-
公开(公告)号:US10924397B2
公开(公告)日:2021-02-16
申请号:US16283665
申请日:2019-02-22
Applicant: VMware, Inc.
Inventor: Rahul Mishra , Kantesh Mundaragi , Stephen Tan , Akhila Naveen , Pierluigi Rolando , Raju Koganty
IPC: H04L12/28 , H04L12/713 , H04L12/707 , H04L29/12
Abstract: In an embodiment, a method for a VRF and multi-service insertion on edge gateways is described. In an embodiment, the method comprises: detecting a packet; determining attributes for the packet; based on the attributes, determining whether the attributes match one or more rule attributes of a particular rule in a rule table; in response to determining that the attributes match the one or more rule attributes of a particular rule in the rule table: determining, based on the particular rule, a particular redirection identifier, a particular VRF identifier, a particular next_hop, a particular address pair, and a particular BFD status; based on the particular BFD status, determining whether to redirect the packet; and in response to determining to redirect the packet, redirecting the packet toward a service virtual machine from an interface indicated by one of addresses in the particular address pair.
-
公开(公告)号:US20200274945A1
公开(公告)日:2020-08-27
申请号:US16444956
申请日:2019-06-18
Applicant: VMware, Inc.
Inventor: Pierluigi Rolando , Kantesh Mundaragi , Rahul Mishra , Jayant Jain , Raju Koganty
IPC: H04L29/08
Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).
-
公开(公告)号:US20200274808A1
公开(公告)日:2020-08-27
申请号:US16445058
申请日:2019-06-18
Applicant: VMware, Inc.
Inventor: Kantesh Mundaragi , Rahul Mishra , Pierluigi Rolando , Jayant Jain , Raju Koganty
IPC: H04L12/803
Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).
-
公开(公告)号:US20200274791A1
公开(公告)日:2020-08-27
申请号:US16283656
申请日:2019-02-22
Applicant: VMware, Inc.
Inventor: Rahul Mishra , Kantesh Mundaragi , Stephen Tan , Akhila Naveen , Pierluigi Rolando , Raju Koganty
IPC: H04L12/707 , H04L12/24
Abstract: In an embodiment, a method for a VRF and multi-service insertion on edge gateways is described. In an embodiment, the method comprises obtaining a rule configuration. Based on, at least in part, the rule configuration, a rule table is created. The rule table comprises rule data records, wherein a rule data record comprises packet attributes and a redirection identifier. A policy configuration comprising policy records is obtained. Each policy record comprises a redirection identifier, a next_hop, and an address pair for interfaces. A mapping between VRF identifiers and address pairs is generated. Based on, at least in part, the mapping and the policy configuration, a policy table is generated. The policy table comprises table records, wherein a table record comprises a redirection identifier, a next_hop, and an address pair. The rule and policy tables are used to redirect a packet from an edge gateway to a service virtual machine.
-
公开(公告)号:US20200274778A1
公开(公告)日:2020-08-27
申请号:US16444907
申请日:2019-06-18
Applicant: VMware, Inc.
Inventor: Camille Lecuyer , Saahil Gokhale , Rajeev Nair , Kantesh Mundaragi , Rahul Mishra , Pierluigi Rolando , Jayant Jain , Raju Koganty
IPC: H04L12/24 , H04L12/725 , H04L29/08 , H04L12/741 , G06F9/455
Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).
-
公开(公告)号:US20200272496A1
公开(公告)日:2020-08-27
申请号:US16445004
申请日:2019-06-18
Applicant: VMware, Inc.
Inventor: Kantesh Mundaragi , Rahul Mishra , Pierluigi Rolando , Jayant Jain , Raju Koganty
IPC: G06F9/455 , H04L12/721 , H04L12/803 , H04L29/08
Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).
-
公开(公告)号:US11743172B2
公开(公告)日:2023-08-29
申请号:US16904390
申请日:2020-06-17
Applicant: VMware, Inc.
Inventor: Pierluigi Rolando , Jayant Jain , Raju Koganty , Kantesh Mundaragi , Yuxiao Zhang , Rahul Mishra , Akhila Naveen
IPC: H04L45/00 , H04L47/2441 , H04L67/142 , H04L45/586 , H04L12/46 , H04L45/745 , H04L47/2408 , H04L45/02 , H04L45/12 , H04L45/24 , H04L45/302 , H04L49/20 , H04L41/0893 , H04L49/00 , H04L9/40 , H04L67/1004 , H04L47/125 , H04L67/146 , H04L41/0654 , H04L45/30 , H04L45/741 , H04L67/51 , H04L67/63 , H04L67/563 , H04L47/70
CPC classification number: H04L45/20 , H04L12/4633 , H04L12/4662 , H04L41/0654 , H04L41/0893 , H04L45/02 , H04L45/04 , H04L45/12 , H04L45/24 , H04L45/30 , H04L45/306 , H04L45/586 , H04L45/741 , H04L45/745 , H04L47/125 , H04L47/2408 , H04L47/2441 , H04L49/20 , H04L49/70 , H04L63/0272 , H04L63/164 , H04L63/306 , H04L67/1004 , H04L67/142 , H04L67/146 , H04L67/51 , H04L67/563 , H04L67/63 , H04L47/825
Abstract: Some embodiments provide novel methods for providing different types of services for a logical network associated with an edge forwarding element acting between the logical network and an external network. The edge forwarding element receives data messages for forwarding and performs a service classification operation to select a set of services of a particular type for the data message. The particular type of service is one of multiple types of services that use different transport mechanisms to forward the data to a set of service nodes (e.g., service virtual machines, or service appliances, etc.) that provide the service. The edge forwarding element receives the data message after the selected set of services has been performed and performs a forwarding operation to forward the data message. In some embodiments, the method is also performed by edge forwarding elements that are at the edges of logical network segments within the logical network.
-
公开(公告)号:US11528219B2
公开(公告)日:2022-12-13
申请号:US16904437
申请日:2020-06-17
Applicant: VMware, Inc.
Inventor: Pierluigi Rolando , Jayant Jain , Raju Koganty , Yuxiao Zhang , Kantesh Mundaragi , Rahul Mishra
IPC: H04L45/00 , H04L67/142 , H04L45/586 , H04L45/745 , H04L67/146 , H04L47/2441 , H04L12/46 , H04L47/2408 , H04L45/02 , H04L45/12 , H04L45/24 , H04L45/302 , H04L49/20 , H04L41/0893 , H04L49/00 , H04L9/40 , H04L67/1004 , H04L47/125 , H04L41/0654 , H04L45/30 , H04L45/741 , H04L67/51 , H04L67/63 , H04L67/563 , H04L47/70
Abstract: Some embodiments configure an edge forwarding element to perform service insertion operations to identify stateful services to perform for data messages received for forwarding by the edge forwarding element at multiple virtual interfaces of the edge forwarding element. The service insertion operation, in some embodiments, includes applying a set of service insertion rules. The service insertion rules (1) specify a set of criteria and a corresponding action to take for data messages matching the criteria and (2) are associated with a set of interfaces to which the service insertion rules are applied. In some embodiments, the action is specified using a universally unique identifier (UUID) that is then used as a matching criteria for a subsequent policy lookup that identifies a type of service insertion and a set of next hop data.
-
49.
公开(公告)号:US11438257B2
公开(公告)日:2022-09-06
申请号:US16904446
申请日:2020-06-17
Applicant: VMware, Inc.
Inventor: Pierluigi Rolando , Jayant Jain , Raju Koganty , Yuxiao Zhang , Kantesh Mundaragi , Rahul Mishra
IPC: G01R31/08 , H04L45/00 , H04L47/2441 , H04L67/142 , H04L45/586 , H04L12/46 , H04L45/745 , H04L47/2408 , H04L67/51 , H04L45/02 , H04L45/12 , H04L45/24 , H04L45/302 , H04L49/20 , H04L41/0893 , H04L49/00 , H04L9/40 , H04L67/1004 , H04L47/125 , H04L67/146 , H04L67/563 , H04L67/63 , H04L41/0654 , H04L45/30 , H04L45/741 , H04L47/70
Abstract: Some embodiments provide stateful services in a chain of services identified for some data messages. The edge forwarding element receives a data message at a particular interface of the edge forwarding element that is traversing the edge forwarding element in a forward direction between two machines. The edge forwarding element identifies (1) a set of stateful services for the received data message and (2) a next hop associated with the identified set of stateful services in the forward direction and a next hop associated with the identified set of stateful services in the reverse direction. Based on the identified set of services and the next hops for the forward and reverse directions, the edge forwarding element generates and stores first and second connection tracking records for the forward and reverse data message flows, respectively used to forward data messages received subsequently for the flow.
-
公开(公告)号:US11354148B2
公开(公告)日:2022-06-07
申请号:US16444978
申请日:2019-06-18
Applicant: VMware, Inc.
Inventor: Pierluigi Rolando , Kantesh Mundaragi , Rahul Mishra , Jayant Jain , Raju Koganty
IPC: G06F15/16 , G06F9/455 , H04L45/00 , H04L47/125 , H04L69/324 , H04L69/325 , H04L69/321 , H04L12/46 , H04L47/17 , H04L49/25 , H04L101/622 , H04L41/5054 , G06F9/54 , H04L45/74 , H04L47/19 , H04L67/563 , H04L41/0803 , H04L41/5003 , H04L67/1001 , H04L67/10 , H04L45/586 , H04L67/60 , H04L45/302 , H04L45/745 , H04L67/101 , H04L41/0816 , H04L47/2425 , H04L67/51 , H04L67/56 , H04L49/00 , H04L61/2592 , H04L41/0806 , H04L41/0893
Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).
-
-
-
-
-
-
-
-
-