Specifying and distributing service chains

    公开(公告)号:US10949244B2

    公开(公告)日:2021-03-16

    申请号:US16445062

    申请日:2019-06-18

    Applicant: VMware, Inc.

    Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).

    Secured suppression of address discovery messages

    公开(公告)号:US11805101B2

    公开(公告)日:2023-10-31

    申请号:US17223731

    申请日:2021-04-06

    Applicant: VMware, Inc.

    Abstract: Some embodiments provide a novel secure method for suppressing address discovery messaging. In some embodiments, the method receives an address discovery record that provides a network address associated with a machine connected to a network. The method then identifies a set of one or more rules for evaluating the received address discovery record to determine whether the address discovery record or its provided network address should be distributed to one or more hosts and/or devices associated with the network. The method then processes the set of rules to determine whether the received address discovery record violates a rule in the set of rules so as to prevent the distribution of its provided network address. When the address discovery record violates a rule, the method discards it in some embodiments. On the other hand, when the address discovery record does not violate any rule in the identified set of rules, the method distributes the address discovery record or its provided network address to one or more hosts and/or devices associated with the network.

    Software bug reproduction
    4.
    发明授权

    公开(公告)号:US11474930B2

    公开(公告)日:2022-10-18

    申请号:US16719999

    申请日:2019-12-19

    Applicant: VMware, Inc.

    Abstract: Example methods and systems for software bug reproduction. One example method may comprise obtaining log information associated with multiple transactions processed by a control-plane node to configure a set of data-plane nodes and transform an initial network state to a first network state; and configuring a replay environment that is initialized to the initial network state, and includes a mock control-plane node and a set of mock data-plane nodes. The method may also comprise, based on the log information, replaying the multiple transactions using the mock control-plane node to configure the set of mock data-plane nodes and transform the replay environment from the initial network state to a second network state. Based on a comparison between the first network state and the second network state, a determination may be made as to whether a software bug is successfully reproduced in the replay environment.

    Service path identifier allocation in service insertion

    公开(公告)号:US10887222B2

    公开(公告)日:2021-01-05

    申请号:US16382002

    申请日:2019-04-11

    Applicant: VMware, Inc.

    Abstract: Some embodiments provide a method for assigning different service path identifiers to each of a set of different service paths along each of which a same set of service operations are performed on a set of packets. The method retrieves an available service path identifier from an identifier storage that stores service path identifiers for multiple service paths. The method generates a set of proposed service path identifiers based on the retrieved available service path identifier and the number of service paths in the set of service paths. The method performs a write operation on the identifier storage based on the set of proposed service path identifiers, and based on a determination that the write operation was successful, assigns the set of proposed service path identifiers to the set of service paths. Based on the set of service path identifiers, the method forwards the set of packets along the set of service paths.

    PROVIDING SERVICES WITH SERVICE VM MOBILITY
    7.
    发明申请

    公开(公告)号:US20200272493A1

    公开(公告)日:2020-08-27

    申请号:US16444845

    申请日:2019-06-18

    Applicant: VMware, Inc.

    Abstract: Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).

    MANAGING HOST SPAN INFORMATION FOR LOGICAL ENTITIES IN SOFTWARE DEFINED NETWORKS

    公开(公告)号:US20210036924A1

    公开(公告)日:2021-02-04

    申请号:US16526755

    申请日:2019-07-30

    Applicant: VMware, Inc.

    Abstract: Described herein are systems and methods to manage and identify host spans of logical entities in software defined networks. In one example, a control system may identify a first graph that includes nodes that represent logical entities and hosts and further includes directional edges that represent a topology of the logical entities and hosts. The control system further identifies groups of strongly connected components in the first graph and generates a second graph based on the identified groups. The second graph includes nodes that represent the groups and any nodes of the first graph not included in the groups, and further includes directional edges that indicate a topology of the nodes. The control system may then follow the directional edges of the second graph to allocate host spans to the logical entities represented in the nodes.

Patent Agency Ranking