公开(公告)号：US10959098B2

公开(公告)日：2021-03-23

申请号：US16192774

申请日：2018-11-15

Applicant: VMware, Inc.

Inventor： Israel Cidon ,  Prashanth Venugopal ,  Aran Bergman ,  Chen Dar ,  Alex Markuze ,  Eyal Zohar

IPC: H04W12/08 ,  H04L12/26 ,  H04L12/46 ,  H04L29/06 ,  H04L12/24 ,  H04L12/721

Abstract: Some embodiments establish for an entity a virtual network over several public clouds of several public cloud providers and/or in several regions. In some embodiments, the virtual network is an overlay network that spans across several public clouds to interconnect one or more private networks (e.g., networks within branches, divisions, departments of the entity or their associated datacenters), mobile users, and SaaS (Software as a Service) provider machines, and other web applications of the entity. The virtual network in some embodiments can be configured to optimize the routing of the entity's data messages to their destinations for best end-to-end performance, reliability and security, while trying to minimize the routing of this traffic through the Internet. Also, the virtual network in some embodiments can be configured to optimize the layer 4 processing of the data message flows passing through the network.

公开(公告)号：US10958479B2

公开(公告)日：2021-03-23

申请号：US15972095

申请日：2018-05-04

Applicant: VMware, Inc.

Inventor： Israel Cidon ,  Chen Dar ,  Prashanth Venugopal ,  Eyal Zohar ,  Alex Markuze ,  Aran Bergman

IPC: H04L12/46 ,  H04L29/08 ,  H04L12/14 ,  H04L12/715 ,  H04L12/28 ,  H04L29/12 ,  H04L12/24 ,  H04M15/00 ,  H04L29/06 ,  H04L12/721 ,  H04L12/741 ,  H04L12/26

Abstract: Some embodiments establish for an entity a virtual network over several public clouds of several public cloud providers and/or in several regions. In some embodiments, the virtual network is an overlay network that spans across several public clouds to interconnect one or more private networks (e.g., networks within branches, divisions, departments of the entity or their associated datacenters), mobile users, and SaaS (Software as a Service) provider machines, and other web applications of the entity. The virtual network in some embodiments can be configured to optimize the routing of the entity's data messages to their destinations for best end-to-end performance, reliability and security, while trying to minimize the routing of this traffic through the Internet. Also, the virtual network in some embodiments can be configured to optimize the layer 4 processing of the data message flows passing through the network.

公开(公告)号：US20210067461A1

公开(公告)日：2021-03-04

申请号：US16662591

申请日：2019-10-24

Applicant: VMware, Inc.

Inventor： Israel Cidon ,  Prashanth Venugopal ,  Aran Bergman ,  Chen Dar ,  Alex Markuze ,  Eyal Zohar

IPC: H04L12/911 ,  H04L12/26 ,  H04L12/24 ,  H04L12/46

Abstract: Some embodiments provide a novel method for deploying different virtual networks over several public cloud datacenters for different entities. For each entity, the method (1) identifies a set of public cloud datacenters of one or more public cloud providers to connect a set of machines of the entity, (2) deploys managed forwarding nodes (MFNs) for the entity in the identified set of public cloud datacenters, and then (3) configures the MFNs to implement a virtual network that connects the entity's set of machines across its identified set of public cloud datacenters. In some embodiments, the method identifies the set of public cloud datacenters for an entity by receiving input from the entity's network administrator. In some embodiments, this input specifies the public cloud providers to use and/or the public cloud regions in which the virtual network should be defined. Conjunctively, or alternatively, this input in some embodiments specifies actual public cloud datacenters to use.

公开(公告)号：US10666460B2

公开(公告)日：2020-05-26

申请号：US15972090

申请日：2018-05-04

Applicant: VMware, Inc.

Inventor： Israel Cidon ,  Chen Dar ,  Prashanth Venugopal ,  Eyal Zohar ,  Alex Markuze ,  Aran Bergman

IPC: H04L29/06 ,  H04L12/46 ,  H04L29/08 ,  H04L12/14 ,  H04L12/715 ,  H04L12/28 ,  H04L29/12 ,  H04L12/24 ,  H04M15/00 ,  H04L12/721 ,  H04L12/741 ,  H04L12/26

Abstract: Some embodiments establish for an entity a virtual network over several public clouds of several public cloud providers and/or in several regions. In some embodiments, the virtual network is an overlay network that spans across several public clouds to interconnect one or more private networks (e.g., networks within branches, divisions, departments of the entity or their associated datacenters), mobile users, and SaaS (Software as a Service) provider machines, and other web applications of the entity. The virtual network in some embodiments can be configured to optimize the routing of the entity's data messages to their destinations for best end-to-end performance, reliability and security, while trying to minimize the routing of this traffic through the Internet. Also, the virtual network in some embodiments can be configured to optimize the layer 4 processing of the data message flows passing through the network.

公开(公告)号：US10608844B2

公开(公告)日：2020-03-31

申请号：US15972091

申请日：2018-05-04

Applicant: VMware, Inc.

Inventor： Israel Cidon ,  Chen Dar ,  Prashanth Venugopal ,  Eyal Zohar ,  Alex Markuze ,  Aran Bergman

IPC: H04L12/46 ,  H04L29/08 ,  H04L12/14 ,  H04L12/715 ,  H04L12/28 ,  H04L29/12 ,  H04L12/24 ,  H04M15/00 ,  H04L29/06 ,  H04L12/721 ,  H04L12/741 ,  H04L12/26

Abstract: Some embodiments establish for an entity a virtual network over several public clouds of several public cloud providers and/or in several regions. In some embodiments, the virtual network is an overlay network that spans across several public clouds to interconnect one or more private networks (e.g., networks within branches, divisions, departments of the entity or their associated datacenters), mobile users, and SaaS (Software as a Service) provider machines, and other web applications of the entity. The virtual network in some embodiments can be configured to optimize the routing of the entity's data messages to their destinations for best end-to-end performance, reliability and security, while trying to minimize the routing of this traffic through the Internet. Also, the virtual network in some embodiments can be configured to optimize the layer 4 processing of the data message flows passing through the network.

公开(公告)号：US20230239234A1

公开(公告)日：2023-07-27

申请号：US17966814

申请日：2022-10-15

Applicant: VMware, Inc.

Inventor： Eyal Zohar ,  Chen Dar ,  Aran Bergman ,  Alex Markuze ,  Israel Cidon ,  Igor Golikov

IPC: H04L45/12 ,  H04L61/4511

CPC classification number: H04L45/123 ,  H04L61/4511

Abstract: The method of some embodiment provides DNS service for an SD-WAN. The method receives a DNS request for a domain name (e.g., a FQDN) from one of the compute nodes connected to the SD-WAN (e.g., from a branch site or datacenter site, or a machine of a remote user). The method selects a particular network address (e.g., a particular IP address) from several network addresses (e.g., several IP addresses) of several different sets of servers that are associated with the domain name based on measurements taken by agents deployed in the SD-WAN and based on SD-WAN DNS-resolution selection criteria. The method provides the particular network address in response to the DNS request to the machine that sent the DNS request (e.g., to the branch site or datacenter that sent the DNS request, or to the machine of the remote user that sent the request).

公开(公告)号：US11709710B2

公开(公告)日：2023-07-25

申请号：US17085893

申请日：2020-10-30

Applicant: VMware, Inc.

Inventor： Alex Markuze ,  Chen Dar ,  Aran Bergman ,  Igor Golikov ,  Israel Cidon ,  Eyal Zohar

IPC: G06F9/50 ,  G06F9/54 ,  G06F12/10 ,  H04L47/193 ,  H04L47/30 ,  H04L49/90 ,  H04L69/16

CPC classification number: G06F9/5016 ,  G06F9/544 ,  G06F12/10 ,  H04L47/193 ,  H04L47/30 ,  H04L49/9089 ,  H04L69/162 ,  G06F2212/657

Abstract: Some embodiments provide a novel method for sharing data between user-space processes and kernel-space processes without copying the data. The method dedicates, by a driver of a network interface controller (NIC), a memory address space for a user-space process. The method allocates a virtual region of the memory address space for zero-copy operations. The method maps the virtual region to a memory address space of the kernel. The method allows access to the virtual region by both the user-space process and a kernel-space process.

公开(公告)号：US20230224356A1

公开(公告)日：2023-07-13

申请号：US17574236

申请日：2022-01-12

Applicant: VMware, Inc.

Inventor： Alex Markuze ,  Chen Dar ,  Aran Bergman ,  Igor Golikov ,  Israel Cidon ,  Eyal Zohar

IPC: H04L67/06 ,  G06F16/13 ,  G06F16/182

CPC classification number: H04L67/06 ,  G06F16/13 ,  G06F16/183

Abstract: The method of some embodiments provides values from a server over a network connection. The method, for each of multiple values (i) creates a file including the value on a random access memory filing system (RAMFS), (ii) receives a request to receive the value, and (iii) sends the file via a sendfile system call.

公开(公告)号：US20230216804A1

公开(公告)日：2023-07-06

申请号：US18088555

申请日：2022-12-24

Applicant: VMware, Inc.

Inventor： Eyal Zohar ,  Alex Markuze ,  Igor Golikov ,  Israel Cidon

IPC: H04L47/34 ,  H04L45/121 ,  H04L45/42 ,  H04L45/00

CPC classification number: H04L47/34 ,  H04L45/121 ,  H04L45/42 ,  H04L45/566

Abstract: The method, in some embodiments, aggregates duplicate transmission control protocol (TCP) packets of a data stream duplicated and sent over disjoint routing paths. Each duplicate pair of packets includes a packet sequence number unique to that duplicate pair. The method iteratively (1) generates a window of packet sequence numbers for the data stream starting with a lowest packet sequence number, of the data stream, that has not been received, (2) receives a TCP packet sent over one of a first routing path and a second, disjoint routing path. If the packet sequence number of the received TCP packet is outside the window or is a duplicate of a previously received TCP packet, the method drops the received TCP packet. If the packet sequence number of the received TCP packet is within the window and is not a duplicate of a previously received TCP packet, the method stores the received packet.

公开(公告)号：US20230179521A1

公开(公告)日：2023-06-08

申请号：US18102689

申请日：2023-01-28

Applicant: VMware, Inc.

Inventor： Alex Markuze ,  Chen Dar ,  Aran Bergman ,  Igor Golikov ,  Israel Cidon ,  Eyal Zohar

IPC: H04L45/74 ,  H04L45/00 ,  H04L45/42

CPC classification number: H04L45/74 ,  H04L45/20 ,  H04L45/38 ,  H04L45/42

Abstract: In a novel tunnel-less SD-WAN, when an ingress node of the SD-WAN receives a new packet flow, it identifies the path of the flow through the SD-WAN, and sends an initial prepended set of SD-WAN header values before the first packet for the flow to the next hop along this identified path, rather than encapsulating each packet of the flow with encapsulating tunnel headers that store SD-WAN next hop data for the flow. The prepended set of SD-WAN header values are then used to not only forward the first packet through the SD-WAN, but also to create records at each subsequent hop, which are then used to forward subsequent packets of the flow through the SD-WAN. Instead of identifying the entire packet flow, the first hop in the SD-WAN does not identify the entire path for the packet flow in some embodiments, but just identifies the next hop, as each subsequent hop in the SD-WAN has the task of identifying the next hop through the SD-WAN for the packet flow. Also, in some embodiments, each hop also creates records for the reverse flow in order to automatically forward reply packets along a reverse route.