Multi-VRF and multi-service insertion on edge gateway virtual machines

    公开(公告)号:US12088493B2

    公开(公告)日:2024-09-10

    申请号:US17179174

    申请日:2021-02-18

    Applicant: VMware LLC

    CPC classification number: H04L45/22 H04L41/08 H04W88/16

    Abstract: In an embodiment, a method for a VRF and multi-service insertion on edge gateways is described. In an embodiment, the method comprises obtaining a rule configuration. Based on, at least in part, the rule configuration, a rule table is created. The rule table comprises rule data records, wherein a rule data record comprises packet attributes and a redirection identifier. A policy configuration comprising policy records is obtained. Each policy record comprises a redirection identifier, a next_hop, and an address pair for interfaces. A mapping between VRF identifiers and address pairs is generated. Based on, at least in part, the mapping and the policy configuration, a policy table is generated. The policy table comprises table records, wherein a table record comprises a redirection identifier, a next_hop, and an address pair. The rule and policy tables are used to redirect a packet from an edge gateway to a service virtual machine.

    CONFIGURATION OF SERVICE PODS FOR LOGICAL ROUTER

    公开(公告)号:US20250036437A1

    公开(公告)日:2025-01-30

    申请号:US18225554

    申请日:2023-07-24

    Applicant: VMware, LLC

    Abstract: Some embodiments provide a method for configuring a first Pod in a container cluster to perform layer 7 (L7) services for a logical router. At a second Pod that performs logical forwarding operations for the logical router, the method receives configuration data for the logical router from a network management system that defines a logical network for which the logical router routes data messages and performs L7 services. The method provides a set of Pod definition data to a cluster controller to create the first Pod. After creation of the first Pod, the method provides to the first Pod (i) networking information to enable a connection between the first and second Pods and (ii) configuration data defining the L7 services for the first Pod to perform the L7 services on data traffic sent from the second Pod to the first Pod.

    Scalable overlay multicast routing in multi-tier edge gateways

    公开(公告)号:US12155564B2

    公开(公告)日:2024-11-26

    申请号:US18226777

    申请日:2023-07-27

    Applicant: VMware LLC

    Abstract: A method for offloading multicast replication from multiple tiers of edge nodes implemented by multiple host machines to a physical switch is provided. Each of the multiple host machines implements a provider edge node and a tenant edge node. One host machine among the multiple host machines receives a packet having an overlay multicast group identifier. The host machine maps the overlay multicast group identifier to an underlay multicast group identifier. The host machine encapsulates the packet with an encapsulation header that includes the underlay multicast group identifier to create an encapsulated packet. The host machine forwards the encapsulated packet to a physical switch of the network segment. The physical switch forwards copies of the encapsulated packet to tenant edge nodes at one or more ports that are determined to be interested in the underlay multicast group identifier.

    Active-active support of multicast streams in virtualized environment

    公开(公告)号:US11895010B2

    公开(公告)日:2024-02-06

    申请号:US17362968

    申请日:2021-06-29

    Applicant: VMware LLC

    CPC classification number: H04L45/16 H04L45/44

    Abstract: A network system that uses a cluster of edge nodes to send and receive multicast traffic is provided. The network system is a network virtualization environment that includes one or more distributed routers, each distributed router implemented by virtualization software running on one or more host machines. The network system also includes a cluster of edge nodes for sending data from the one or more distributed routers to one or more uplink/upstream physical routers outside of a datacenter and for receiving data from the physical routers to the distributed routers. One of the edge nodes is a designated edge node that queries for membership information for one or more multicast groups to be received by at least two edge nodes of the cluster of edge nodes. The cluster of edge nodes forwards multicast traffic to and from the distributed routers according to the received membership information.

    Service insertion for multicast traffic at boundary

    公开(公告)号:US12231252B2

    公开(公告)日:2025-02-18

    申请号:US17528094

    申请日:2021-11-16

    Applicant: VMware LLC

    Abstract: Some embodiments of the invention provide novel methods for providing transparent services for multicast data messages traversing a network edge device operating at a boundary between two networks. The method analyzes data messages received at the network edge device to determine whether they require a service provided at the boundary and whether they are unicast or multicast (including broadcast). The method modifies a multicast destination media access control (MAC) address of a multicast data message requiring a service to be a unicast destination MAC address and provides, without processing by a standard routing function, the modified data message directly to an interface associated with a service node that provides the particular service required by the data message. The method receives the serviced data message, restores the multicast destination MAC address, and forwards the serviced data message to a set of destinations associated with the multicast destination address.

Patent Agency Ranking