-
公开(公告)号:US11929943B2
公开(公告)日:2024-03-12
申请号:US17403805
申请日:2021-08-16
申请人: Nicira, Inc.
发明人: Ronghua Zhang , Yong Wang , Teemu Koponen , Jia Yu , Xinhua Hong
IPC分类号: H04L49/25 , H04L12/46 , H04L12/66 , H04L41/0654 , H04L41/14 , H04L41/5041 , H04L43/08 , H04L43/106 , H04L45/00 , H04L45/02 , H04L45/122 , H04L45/302 , H04L45/42 , H04L45/44 , H04L45/586 , H04L45/64 , H04L45/74 , H04L45/745 , H04L47/19 , H04L49/00 , H04L49/354 , H04L49/90 , H04L61/2585 , H04L67/1001 , H04L67/1038 , H04L67/568 , H04L67/63 , H04L69/321 , H04L69/326 , H04L69/329 , H04L41/50 , H04L45/28 , H04L61/103 , H04L61/2503 , H04L67/1095 , H04L101/663
CPC分类号: H04L49/25 , H04L12/4633 , H04L12/4654 , H04L12/66 , H04L41/0654 , H04L41/145 , H04L41/5041 , H04L43/08 , H04L43/106 , H04L45/02 , H04L45/122 , H04L45/306 , H04L45/42 , H04L45/44 , H04L45/586 , H04L45/64 , H04L45/72 , H04L45/74 , H04L45/742 , H04L45/745 , H04L47/19 , H04L49/3009 , H04L49/3063 , H04L49/354 , H04L49/9068 , H04L61/2585 , H04L67/1001 , H04L67/1038 , H04L67/568 , H04L67/63 , H04L69/321 , H04L69/326 , H04L69/329 , H04L2012/4629 , H04L41/5077 , H04L45/22 , H04L45/28 , H04L45/38 , H04L61/103 , H04L61/2503 , H04L67/1095 , H04L2101/663
摘要: A novel design of a gateway that handles traffic in and out of a network by using a datapath daemon is provided. The datapath daemon is a run-to-completion process that performs various data-plane packet-processing operations at the edge of the network. The datapath daemon dispatches packets to other processes or processing threads outside of the daemon by utilizing a user space network stack.
-
公开(公告)号:US11706159B2
公开(公告)日:2023-07-18
申请号:US17732469
申请日:2022-04-28
申请人: Nicira, Inc.
发明人: Ronghua Zhang , Yong Wang , Teemu Koponen , Xinhua Hong
IPC分类号: H04L49/25 , H04L12/66 , H04L45/64 , H04L69/321 , H04L12/46 , H04L41/5041 , H04L45/74 , H04L67/63 , H04L67/568 , H04L67/1001 , H04L45/00 , H04L49/00 , H04L49/90 , H04L45/586 , H04L45/02 , H04L45/42 , H04L45/44 , H04L41/0654 , H04L45/122 , H04L45/745 , H04L61/2585 , H04L41/14 , H04L69/326 , H04L69/329 , H04L47/19 , H04L45/302 , H04L43/08 , H04L43/106 , H04L49/354 , H04L67/1038 , H04L61/103 , H04L61/2503 , H04L41/50 , H04L45/28 , H04L101/663 , H04L67/1095
CPC分类号: H04L49/25 , H04L12/4633 , H04L12/4654 , H04L12/66 , H04L41/0654 , H04L41/145 , H04L41/5041 , H04L43/08 , H04L43/106 , H04L45/02 , H04L45/122 , H04L45/306 , H04L45/42 , H04L45/44 , H04L45/586 , H04L45/64 , H04L45/72 , H04L45/74 , H04L45/742 , H04L45/745 , H04L47/19 , H04L49/3009 , H04L49/3063 , H04L49/354 , H04L49/9068 , H04L61/2585 , H04L67/1001 , H04L67/1038 , H04L67/568 , H04L67/63 , H04L69/321 , H04L69/326 , H04L69/329 , H04L41/5077 , H04L45/22 , H04L45/28 , H04L45/38 , H04L61/103 , H04L61/2503 , H04L67/1095 , H04L2012/4629 , H04L2101/663
摘要: A novel design of a gateway that handles traffic in and out of a network by using a datapath pipeline is provided. The datapath pipeline includes multiple stages for performing various data-plane packet-processing operations at the edge of the network. The processing stages include centralized routing stages and distributed routing stages. The processing stages can include service-providing stages such as NAT and firewall. The gateway caches the result previous packet operations and reapplies the result to subsequent packets that meet certain criteria. For packets that do not have applicable or valid result from previous packet processing operations, the gateway datapath daemon executes the pipelined packet processing stages and records a set of data from each stage of the pipeline and synthesizes those data into a cache entry for subsequent packets.
-
公开(公告)号:US20230216940A1
公开(公告)日:2023-07-06
申请号:US18114597
申请日:2023-02-27
申请人: Nicira, Inc.
IPC分类号: H04L69/22 , H04L49/00 , H04L45/00 , H04L45/745 , H04L45/48
CPC分类号: H04L69/22 , H04L49/3009 , H04L45/72 , H04L45/745 , H04L45/48 , H04L47/2441
摘要: A novel algorithm for packet classification that is based on a novel search structure for packet classification rules is provided. Addresses from all the containers are merged and maintained in a single Trie. Each entry in the Trie has additional information that can be traced back to the container from where the address originated. This information is used to keep the Trie in sync with the containers when the container definition dynamically changes.
-
公开(公告)号:US11201762B2
公开(公告)日:2021-12-14
申请号:US16786897
申请日:2020-02-10
申请人: Nicira, Inc.
发明人: Jia Yu , Yong Wang , Xinhua Hong
IPC分类号: G06F15/16 , H04L12/46 , H04L12/66 , H04L12/24 , H04L12/751 , H04L12/733 , H04L12/725 , H04L12/717 , H04L12/721 , H04L12/713 , H04L12/715 , H04L12/741 , H04L12/801 , H04L12/947 , H04L12/935 , H04L12/931 , H04L12/861 , H04L29/12 , H04L29/08 , H04L12/26 , H04L29/06 , H04L12/707
摘要: A method of utilizing the same hardware network interface card (NIC) in a gateway of a datacenter to communicate datacenter tenant packet traffic and packet traffic for a set of applications that execute in the user space of the gateway and utilize a network stack in the kernel space of the gateway. The method sends and receives packets for the datacenter tenant packet traffic through a packet datapath in the user space. The method sends incoming packets from the NIC to the set of applications through the datapath in the user space, a user-kernel transport driver connecting the kernel network stack to the datapath in the user space, and the kernel network stack. The method receives outgoing packets at the NIC from the set of applications through the kernel network stack, the user-kernel transport driver, and the data path in the user space.
-
公开(公告)号:US10609091B2
公开(公告)日:2020-03-31
申请号:US14813659
申请日:2015-07-30
申请人: Nicira, Inc.
发明人: Xinhua Hong , Jayant Jain , Anirban Sengupta
摘要: Some embodiments provide a novel content switching method that distributes requests for different types of content to different sets of content servers. In some embodiments, the method deploys a content switch in the ingress data path of a first content server that is part of a first set of servers that processes requests for a first type of content. This content switch receives each content request that is directed to the first content server, and determines whether the received request is for the first content type that is processed by the first content server. If so, the content switch directs the request to the first content server. On the other hand, if the request is for a second type of content that is processed by a second set of servers, the content switch identifies a second content server in the second set and forwards the request to the second content server. When the second set of servers includes two or more servers, the content switch in some embodiments performs a load balancing operation to distribute the load amongst the servers in the second set. For each request, the load balancing operation in some embodiments selects one server from the second server set based on a set of load balancing criteria that specifies one manner for distributing the requests among the servers of the second set, and then forwards the request to the selected server.
-
公开(公告)号:US10454825B2
公开(公告)日:2019-10-22
申请号:US15807042
申请日:2017-11-08
申请人: Nicira, Inc.
发明人: Xinhua Hong , David Leroy , Yong Wang , Jia Yu
IPC分类号: H04L12/743 , H04L12/741
摘要: The technology disclosed herein enables network traffic routing using a hybrid routing table. In a particular embodiment, a method provides adding a first portion of a network prefix to one or more tiers of one or more tries in the hybrid routing table. Upon reaching a lowest node of the one or more tries when adding the first portion of the network prefix, the method provides adding key information to the lowest node. The key information and at least a second portion of the network prefix comprise a key to locate a value in a hash table of the hybrid routing table. The value indicates routing information for the network prefix. Additionally, the method provides routing packets using the hybrid routing table.
-
公开(公告)号:US20190306085A1
公开(公告)日:2019-10-03
申请号:US16447793
申请日:2019-06-20
申请人: Nicira, Inc.
发明人: Ronghua Zhang , Yong Wang , Teemu Koponen , Xinhua Hong
IPC分类号: H04L12/947 , H04L12/741 , H04L12/747 , H04L12/715 , H04L12/713 , H04L12/721 , H04L12/717 , H04L12/725 , H04L12/733 , H04L12/751 , H04L12/26 , H04L12/24 , H04L12/66 , H04L12/46 , H04L12/801 , H04L12/935 , H04L12/931 , H04L12/861 , H04L29/12 , H04L29/08
摘要: A novel design of a gateway that handles traffic in and out of a network by using a datapath pipeline is provided. The datapath pipeline includes multiple stages for performing various data-plane packet-processing operations at the edge of the network. The processing stages include centralized routing stages and distributed routing stages. The processing stages can include service-providing stages such as NAT and firewall. The gateway caches the result previous packet operations and reapplies the result to subsequent packets that meet certain criteria. For packets that do not have applicable or valid result from previous packet processing operations, the gateway datapath daemon executes the pipelined packet processing stages and records a set of data from each stage of the pipeline and synthesizes those data into a cache entry for subsequent packets.
-
公开(公告)号:US20190020501A1
公开(公告)日:2019-01-17
申请号:US15650693
申请日:2017-07-14
申请人: Nicira, Inc.
发明人: Jia Yu , Yong Wang , Xinhua Hong
IPC分类号: H04L12/46 , H04L12/66 , H04L12/24 , H04L12/26 , H04L12/751 , H04L12/733 , H04L12/725 , H04L12/717 , H04L12/721 , H04L12/713 , H04L12/715 , H04L12/741 , H04L12/801 , H04L12/947 , H04L12/935 , H04L12/931 , H04L12/861 , H04L29/12 , H04L29/08
CPC分类号: H04L12/4654 , H04L12/66 , H04L41/0654 , H04L41/0806 , H04L41/145 , H04L43/08 , H04L43/0817 , H04L43/106 , H04L45/02 , H04L45/122 , H04L45/22 , H04L45/306 , H04L45/38 , H04L45/42 , H04L45/44 , H04L45/586 , H04L45/64 , H04L45/72 , H04L45/74 , H04L45/745 , H04L47/19 , H04L49/25 , H04L49/3009 , H04L49/3063 , H04L49/354 , H04L49/9068 , H04L61/103 , H04L61/2015 , H04L61/2503 , H04L61/2585 , H04L61/6022 , H04L61/6063 , H04L67/1002 , H04L67/1038 , H04L67/1095 , H04L67/2842 , H04L67/327 , H04L69/16 , H04L69/321 , H04L69/322 , H04L69/326 , H04L69/329
摘要: A method of utilizing the same hardware network interface card (NIC) in a gateway of a datacenter to communicate datacenter tenant packet traffic and packet traffic for a set of applications that execute in the user space of the gateway and utilize a network stack in the kernel space of the gateway. The method sends and receives packets for the datacenter tenant packet traffic through a packet datapath in the user space. The method sends incoming packets from the NIC to the set of applications through the datapath in the user space, a user-kernel transport driver connecting the kernel network stack to the datapath in the user space, and the kernel network stack. The method receives outgoing packets at the NIC from the set of applications through the kernel network stack, the user-kernel transport driver, and the data path in the user space.
-
公开(公告)号:US10110514B2
公开(公告)日:2018-10-23
申请号:US14929434
申请日:2015-11-02
申请人: Nicira, Inc.
发明人: Ronghua Zhang , Yong Wang , Teemu Koponen , Xinhua Hong
IPC分类号: H04L12/947 , H04L12/26 , H04L29/06 , H04L29/08 , H04L12/66 , H04L12/721 , H04L12/935 , H04L12/861 , H04L12/741 , H04L12/713 , H04L12/931 , H04L12/751 , H04L12/717 , H04L12/24 , H04L12/733 , H04L29/12 , H04L12/801 , H04L12/715 , H04L12/46 , H04L12/725 , H04L12/747 , H04L12/707 , H04L12/703
摘要: A novel design of a gateway that handles traffic in and out of a network by using a datapath pipeline is provided. The datapath pipeline includes multiple stages for performing various data-plane packet-processing operations at the edge of the network. The processing stages include centralized routing stages and distributed routing stages. The processing stages can include service-providing stages such as NAT and firewall. The gateway caches the result previous packet operations and reapplies the result to subsequent packets that meet certain criteria. For packets that do not have applicable or valid result from previous packet processing operations, the gateway datapath daemon executes the pipelined packet processing stages and records a set of data from each stage of the pipeline and synthesizes those data into a cache entry for subsequent packets.
-
公开(公告)号:US20180097778A1
公开(公告)日:2018-04-05
申请号:US15816708
申请日:2017-11-17
申请人: Nicira, Inc.
CPC分类号: H04L63/0254 , H04L43/028 , H04L63/0263 , H04L69/22 , H04L69/326
摘要: A novel method for stateful packet classification that uses hardware resources for performing stateless lookups and software resources for performing stateful connection flow handshaking is provided. To classify an incoming packet from a network, some embodiments perform stateless look up operations for the incoming packet in hardware and forward the result of the stateless look up to the software. The software in turn uses the result of the stateless look up to perform the stateful connection flow handshaking and to determine the result of the stateful packet classification.
-
-
-
-
-
-
-
-
-