Network operating system for managing and securing networks
    1.
    发明申请
    Network operating system for managing and securing networks 有权
    用于管理和保护网络的网络操作系统

    公开(公告)号:US20090138577A1

    公开(公告)日:2009-05-28

    申请号:US12286098

    申请日:2008-09-26

    IPC分类号: G06F15/177 G06F15/173

    摘要: Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.

    摘要翻译: 描述用于管理网络的系统和方法。 维持网络当前状态的视图,其中网络的当前状态表征网络拓扑和网络成分,包括驻留在网络中或网络上的网络实体和网络元素。 公布对应于网络状态的变化的事件,并且可以相应地配置一个或多个网络元件。 描述了用于管理网络流量的方法,其确保网元采取的转发和其他动作实现全球声明的网络策略,并且独立于网络拓扑和网络组成部分的位置来参考高级别名称。 描述了用于发现网络组件的方法,由此被自动配置。 可以使用ACL执行路由,并且可以拦截数据包以允许主机在睡眠模式下继续。 这些方法适用于虚拟环境。

    METHOD AND APPARATUS FOR IMPLEMENTING AND MANAGING VIRTUAL SWITCHES
    3.
    发明申请
    METHOD AND APPARATUS FOR IMPLEMENTING AND MANAGING VIRTUAL SWITCHES 有权
    用于实施和管理虚拟开关的方法和装置

    公开(公告)号:US20100257263A1

    公开(公告)日:2010-10-07

    申请号:US12753044

    申请日:2010-04-01

    IPC分类号: G06F9/455 G06F15/173

    摘要: In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state. According to still further aspects, the virtual platform of the invention manages and/or uses VLAN or tunnels (e.g, GRE) to create a distributed virtual switch for a network while working with existing switches and routers in the network. The present invention finds utility in both enterprise networks, datacenters and other facilities.

    摘要翻译: 通常,本发明涉及一种虚拟平台,其中可以创建一个或多个分布式虚拟交换机用于虚拟网络中。 根据一些方面,根据本发明的分布式虚拟交换机提供虚拟和物理机器更容易,安全并且有效地彼此通信的能力,即使它们不位于相同的物理主机上和/或相同 子网或VLAN。 根据其他方面,本发明的分布式虚拟交换机可以支持与传统IP网络的集成,并支持复杂的IP技术,包括NAT功能,状态防火墙,以及通知IP网络的工作负载迁移。 根据另外的方面,本发明的虚拟平台创建一个或多个分配的虚拟交换机,其可以被分配给需要隔离和/或独立配置状态的租户,应用或其他实体。 根据另外的方面,本发明的虚拟平台管理和/或使用VLAN或隧道(例如,GRE)来在网络中与现有交换机和路由器协同工作时为网络创建分布式虚拟交换机。 本发明可用于企业网络,数据中心和其他设施。

    Method and apparatus for implementing and managing distributed virtual switches in several hosts and physical forwarding elements
    4.
    发明授权
    Method and apparatus for implementing and managing distributed virtual switches in several hosts and physical forwarding elements 有权
    用于在几个主机和物理转发元件中实现和管理分布式虚拟交换机的方法和装置

    公开(公告)号:US08966035B2

    公开(公告)日:2015-02-24

    申请号:US12753044

    申请日:2010-04-01

    摘要: In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state. According to still further aspects, the virtual platform of the invention manages and/or uses VLAN or tunnels (e.g, GRE) to create a distributed virtual switch for a network while working with existing switches and routers in the network. The present invention finds utility in both enterprise networks, datacenters and other facilities.

    摘要翻译: 通常,本发明涉及一种虚拟平台,其中可以创建一个或多个分布式虚拟交换机用于虚拟网络中。 根据一些方面,根据本发明的分布式虚拟交换机提供虚拟和物理机器更容易,安全并且有效地彼此通信的能力,即使它们不位于相同的物理主机上和/或相同 子网或VLAN。 根据其他方面,本发明的分布式虚拟交换机可以支持与传统IP网络的集成,并支持复杂的IP技术,包括NAT功能,状态防火墙,以及通知IP网络的工作负载迁移。 根据另外的方面,本发明的虚拟平台创建一个或多个分配的虚拟交换机,其可以被分配给需要隔离和/或独立配置状态的租户,应用或其他实体。 根据另外的方面,本发明的虚拟平台管理和/或使用VLAN或隧道(例如,GRE)来在网络中与现有交换机和路由器协同工作时为网络创建分布式虚拟交换机。 本发明可用于企业网络,数据中心和其他设施。