公开(公告)号：US10129099B2

公开(公告)日：2018-11-13

申请号：US15238241

申请日：2016-08-16

Applicant: International Business Machines Corporation

Inventor： Jin Jing Lin ,  Gang Tang ,  Jian Hua Xia ,  Ming Shuang Xian

IPC: H04L12/28 ,  H04L12/24 ,  H04L12/715 ,  H04L29/08

Abstract: An approach is provided in which an information handling system matches packet properties of an egress data packet to a classification rule corresponding to differentiated services (DiffServ) parameters. The information handling system encapsulates the egress data packet with a network virtualization overlay header that includes a DiffServ classification identifier corresponding to the DiffServ classification rule. In turn, the information handling system sends the encapsulated egress data packet to a downstream network component.

公开(公告)号：US09860214B2

公开(公告)日：2018-01-02

申请号：US14850460

申请日：2015-09-10

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Guo Chun Bian ,  Jin Jing Lin ,  Liang Rong ,  Gang Tang ,  Ming Shuang Xian

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L63/0272 ,  H04L63/20 ,  H04L67/141

Abstract: A method includes obtaining, by one or more processor, data from a virtual network of a tenant and an identifier of the tenant, where the virtual network of the tenant is one of at least two virtual networks in a shared computing environment where the at least two virtual networks overlay a physical network. Based on obtaining the identifier of the tenant, the method includes setting, by one or more processor, the identifier in metadata of the data and based on the identifier in the metadata, identifying, by the one or more processor, a network connection associated with the tenant. The method also includes identifying, by the one or more processor, a policy of the network connection and processing the data with the policy to create processed data and transmitting, by the one or more processor, the processed data through the network connection.

公开(公告)号：US20180352058A1

公开(公告)日：2018-12-06

申请号：US16042273

申请日：2018-07-23

Applicant: International Business Machines Corporation

Inventor： Jin Jing Lin ,  Gang Tang ,  Jian Hua Xia ,  Ming Shuang Xian

IPC: H04L29/08 ,  H04L12/715

CPC classification number: H04L41/5003 ,  H04L45/64 ,  H04L47/2408 ,  H04L49/70 ,  H04L69/325 ,  Y02D30/30

Abstract: An approach is provided in which an information handling system receives, at a network virtualization edge (NVE), a set of Diffserv parameters comprising at least one classifier parameter, at least one meter parameter, at least one marker parameter, and at least one shaper/dropper parameter. The NVE performs a deep inspection on a plurality of data packets to classify the plurality of data packets at one or more classification levels. In turn, the NVE passes the set of Diffserv parameters and the one or more classification levels to underlay switch hardware.

公开(公告)号：US10348689B2

公开(公告)日：2019-07-09

申请号：US15823099

申请日：2017-11-27

Applicant: International Business Machines Corporation

Inventor： Guo Chun Bian ,  Jin Jing Lin ,  Liang Rong ,  Gang Tang ,  Ming Shuang Xian

IPC: H04L29/06 ,  H04L29/08

Abstract: A method includes obtaining, by one or more processor, data from a virtual network of a tenant and an identifier of the tenant, where the virtual network of the tenant is one of at least two virtual networks in a shared computing environment where the at least two virtual networks overlay a physical network. Based on obtaining the identifier of the tenant, the method includes setting, by one or more processor, the identifier in metadata of the data and based on the identifier in the metadata, identifying, by the one or more processor, a network connection associated with the tenant. The method also includes identifying, by the one or more processor, a policy of the network connection and processing the data with the policy to create processed data and transmitting, by the one or more processor, the processed data through the network connection.

公开(公告)号：US20180083923A1

公开(公告)日：2018-03-22

申请号：US15823099

申请日：2017-11-27

Applicant: International Business Machines Corporation

Inventor： Guo Chun Bian ,  Jin Jing Lin ,  Liang Rong ,  Gang Tang ,  Ming Shuang Xian

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L63/0272 ,  H04L63/20 ,  H04L67/141

Abstract: A method includes obtaining, by one or more processor, data from a virtual network of a tenant and an identifier of the tenant, where the virtual network of the tenant is one of at least two virtual networks in a shared computing environment where the at least two virtual networks overlay a physical network. Based on obtaining the identifier of the tenant, the method includes setting, by one or more processor, the identifier in metadata of the data and based on the identifier in the metadata, identifying, by the one or more processor, a network connection associated with the tenant. The method also includes identifying, by the one or more processor, a policy of the network connection and processing the data with the policy to create processed data and transmitting, by the one or more processor, the processed data through the network connection.

公开(公告)号：US20180054365A1

公开(公告)日：2018-02-22

申请号：US15238241

申请日：2016-08-16

Applicant: International Business Machines Corporation

Inventor： Jin Jing Lin ,  Gang Tang ,  Jian Hua Xia ,  Ming Shuang Xian

IPC: H04L12/24 ,  H04L12/715 ,  H04L29/08

CPC classification number: H04L69/325 ,  H04L47/2408 ,  H04L49/70

Abstract: An approach is provided in which an information handling system matches packet properties of an egress data packet to a classification rule corresponding to differentiated services (DiffServ) parameters. The information handling system encapsulates the egress data packet with a network virtualization overlay header that includes a DiffServ classification identifier corresponding to the DiffServ classification rule. In turn, the information handling system sends the encapsulated egress data packet to a downstream network component.

公开(公告)号：US20170078248A1

公开(公告)日：2017-03-16

申请号：US14850460

申请日：2015-09-10

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Guo Chun Bian ,  Jin Jing Lin ,  Liang Rong ,  Gang Tang ,  Ming Shuang Xian

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L63/0272 ,  H04L63/20 ,  H04L67/141

Abstract: A method includes obtaining, by one or more processor, data from a virtual network of a tenant and an identifier of the tenant, where the virtual network of the tenant is one of at least two virtual networks in a shared computing environment where the at least two virtual networks overlay a physical network. Based on obtaining the identifier of the tenant, the method includes setting, by one or more processor, the identifier in metadata of the data and based on the identifier in the metadata, identifying, by the one or more processor, a network connection associated with the tenant. The method also includes identifying, by the one or more processor, a policy of the network connection and processing the data with the policy to create processed data and transmitting, by the one or more processor, the processed data through the network connection.

Abstract translation: 一种方法包括由一个或多个处理器获得来自租户的虚拟网络的数据和租户的标识符，其中租户的虚拟网络是共享计算环境中的至少两个虚拟网络之一，其中至少 两个虚拟网络覆盖物理网络。 基于获得租户的标识符，该方法包括由一个或多个处理器将数据的元数据中的标识符设置为基于元数据中的标识符，由一个或多个处理器识别与 租客。 所述方法还包括由所述一个或多个处理器识别所述网络连接的策略，以及用所述策略处理所述数据以创建经处理的数据，以及由所述一个或多个处理器通过所述网络连接发送所处理的数据。