DISTRIBUTED FAULT TOLERANT SERVICE CHAIN

    公开(公告)号:US20210135992A1

    公开(公告)日:2021-05-06

    申请号:US16668505

    申请日:2019-10-30

    申请人: VMware, Inc.

    摘要: Some embodiments of the invention provide novel methods for performing services on data messages passing through a network connecting one or more datacenters, such as software defined datacenters (SDDCs). The method of some embodiments uses service containers executing on host computers to perform different chains (e.g., ordered sequences) of services on different data message flows. For a data message of a particular data message flow that is received or generated at a host computer, the method in some embodiments uses a service classifier executing on the host computer to identify a service chain that specifies several services to perform on the data message. For each service in the identified service chain, the service classifier identifies a service container for performing the service. The service classifier then forwards the data message to a service forwarding element to forward the data message through the service containers identified for the identified service chain. The service classifier and service forwarding element are implemented in some embodiments as processes that are defined as hooks in the virtual interface endpoints (e.g., virtual Ethernet ports) of the host computer's operating system (e.g., Linux operating system) over which the service containers execute.

    STATEFUL NETWORK SLICE SELECTION USING REPLAY OF CONNECTION HANDSHAKE

    公开(公告)号:US20200275359A1

    公开(公告)日:2020-08-27

    申请号:US16443813

    申请日:2019-06-17

    申请人: VMware, Inc.

    摘要: Some embodiments provide a method for a network slice selector that forwards messages from endpoint electronic devices onto different network slices of multiple network slices. The method receives a set of connection initiation messages setting up a connection between an endpoint electronic device and a network domain. The method forwards the set of connection initiation messages from the endpoint electronic device onto a default network slice while storing data regarding the connection initiation messages. After the connection is setup, the method receives a data message belonging to the connection from the endpoint electronic device. The method selects one of the plurality of network slices to which the electronic device has access as the network slice for the connection based on analysis of the received data message. The method retransmits the set of connection initiation messages on the selected network slice between the network slice selector and a network gateway.

    VIRTUAL SERVICE NETWORKS
    37.
    发明申请

    公开(公告)号:US20200275357A1

    公开(公告)日:2020-08-27

    申请号:US16443810

    申请日:2019-06-17

    申请人: VMware, Inc.

    摘要: Some embodiments provide a method for establishing multiple virtual service networks over multiple datacenters. The method configures, for each virtual service network of the plurality of virtual service networks, a set of machines distributed across the datacenters to implement an ordered set of network services for the virtual service network. The method configures multiple service network selectors executing within the datacenters to receive a data message, select one of the virtual service networks for the data message based on analysis of contents of the data message, determine a location within the datacenters for a machine implementing a first network service of the ordered set of network services for the selected virtual service network, and transmit the data message to the machine implementing the first network service.

    DISTRIBUTED SERVICE CHAIN ACROSS MULTIPLE CLOUDS

    公开(公告)号:US20230362239A1

    公开(公告)日:2023-11-09

    申请号:US18219187

    申请日:2023-07-07

    申请人: VMware, Inc.

    摘要: Some embodiments of the invention provide novel methods for performing services on data messages passing through a network connecting one or more datacenters, such as software defined datacenters (SDDCs). The method of some embodiments uses service containers executing on host computers to perform different chains (e.g., ordered sequences) of services on different data message flows. For a data message of a particular data message flow that is received or generated at a host computer, the method in some embodiments uses a service classifier executing on the host computer to identify a service chain that specifies several services to perform on the data message. For each service in the identified service chain, the service classifier identifies a service container for performing the service. The service classifier then forwards the data message to a service forwarding element to forward the data message through the service containers identified for the identified service chain. The service classifier and service forwarding element are implemented in some embodiments as processes that are defined as hooks in the virtual interface endpoints (e.g., virtual Ethernet ports) of the host computer's operating system (e.g., Linux operating system) over which the service containers execute.