Tunnel-based routing calculation in software- defined networking (SDN) environments

    公开(公告)号:US11128557B2

    公开(公告)日:2021-09-21

    申请号:US16727954

    申请日:2019-12-27

    Applicant: VMWARE, INC.

    Abstract: Example methods and network devices for tunnel-based routing calculation. One example method may comprise establishing a tunnel between a first tunnel interface and a second tunnel interface; establishing a first session for routing information exchange between a first tunnel endpoint and an underlay network device; establishing a second session for routing information exchange between the first tunnel interface and the second tunnel interface over the tunnel. In response to receiving first routing information over the first session, the underlay network device may be configured to be a next hop to reach the second tunnel endpoint by updating a routing table to include a first entry. Further, the underlay network device may be retained as the next hop by updating the routing table to include a second entry to override second routing information that advertises, over the second session, the second tunnel interface as the next hop.

    Fast distribution of port identifiers for rule processing

    公开(公告)号:US11108728B1

    公开(公告)日:2021-08-31

    申请号:US16938697

    申请日:2020-07-24

    Applicant: VMware, Inc.

    Abstract: Some embodiments of the invention provide a method for implementing a logical network with one or more logical forwarding elements (LFEs), each with multiple logical ports. Each LFE in some embodiments is implemented by several physical forwarding elements (PFEs) operating on several devices. On a host computer executing a particular machine connected to a PFE implementing a particular LFE, the method identifies an address discovery message associating a particular network address (e.g., a layer 2 (L2) address or media access control (MAC) address) of the particular machine with a another network address (e.g., a layer 3 (L3) or an Internet Protocol (IP) address) of the particular machine. The method identifies an LFE logical port associated with the particular machine, stores in an encapsulation header an identifier that identifies this port, encapsulates the address discovery data message with this encapsulation header, and then forwards the encapsulated message to a set of one or more devices implementing the LFE. Each device in the set of devices extracts the logical port identifier from the encapsulation header and stores this logical port identifier for use in processing data messages associated with the particular machine.

    Using a route server to distribute group address associations

    公开(公告)号:US11012357B2

    公开(公告)日:2021-05-18

    申请号:US16445971

    申请日:2019-06-19

    Applicant: VMware, Inc.

    Abstract: Embodiments described herein involve learning and distributing associations between groups and addresses. Embodiments include receiving, by a first route server associated with a first central control plane (CCP) of a first data center, a definition of a first group. Embodiments include learning, by the first route server, a first association between the first group and one or more addresses based on the definition of the first group. Embodiments include transmitting, by the first route server, the first association to a second route server in a second CCP of a second data center. Embodiments include receiving, by the first route server, from the second route server, a second association between the first group and one or more additional addresses. Embodiments include storing, by the first route server, the first association and the second association in a table and programming, by the first central control plane, the hypervisor based on the table.

    Migration for network appliances
    24.
    发明授权

    公开(公告)号:US10944585B1

    公开(公告)日:2021-03-09

    申请号:US16570344

    申请日:2019-09-13

    Applicant: VMware, Inc.

    Abstract: Embodiments described herein involve appliance migration. Embodiments include connecting, by a second appliance that is configured to perform a service, to a first uplink and a first downlink of a first appliance that is configured to perform the service. Embodiments include connecting, by the second appliance, to a first endpoint and a second endpoint to which the first appliance is connected. Embodiments include determining, by the second appliance, existing flows processed by the first appliance. Embodiments include processing, by the second appliance, a plurality of packets received via the first endpoint by: forwarding, by the second appliance, first packets of the plurality of packets that correspond to the existing flows to the first appliance; and performing, by the second appliance, the service for second packets of the plurality of packets that do not correspond to the existing flows.

    Host computer configured to facilitate distributed SNAT service

    公开(公告)号:US11606294B2

    公开(公告)日:2023-03-14

    申请号:US16931207

    申请日:2020-07-16

    Applicant: VMware, Inc.

    Abstract: Some embodiments of the invention provide novel methods for facilitating a distributed SNAT (dSNAT) middlebox service operation for a first network at a host computer in the first network on which the dSNAT middlebox service operation is performed and a gateway device between the first network and a second network. The novel methods enable dSNAT that provides stateful SNAT at multiple host computers, thus avoiding the bottleneck problem associated with providing stateful SNAT at gateways and also significantly reduces the need to redirect packets received at the wrong host by using a capacity of off-the-shelf gateway devices to perform IPv6 encapsulation for IPv4 packets and assigning locally unique IPv6 addresses to each host executing a dSNAT middlebox service instance that are used by the gateway device.

    Building a platform to scale control and data plane for virtual network functions

    公开(公告)号:US11533259B2

    公开(公告)日:2022-12-20

    申请号:US16520876

    申请日:2019-07-24

    Applicant: VMware, Inc.

    Abstract: The present disclosure provides an approach for scaling the number of VNFs in a data center without scaling the number of control sessions between VNFs and a data center gateway. The approach includes opening a session between a VNF and a route server, rather than between the VNF and the gateway, when the VNF needs to send its connectivity information to the gateway. The VNF sends its connectivity information to the route server, and the route server forwards the connectivity information to the gateway. The gateway receives connectivity information of a plurality of VNFs in the data center from the route server rather than from each of the VNFs individually. The connectivity information is then used to send packets, by the gateway to a VNF, for processing. The packets are sent using three layers of networking: an underlay physical network, an overlay logical network, and a second overlay logical network.

Patent Agency Ranking