to the first multicast group of the plurality of multicast groups to cause applying, in parallel, services of service machines included in the first multicast group. Upon receiving a plurality of responses from service machines of the first multicast group, the plurality of responses is analyzed to determine whether the plurality of responses includes a modify-response. In response to determining that the plurality of responses does not include any modify-response, the plurality of responses is analyzed to determine whether the plurality of responses includes a drop-response. In response to determining that the plurality of responses does not include any drop-response, the packet is forwarded toward its destination without multicasting the packet to any other multicast group of the plurality of multicast groups.

    MAPPING VIRTUAL MACHINES FROM A PRIVATE NETWORK TO A MULTI-TENANT PUBLIC DATACENTER
    25.
    发明申请
    MAPPING VIRTUAL MACHINES FROM A PRIVATE NETWORK TO A MULTI-TENANT PUBLIC DATACENTER 有权
    将私人网络的虚拟机映射到多个公共DATACENTER

    公开(公告)号:US20150172331A1

    公开(公告)日:2015-06-18

    申请号:US14108277

    申请日:2013-12-16

    申请人: VMware, Inc.

    IPC分类号: H04L29/06 G06F9/54 G06F9/455

    摘要: A method for creating a set of virtual machines on a public datacenter. The method, from a first network controller of a private network, commands a second network controller of the public datacenter to create the virtual machines. The method, from the first network controller of the private network, communicates with the second network controller of the public datacenter to determine a type of the second network controller. When the first network controller includes instructions for using application programming interfaces (APIs) of the type of the second network controller, the method uses the APIs to set up a VLAN for the set of virtual machines in order to allow the virtual machines of the set of virtual machines to communicate securely with each other without sending the communications through the private network. In some embodiments, the VLAN is a private VLAN (PVLAN).

    摘要翻译: 在公共数据中心上创建一组虚拟机的方法。 该方法从私有网络的第一网络控制器命令公共数据中心的第二网络控制器来创建虚拟机。 来自专用网络的第一网络控制器的方法与公共数据中心的第二网络控制器进行通信,以确定第二网络控制器的类型。 当第一个网络控制器包含使用第二个网络控制器类型的应用编程接口(API)的指令时,该方法使用API​​为该组虚拟机设置一个VLAN,以便允许该组的虚拟机 的虚拟机彼此安全地通信,而不通过专用网络发送通信。 在一些实施例中,VLAN是私有VLAN(PVLAN)。

    LOAD BALANCING OVER TUNNEL ENDPOINT GROUPS
    26.
    发明公开

    公开(公告)号:US20240031291A1

    公开(公告)日:2024-01-25

    申请号:US17871994

    申请日:2022-07-25

    申请人: VMware, Inc.

    IPC分类号: H04L47/125 H04L12/46

    CPC分类号: H04L47/125 H04L12/4633

    摘要: Some embodiments provide a method of forwarding data messages between source and destination host computers that execute source and destination machines. At a source computer on which a source machine for a data message flow executes, the method in some embodiments identifies a source tunnel endpoint group (TEPG) associated with the source machine. For the flow, the method selects one TEP of the TEPG as the source TEP. The method then uses the selected source TEP to forward the flow to the destination computer on which the destination machine executes.

    Label-based methods for identifying a source location in service chaining topology

    公开(公告)号:US11831468B2

    公开(公告)日:2023-11-28

    申请号:US17345636

    申请日:2021-06-11

    申请人: VMware, Inc.

    摘要: In an embodiment, a computer-implemented method provides mechanisms for identifying a source location in a service chaining topology. In an embodiment, a method comprises: determining, at an egress interface of a host that hosts a virtual machine (“VM”), whether a service plane MAC address (“spmac”) in a packet header of a packet, provided to the egress interface, is the same as an inner destination MAC address in the packet; in response to determining that the spmac in the packet header of the packet, provided to the egress interface, is the same as the inner destination MAC address in the packet: encapsulating the packet with a destination virtual tunnel endpoint (“VTEP”) address retrieved from a mapping of VTEP-labels onto VTEP addresses; and causing providing the packet from the egress interface of the host that hosts the VM to a source host that hosts a source guest virtual machine (“GVM”).

    OPTIMIZED PROCESSING OF MULTICAST DATA MESSAGES IN A HOST

    公开(公告)号:US20230164067A1

    公开(公告)日:2023-05-25

    申请号:US17532254

    申请日:2021-11-22

    申请人: VMware, Inc.

    CPC分类号: H04L45/58 H04L12/18 H04L45/16

    摘要: Some embodiments provide a method for forwarding multicast data messages at a forwarding element on a host computer. The method receives a multicast data message from a routing element executing on the host computer along with metadata appended to the multicast data message by the routing element. Based on a destination address of the multicast data message, the method identifies a set of recipient ports for a multicast group with which the multicast data message is associated. For each recipient port, the method uses the metadata appended to the multicast data message by the routing element to determine whether to deliver a copy of the multicast data message to the recipient port.