WORKLOAD IDENTIFICATION FOR IP ADDRESSES IN NETWORK TRAFFIC FLOW

    公开(公告)号:US20240195712A1

    公开(公告)日:2024-06-13

    申请号:US18119842

    申请日:2023-03-10

    Applicant: VMWARE, INC.

    CPC classification number: H04L43/026 H04L45/745

    Abstract: Embodiments for identifying workloads in a networking environment based on a flow record from an observation point are described. One embodiment of a method includes receiving network data from an endpoint in the networking environment, determining a plurality of administrative domains within the networking environment, and generating observation point mapping information that maps each observation point within the networking environment to one of the plurality of administrative domains. Some embodiments include generating a plurality of lookup tables, where a first lookup table is associated with a first administrative domain and where the first administrative domain corresponds to an L2 network that is disconnected from any router in the networking environment. Some embodiments include generating a workload identification table that maps combinations of IP addresses and administrative domains to workloads, receiving the flow record from the observation point, and identifying source and destination workloads of the flow record.

    WORKLOAD IDENTIFICATION FOR NETWORK FLOWS IN HYBRID ENVIRONMENTS WITH NON-UNIQUE IP ADDRESSES

    公开(公告)号:US20190260654A1

    公开(公告)日:2019-08-22

    申请号:US15946737

    申请日:2018-04-06

    Applicant: VMWARE, INC.

    Abstract: Embodiments described herein generally involve identifying workloads in a networking environment based on a flow record from an observation point. In one embodiment, network data is received from one or more endpoints and used to determine a plurality of administrative domains. Each administrative domain comprises a distinct section of the networking environment within which every Internet Protocol (IP) address is unique. The network data may be used to generate observation point mapping information that maps each observation point to an administrative domain, lookup tables associated with each of the plurality of administrative domains that map IP addresses to administrative domains, and a workload identification table that maps combinations of IP addresses and administrative domains to workloads. The flow record is received from the observation point and a source and destination workload of the flow record are identified using the observation point mapping information, applicable lookup table, and workload identification table.

    SYSTEM AND METHOD FOR TOPOLOGY CONSTRUCTION IN HYBRID CLOUD ENVIRONMENTS

    公开(公告)号:US20210367851A1

    公开(公告)日:2021-11-25

    申请号:US16939141

    申请日:2020-07-27

    Applicant: VMWARE, INC.

    Abstract: A system and method for topology construction in hybrid cloud environments includes receiving connection information from a local perimeter edge router of a local network that has a known topology and receiving connection information from a remote perimeter edge router of a remote network that is provided by a cloud provider. The received local perimeter edge router connection information is associated with the received remote perimeter edge router connection information. The associated connection information is normalized to a generic model, the generic model representing connections having different link layer policies in a generic way and the normalized connection information is applied to a network topology of the local network and the remote network.

    WORKLOAD IDENTIFICATION FOR NETWORK FLOWS OVER STRETCHED LAYER 2 NETWORKS

    公开(公告)号:US20220393964A1

    公开(公告)日:2022-12-08

    申请号:US17396861

    申请日:2021-08-09

    Applicant: VMWARE, INC.

    Abstract: Embodiments described herein generally involve identifying workloads in a multi-site networking environment. Embodiments include determining that a given network is stretched across a first network segment at a first site and a second network segment at a second site. Embodiments include creating a stretched administrative domain for the given network and mapping an address of the given network to the stretched administrative domain in a lookup table for an administrative domain associated with the first network segment. Embodiments include receiving a flow record from an observation point in the first network segment, the flow record having a source IP address associated with the second network segment and a destination IP address associated with the first network segment. Embodiments include identifying a source workload and destination workload of the flow record using the lookup table and a workload identification table that maps combinations of IP addresses and administrative domains to workloads.

Patent Agency Ranking