公开(公告)号：US20240015086A1

公开(公告)日：2024-01-11

申请号：US18370006

申请日：2023-09-19

Applicant: Nicira, Inc.

Inventor： Sami Boutros ,  Stephen Tan ,  Rahul Mishra ,  Kantesh Mundaragi ,  Jayant Jain ,  Akhila Naveen

IPC: H04L43/0805 ,  H04L41/0668 ,  H04L43/10

CPC classification number: H04L43/0805 ,  H04L41/0668 ,  H04L43/10

Abstract: Some embodiments provide a method for detecting a failure of a layer 2 (L2) bump-in-the-wire service at a device. In some embodiments, the device sends heartbeat signals to a second device connected to L2 service nodes in order to detect failure of the L2 service (e.g., a failure of all the service nodes). In some embodiments, the heartbeat signals are unidirectional heartbeat signals (e.g., a unidirectional bidirectional-forwarding-detection (BFD) session) sent from each device to the other. The heartbeat signals, in some embodiments, use a broadcast MAC address in order to reach the current active L2 service node in the case of a failover (i.e., an active service node failing and a standby service node becoming the new active service node). The unidirectional heartbeat signals are also used, in some embodiments, to decrease the time between a failover and data messages being forwarded to the new active service node.

公开(公告)号：US10897392B2

公开(公告)日：2021-01-19

申请号：US16005628

申请日：2018-06-11

Applicant: Nicira, Inc.

Inventor： Rahul Mishra ,  Chidambareswaran Raman ,  Raju Koganty ,  Fenil Kavathia

IPC: H04L12/24

Abstract: Some embodiments provide a novel method for configuring a service data compute node (DCN) executing on a host computer to perform network services (e.g., firewall, load balancing, intrusion detection, network address translation (NAT), other middlebox services, etc.) for several DCNs executing on the host computer. The method receives, at the service DCN, an identification of a set of container specifications that will be implemented (e.g., will be executed by) the service DCN. The method then retrieves the identified set of container specifications (e.g., container images) from a container repository storing multiple received container specifications. In some embodiments, the container specifications include container images generated by a third party service partner for providing a particular service or set of services and stored in a container repository. The method then instantiates the retrieved containers to provide the identified network services to data messages received at the service DCN.

公开(公告)号：US11805036B2

公开(公告)日：2023-10-31

申请号：US17346255

申请日：2021-06-13

Applicant: Nicira, Inc.

Inventor： Sami Boutros ,  Stephen Tan ,  Rahul Mishra ,  Kantesh Mundaragi ,  Jayant Jain ,  Akhila Naveen

IPC: H04L12/24 ,  H04L12/26 ,  H04L43/0805 ,  H04L41/0668 ,  H04L43/10

CPC classification number: H04L43/0805 ,  H04L41/0668 ,  H04L43/10

Abstract: Some embodiments provide a method for detecting a failure of a layer 2 (L2) bump-in-the-wire service at a device. In some embodiments, the device sends heartbeat signals to a second device connected to L2 service nodes in order to detect failure of the L2 service (e.g., a failure of all the service nodes). In some embodiments, the heartbeat signals are unidirectional heartbeat signals (e.g., a unidirectional bidirectional-forwarding-detection (BFD) session) sent from each device to the other. The heartbeat signals, in some embodiments, use a broadcast MAC address in order to reach the current active L2 service node in the case of a failover (i.e., an active service node failing and a standby service node becoming the new active service node). The unidirectional heartbeat signals are also used, in some embodiments, to decrease the time between a failover and data messages being forwarded to the new active service node.

公开(公告)号：US20190306036A1

公开(公告)日：2019-10-03

申请号：US15937621

申请日：2018-03-27

Applicant: Nicira, Inc.

Inventor： Sami Boutros ,  Stephen Tan ,  Rahul Mishra ,  Kantesh Mundaragi ,  Jayant Jain ,  Akhila Naveen

IPC: H04L12/26 ,  H04L12/24

Abstract: Some embodiments provide a method for detecting a failure of a layer 2 (L2) bump-in-the-wire service at a device. In some embodiments, the device sends heartbeat signals to a second device connected to L2 service nodes in order to detect failure of the L2 service (e.g., a failure of all the service nodes). In some embodiments, the heartbeat signals are unidirectional heartbeat signals (e.g., a unidirectional bidirectional-forwarding-detection (BFD) session) sent from each device to the other. The heartbeat signals, in some embodiments, use a broadcast MAC address in order to reach the current active L2 service node in the case of a failover (i.e., an active service node failing and a standby service node becoming the new active service node). The unidirectional heartbeat signals are also used, in some embodiments, to decrease the time between a failover and data messages being forwarded to the new active service node.

公开(公告)号：US11750446B2

公开(公告)日：2023-09-05

申请号：US17700074

申请日：2022-03-21

Applicant: Nicira, Inc.

Inventor： Rahul Mishra ,  Chidambareswaran Raman ,  Raju Koganty ,  Fenil Kavathia

IPC: H04L12/24 ,  H04L29/08 ,  H04L41/0803 ,  H04L67/51

CPC classification number: H04L41/0803 ,  H04L67/51

Abstract: Some embodiments provide a method for efficient data message transfer across a hypervisor, service DCN, and containers implementing partner network services. The method allocates memory to a service DCN that operates a set of containers for providing partner network services for data messages received by the service DCN. The service DCN and the containers share the allocated memory and the method stores data messages received by the service DCN in the allocated memory. The method then accesses the data message stored in the shared memory from a set of partner network service containers to perform the partner network services. In some embodiments, the host machine or a process of the host machine on which the service DCN executes also shares the allocated memory. The host machine process, in some embodiments is a kernel process.

公开(公告)号：US11038782B2

公开(公告)日：2021-06-15

申请号：US16945868

申请日：2020-08-01

Applicant: Nicira, Inc.

Inventor： Sami Boutros ,  Stephen Tan ,  Rahul Mishra ,  Kantesh Mundaragi ,  Jayant Jain ,  Akhila Naveen

IPC: H04L12/26 ,  H04L12/24

Abstract: Some embodiments provide a method for detecting a failure of a layer 2 (L2) bump-in-the-wire service at a device. In some embodiments, the device sends heartbeat signals to a second device connected to L2 service nodes in order to detect failure of the L2 service (e.g., a failure of all the service nodes). In some embodiments, the heartbeat signals are unidirectional heartbeat signals (e.g., a unidirectional bidirectional-forwarding-detection (BFD) session) sent from each device to the other. The heartbeat signals, in some embodiments, use a broadcast MAC address in order to reach the current active L2 service node in the case of a failover (i.e., an active service node failing and a standby service node becoming the new active service node). The unidirectional heartbeat signals are also used, in some embodiments, to decrease the time between a failover and data messages being forwarded to the new active service node.

公开(公告)号：US10805192B2

公开(公告)日：2020-10-13

申请号：US15937621

申请日：2018-03-27

Applicant: Nicira, Inc.

Inventor： Sami Boutros ,  Stephen Tan ,  Rahul Mishra ,  Kantesh Mundaragi ,  Jayant Jain ,  Akhila Naveen

IPC: H04L12/26 ,  H04L12/24

Abstract: Some embodiments provide a method for detecting a failure of a layer 2 (L2) bump-in-the-wire service at a device. In some embodiments, the device sends heartbeat signals to a second device connected to L2 service nodes in order to detect failure of the L2 service (e.g., a failure of all the service nodes). In some embodiments, the heartbeat signals are unidirectional heartbeat signals (e.g., a unidirectional bidirectional-forwarding-detection (BFD) session) sent from each device to the other. The heartbeat signals, in some embodiments, use a broadcast MAC address in order to reach the current active L2 service node in the case of a failover (i.e., an active service node failing and a standby service node becoming the new active service node). The unidirectional heartbeat signals are also used, in some embodiments, to decrease the time between a failover and data messages being forwarded to the new active service node.

公开(公告)号：US20220217039A1

公开(公告)日：2022-07-07

申请号：US17700074

申请日：2022-03-21

Applicant: Nicira, Inc.

Inventor： Rahul Mishra ,  Chidambareswaran Raman ,  Raju Koganty ,  Fenil Kavathia

IPC: H04L41/0803 ,  H04L67/51

Abstract: Some embodiments provide a method for efficient data message transfer across a hypervisor, service DCN, and containers implementing partner network services. The method allocates memory to a service DCN that operates a set of containers for providing partner network services for data messages received by the service DCN. The service DCN and the containers share the allocated memory and the method stores data messages received by the service DCN in the allocated memory. The method then accesses the data message stored in the shared memory from a set of partner network service containers to perform the partner network services. In some embodiments, the host machine or a process of the host machine on which the service DCN executes also shares the allocated memory. The host machine process, in some embodiments is a kernel process.

公开(公告)号：US11283676B2

公开(公告)日：2022-03-22

申请号：US16005636

申请日：2018-06-11

Applicant: Nicira, Inc.

Inventor： Rahul Mishra ,  Chidambareswaran Raman ,  Raju Koganty ,  Fenil Kavathia

IPC: H04L12/24 ,  H04L29/08 ,  H04L41/0803 ,  H04L67/51

Abstract: Some embodiments provide a method for efficient data message transfer across a hypervisor, service DCN, and containers implementing partner network services. The method allocates memory to a service DCN that operates a set of containers for providing partner network services for data messages received by the service DCN. The service DCN and the containers share the allocated memory and the method stores data messages received by the service DCN in the allocated memory. The method then accesses the data message stored in the shared memory from a set of partner network service containers to perform the partner network services. In some embodiments, the host machine or a process of the host machine on which the service DCN executes also shares the allocated memory. The host machine process, in some embodiments is a kernel process.

公开(公告)号：US20210306240A1

公开(公告)日：2021-09-30

申请号：US17346255

申请日：2021-06-13

Applicant: Nicira, Inc.

Inventor： Sami Boutros ,  Stephen Tan ,  Rahul Mishra ,  Kantesh Mundaragi ,  Jayant Jain ,  Akhila Naveen

IPC: H04L12/26 ,  H04L12/24

Abstract: Some embodiments provide a method for detecting a failure of a layer 2 (L2) bump-in-the-wire service at a device. In some embodiments, the device sends heartbeat signals to a second device connected to L2 service nodes in order to detect failure of the L2 service (e.g., a failure of all the service nodes). In some embodiments, the heartbeat signals are unidirectional heartbeat signals (e.g., a unidirectional bidirectional-forwarding-detection (BFD) session) sent from each device to the other. The heartbeat signals, in some embodiments, use a broadcast MAC address in order to reach the current active L2 service node in the case of a failover (i.e., an active service node failing and a standby service node becoming the new active service node). The unidirectional heartbeat signals are also used, in some embodiments, to decrease the time between a failover and data messages being forwarded to the new active service node.