SERVICE INSERTION AT LOGICAL NETWORK GATEWAY
    31.
    发明申请

    公开(公告)号:US20200076684A1

    公开(公告)日:2020-03-05

    申请号:US16120283

    申请日:2018-09-02

    Applicant: VMware, Inc.

    Abstract: Some embodiments provide a method for configuring a gateway machine in a datacenter. The method receives a definition of a logical network for implementation in the datacenter. The logical network includes at least one logical switch to which logical network endpoints attach and a logical router for handling data traffic between the logical network endpoints in the datacenter and an external network. The method receives configuration data attaching a third-party service to at least one interface of the logical router via an additional logical switch designated for service attachments. The third-party service is for performing non-forwarding processing on the data traffic between the logical network endpoints and the external network. The method configures the gateway machine in the datacenter to implement the logical router and redirect at least a subset of the data traffic between the logical network endpoints and the external network to the attached third-party service.

    High availability for a shared-memory-based firewall service virtual machine

    公开(公告)号:US11409621B2

    公开(公告)日:2022-08-09

    申请号:US15991284

    申请日:2018-05-29

    Applicant: VMWARE, INC.

    Abstract: A method for a shared-memory-based SVM to provide high availability of service is disclosed. In an embodiment, an agent process of the SVM receives a signal that one or more data packets have been queued in a shared memory device of one or more shared memory devices. Upon receiving the signal, the agent process determines whether the SVM has been designated as active for the shared memory device, and if it has, the agent process reads the one or more data packets from the shared memory device. As the data packets are read from the shared memory device: for each data packet, of the one or more data packets read from the shared memory device: the agent process determines whether an indication that the packet is to be transmitted to its destination is received, and if the indication is received, the packet is placed back to the shared memory device.

    SERVICE INSERTION FOR MULTICAST TRAFFIC AT BOUNDARY

    公开(公告)号:US20220078037A1

    公开(公告)日:2022-03-10

    申请号:US17528094

    申请日:2021-11-16

    Applicant: VMware, Inc.

    Abstract: Some embodiments of the invention provide novel methods for providing transparent services for multicast data messages traversing a network edge device operating at a boundary between two networks. The method analyzes data messages received at the network edge device to determine whether they require a service provided at the boundary and whether they are unicast or multicast (including broadcast). The method modifies a multicast destination media access control (MAC) address of a multicast data message requiring a service to be a unicast destination MAC address and provides, without processing by a standard routing function, the modified data message directly to an interface associated with a service node that provides the particular service required by the data message. The method receives the serviced data message, restores the multicast destination MAC address, and forwards the serviced data message to a set of destinations associated with the multicast destination address.

    PROVIDING SERVICES AT THE EDGE OF A NETWORK USING SELECTED VIRTUAL TUNNEL INTERFACES

    公开(公告)号:US20210314415A1

    公开(公告)日:2021-10-07

    申请号:US16904399

    申请日:2020-06-17

    Applicant: VMware, Inc.

    Abstract: For traffic exiting a logical network through a particular VTI, some embodiments perform a service classification operation for different data messages to identify different VTIs that connect the edge forwarding element to a service node to provide services required by the data messages. Each data message, in some embodiments, is then forwarded to the identified VTI to receive the required service. The identified VTI does not perform a service classification operation. The service node then returns the serviced data message to the edge forwarding element. In some embodiments, the identified VTI is not configured to perform the service classification operation and is instead configured to mark all traffic directed to the edge forwarding element as having been serviced. The marked serviced data message is received at the edge forwarding element and forwarded to a destination of the data message through the particular VTI.

Patent Agency Ranking