-
公开(公告)号:US10949244B2
公开(公告)日:2021-03-16
申请号:US16445062
申请日:2019-06-18
Applicant: VMware, Inc.
Inventor: Akhila Naveen , Anuprem Chalvadi , Yang Ping , Yanjun Lin , Li Sun , Fenil Kavathia , Yong Feng , Pierluigi Rolando , Jayant Jain , Raju Koganty
IPC: G06F9/455 , H04L12/721 , H04L12/803 , H04L29/08 , H04L12/46 , H04L12/801 , H04L12/947 , H04L29/12 , H04L12/24 , G06F9/54 , H04L12/741 , H04L12/713 , H04L12/725 , H04L12/851 , H04L12/935
Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).
-
公开(公告)号:US11805101B2
公开(公告)日:2023-10-31
申请号:US17223731
申请日:2021-04-06
Applicant: VMware, Inc.
Inventor: Li Sun , Parasuramji Rajendran , Yang Ping , Jianjun Shen
IPC: H04L9/40 , H04L61/103 , H04L101/622
CPC classification number: H04L63/0263 , H04L61/103 , H04L63/0236 , H04L63/20 , H04L2101/622
Abstract: Some embodiments provide a novel secure method for suppressing address discovery messaging. In some embodiments, the method receives an address discovery record that provides a network address associated with a machine connected to a network. The method then identifies a set of one or more rules for evaluating the received address discovery record to determine whether the address discovery record or its provided network address should be distributed to one or more hosts and/or devices associated with the network. The method then processes the set of rules to determine whether the received address discovery record violates a rule in the set of rules so as to prevent the distribution of its provided network address. When the address discovery record violates a rule, the method discards it in some embodiments. On the other hand, when the address discovery record does not violate any rule in the identified set of rules, the method distributes the address discovery record or its provided network address to one or more hosts and/or devices associated with the network.
-
公开(公告)号:US11595470B1
公开(公告)日:2023-02-28
申请号:US17478708
申请日:2021-09-17
Applicant: VMware, Inc.
Inventor: Li Sun , Aravinda Kidambi Srinivasan , Deepika Kalani , Xiaozheng Guo , Yang Ping
IPC: H04L67/1008 , H04L67/1097 , H04L43/106 , H04L61/103 , H04L101/622
Abstract: A method of recording layer-2 (L2) mappings created for workloads executing on a plurality of hosts in a first database managed by a network management server: upon receipt of a first mapping reported by a first host, determining that the first mapping is not recorded in the first database; and in response to the determining that the received first mapping is not recorded in the first database, generating a first timestamp and persisting a first record in the first database that includes the first mapping and the first timestamp.
-
公开(公告)号:US11474930B2
公开(公告)日:2022-10-18
申请号:US16719999
申请日:2019-12-19
Applicant: VMware, Inc.
Inventor: Wei Guo , Deepika Rajendra Kalani , Yuanjun Yao , Mihir Patil , Aravinda Kidambi Srinivasan , Yang Ping
Abstract: Example methods and systems for software bug reproduction. One example method may comprise obtaining log information associated with multiple transactions processed by a control-plane node to configure a set of data-plane nodes and transform an initial network state to a first network state; and configuring a replay environment that is initialized to the initial network state, and includes a mock control-plane node and a set of mock data-plane nodes. The method may also comprise, based on the log information, replaying the multiple transactions using the mock control-plane node to configure the set of mock data-plane nodes and transform the replay environment from the initial network state to a second network state. Based on a comparison between the first network state and the second network state, a determination may be made as to whether a software bug is successfully reproduced in the replay environment.
-
公开(公告)号:US11249784B2
公开(公告)日:2022-02-15
申请号:US16445064
申请日:2019-06-18
Applicant: VMware, Inc.
Inventor: Anuprem Chalvadi , Yang Ping , Akhila Naveen , Fenil Kavathia , Yong Feng , Pierluigi Rolando , Jayant Jain , Raju Koganty
IPC: G06F9/54 , G06F9/455 , H04L45/00 , H04L47/125 , H04L69/324 , H04L69/325 , H04L69/321 , H04L12/46 , H04L47/17 , H04L49/25 , H04L101/622 , H04L41/5054 , H04L45/74 , H04L47/19 , H04L67/563 , H04L41/0803 , H04L41/5003 , H04L67/1001 , H04L67/10 , H04L45/586 , H04L67/60 , H04L45/30 , H04L45/745 , H04L67/101 , H04L41/0816 , H04L47/2425 , H04L67/51 , H04L67/56 , H04L49/00 , H04L61/2592 , H04L41/0806 , H04L41/0893
Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).
-
公开(公告)号:US10887222B2
公开(公告)日:2021-01-05
申请号:US16382002
申请日:2019-04-11
Applicant: VMware, Inc.
Inventor: Ziyou Wang , Li Sun , Anuprem Chalvadi , Yanjun Lin , Yang Ping , Mary Firenze , Pierluigi Rolando , Yong Feng , Raju Koganty , Jianjun Shen , Medhavi Dhawan
IPC: H04L12/717 , G06F9/455 , H04L12/707
Abstract: Some embodiments provide a method for assigning different service path identifiers to each of a set of different service paths along each of which a same set of service operations are performed on a set of packets. The method retrieves an available service path identifier from an identifier storage that stores service path identifiers for multiple service paths. The method generates a set of proposed service path identifiers based on the retrieved available service path identifier and the number of service paths in the set of service paths. The method performs a write operation on the identifier storage based on the set of proposed service path identifiers, and based on a determination that the write operation was successful, assigns the set of proposed service path identifiers to the set of service paths. Based on the set of service path identifiers, the method forwards the set of packets along the set of service paths.
-
公开(公告)号:US20200272493A1
公开(公告)日:2020-08-27
申请号:US16444845
申请日:2019-06-18
Applicant: VMware, Inc.
Inventor: Camille Lecuyer , Saahil Gokhale , Rajeev Nair , Anuprem Chalvadi , Yang Ping , Kantesh Mundaragi , Rahul Mishra , Pierluigi Rolando , Jayant Jain , Raju Koganty
IPC: G06F9/455 , H04L29/08 , H04L12/721 , H04L12/46
Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).
-
公开(公告)号:US20230168917A1
公开(公告)日:2023-06-01
申请号:US18103516
申请日:2023-01-31
Applicant: VMware, Inc.
Inventor: Fenil Kavathia , Anuprem Chalvadi , Yang Ping , Akhila Naveen , Yong Feng , Kantesh Mundaragi , Rahul Mishra , Pierluigi Rolando , Jayant Jain , Raju Koganty
IPC: G06F9/455 , H04L45/00 , H04L47/125 , H04L69/324 , H04L69/325 , H04L69/321 , H04L12/46 , H04L47/17 , H04L49/25 , H04L41/5054 , G06F9/54 , H04L45/74 , H04L47/19 , H04L41/0803 , H04L41/5003 , H04L67/10 , H04L45/586 , H04L45/302 , H04L45/745 , H04L67/101 , H04L41/0816 , H04L47/2425 , H04L49/00 , H04L61/2592 , H04L67/51 , H04L67/56 , H04L67/60 , H04L67/563 , H04L67/1001
CPC classification number: G06F9/45558 , H04L45/38 , H04L45/66 , H04L47/125 , H04L69/324 , H04L69/325 , H04L69/321 , H04L12/4633 , H04L47/17 , H04L49/252 , H04L41/5054 , G06F9/546 , H04L45/74 , H04L47/19 , H04L41/0803 , H04L41/5003 , H04L67/10 , H04L45/586 , H04L45/308 , H04L45/745 , H04L67/101 , H04L41/0816 , H04L45/26 , H04L47/2425 , H04L49/3009 , H04L61/2592 , H04L67/51 , H04L67/56 , H04L67/60 , H04L67/563 , H04L67/1001 , G06F2009/4557 , G06F2009/45595 , H04L41/0806
Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).
-
公开(公告)号:US11042397B2
公开(公告)日:2021-06-22
申请号:US16444826
申请日:2019-06-18
Applicant: VMware, Inc.
Inventor: Rahul Mishra , Camille Lecuyer , Saahil Gokhale , Rajeev Nair , Anuprem Chalvadi , Yang Ping , Kantesh Mundaragi , Pierluigi Rolando , Jayant Jain , Raju Koganty
IPC: G06F9/455 , H04L12/721 , H04L12/803 , H04L29/08 , H04L12/46 , H04L12/801 , H04L12/947 , H04L29/12 , H04L12/24 , G06F9/54 , H04L12/741 , H04L12/713 , H04L12/725 , H04L12/851 , H04L12/935
Abstract: Some embodiments of the invention provide a method for migrating a machine on a first host computer to a second host computer. At the first host computer, the method gathers a set of service insertion data used by a first service insertion module executing on the first host computer to identify a particular chain of multiple services that a set of multiple service nodes have to perform on a particular data message flow associated with the machine. To the second host computer, the method sends a set of machine configuration data and the set of service insertion data. The second host computer (1) uses the machine configuration data to deploy the machine on the second host computer and (2) uses the gathered set of service insertion data to configure a second service insertion module executing on the second host computer to identify the particular chain of two or more services.
-
公开(公告)号:US20210036924A1
公开(公告)日:2021-02-04
申请号:US16526755
申请日:2019-07-30
Applicant: VMware, Inc.
Inventor: Yanjun Lin , Yang Ping , Wei Guo , Li Sun
IPC: H04L12/24 , G06F16/901 , H04L12/713 , H04L12/931 , H04L12/715
Abstract: Described herein are systems and methods to manage and identify host spans of logical entities in software defined networks. In one example, a control system may identify a first graph that includes nodes that represent logical entities and hosts and further includes directional edges that represent a topology of the logical entities and hosts. The control system further identifies groups of strongly connected components in the first graph and generates a second graph based on the identified groups. The second graph includes nodes that represent the groups and any nodes of the first graph not included in the groups, and further includes directional edges that indicate a topology of the nodes. The control system may then follow the directional edges of the second graph to allocate host spans to the logical entities represented in the nodes.
-
-
-
-
-
-
-
-
-