Method and apparatus for implementing and managing virtual switches

    公开(公告)号:US10931600B2

    公开(公告)日:2021-02-23

    申请号:US15441205

    申请日:2017-02-23

    申请人: Nicira, Inc.

    摘要: In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state. According to still further aspects, the virtual platform of the invention manages and/or uses VLAN or tunnels (e.g., GRE) to create a distributed virtual switch for a network while working with existing switches and routers in the network. The present invention finds utility in both enterprise networks, datacenters and other facilities.

    Determining the realization status of logical entities in logical networks

    公开(公告)号:US10241820B2

    公开(公告)日:2019-03-26

    申请号:US15069708

    申请日:2016-03-14

    申请人: Nicira, Inc.

    IPC分类号: G06F9/455 H04L12/24

    摘要: Some embodiments provide a method for identifying a realization status of one or more logical entities of a logical network. In some embodiments the method is implemented by a controller that controls network data communications in a logical network. The method receives a request for realization status of a set of logical entities at a particular point of time that is associated with a particular value of a realization number. The method determines whether configuration data up to the particular point of time for each logical entity in the set has been processed and distributed to a set of local controllers that operates on a set of host machines. The method returns a realization reply that includes a successful realization message when the configuration data up to the particular point in time for each logical entity in the set has been processed and distributed to the set of local controllers.

    NETWORK OPERATING SYSTEM FOR MANAGING AND SECURING NETWORKS

    公开(公告)号:US20180102937A1

    公开(公告)日:2018-04-12

    申请号:US15838317

    申请日:2017-12-11

    申请人: Nicira, Inc.

    IPC分类号: H04L12/24 H04L12/26

    摘要: Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.

    Method and apparatus for implementing and managing virtual switches
    6.
    发明授权
    Method and apparatus for implementing and managing virtual switches 有权
    实现和管理虚拟交换机的方法和设备

    公开(公告)号:US09590919B2

    公开(公告)日:2017-03-07

    申请号:US14594043

    申请日:2015-01-09

    申请人: Nicira, Inc.

    摘要: In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state. According to still further aspects, the virtual platform of the invention manages and/or uses VLAN or tunnels (e.g, GRE) to create a distributed virtual switch for a network while working with existing switches and routers in the network. The present invention finds utility in both enterprise networks, datacenters and other facilities.

    摘要翻译: 通常,本发明涉及一种虚拟平台,其中可以创建一个或多个分布式虚拟交换机用于虚拟网络中。 根据一些方面,根据本发明的分布式虚拟交换机提供虚拟和物理机器更容易,安全并且有效地彼此通信的能力,即使它们不位于相同的物理主机上和/或相同 子网或VLAN。 根据其他方面,本发明的分布式虚拟交换机可以支持与传统IP网络的集成,并支持复杂的IP技术,包括NAT功能,状态防火墙,以及通知IP网络的工作负载迁移。 根据另外的方面,本发明的虚拟平台创建一个或多个分配的虚拟交换机,其可以被分配给需要隔离和/或独立配置状态的租户,应用或其他实体。 根据另外的方面,本发明的虚拟平台管理和/或使用VLAN或隧道(例如,GRE)来在网络中与现有交换机和路由器协同工作时为网络创建分布式虚拟交换机。 本发明可用于企业网络,数据中心和其他设施。

    METHOD AND APPARATUS FOR IMPLEMENTING AND MANAGING VIRTUAL SWITCHES

    公开(公告)号:US20210258269A1

    公开(公告)日:2021-08-19

    申请号:US17178239

    申请日:2021-02-17

    申请人: Nicira, Inc.

    摘要: In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state. According to still further aspects, the virtual platform of the invention manages and/or uses VLAN or tunnels (e.g, GRE) to create a distributed virtual switch for a network while working with existing switches and routers in the network. The present invention finds utility in both enterprise networks, datacenters and other facilities.

    NETWORK OPERATING SYSTEM FOR MANAGING AND SECURING NETWORKS

    公开(公告)号:US20210021455A1

    公开(公告)日:2021-01-21

    申请号:US16945913

    申请日:2020-08-02

    申请人: Nicira, Inc.

    IPC分类号: H04L12/24 H04L12/26

    摘要: Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.

    IDENTIFYING THE REALIZATION STATUS OF LOGICAL ENTITIES BASED ON A GLOBAL REALIZATION NUMBER

    公开(公告)号:US20190215238A1

    公开(公告)日:2019-07-11

    申请号:US16353788

    申请日:2019-03-14

    申请人: Nicira, Inc.

    IPC分类号: H04L12/24

    CPC分类号: H04L41/0803 H04L41/06

    摘要: Some embodiments provide a method for determining a realization status of one or more logical entities of a logical network. The method, each time a particular event occurs, increments the value of a realization number and publishes the incremented value to a set of controllers of the logical network. Upon receiving data that specifies the state of a logical entity of the logical network, the method publishes the logical entity state's data to the set of controllers. In some embodiments, the method queries the set of controllers for a realization status of the state data for a set of logical entities that is published to the set of controllers up to a particular point of time. The submitted query, in some embodiments, includes a particular value of the realization number associated with the particular point of time.

    DETERMINING THE REALIZATION STATUS OF LOGICAL ENTITIES IN LOGICAL NETWORKS

    公开(公告)号:US20170264483A1

    公开(公告)日:2017-09-14

    申请号:US15069708

    申请日:2016-03-14

    申请人: Nicira, Inc.

    IPC分类号: H04L12/24 G06F9/455

    摘要: Some embodiments provide a method for identifying a realization status of one or more logical entities of a logical network. In some embodiments the method is implemented by a controller that controls network data communications in a logical network. The method receives a request for realization status of a set of logical entities at a particular point of time that is associated with a particular value of a realization number. The method determines whether configuration data up to the particular point of time for each logical entity in the set has been processed and distributed to a set of local controllers that operates on a set of host machines. The method returns a realization reply that includes a successful realization message when the configuration data up to the particular point in time for each logical entity in the set has been processed and distributed to the set of local controllers.