公开(公告)号：US11921610B2

公开(公告)日：2024-03-05

申请号：US17734250

申请日：2022-05-02

Applicant: VMware LLC

Inventor： Laxmikant Vithal Gunda ,  Arnold Poon ,  Farzad Ghannadian

IPC: G06F11/34 ,  G06F9/455 ,  G06F11/30

CPC classification number: G06F11/3452 ,  G06F9/45558 ,  G06F11/301 ,  G06F2009/45591

Abstract: Some embodiments provide a novel method for collecting and reporting attributes of data flows associated with machines executing on a plurality of host computers to an analysis appliance. Some embodiments collect, each time a request for a new data message flow is initiated, a set of contextual attributes (i.e., context data) associated with the requested new data message flow. The method, in some embodiments, generates a correlation data set and provides the correlation data set to be included in flow data regarding the requested data message flow to be used by the analysis appliance to correlate context data and flow data received as separate data sets from multiple host computers.

公开(公告)号：US12197971B2

公开(公告)日：2025-01-14

申请号：US17397936

申请日：2021-08-09

Applicant: VMware LLC

Inventor： Sirisha Myneni ,  Arijit Chanda ,  Laxmikant Vithal Gunda ,  Arnold Koon-Chee Poon ,  Farzad Ghannadian ,  Kausum Kumar

IPC: G06F9/54 ,  G06F8/60 ,  H04L9/40

Abstract: Some embodiments of the invention provide a simplified mechanism to deploy and control a multi-segmented application by using application-based manifests that express how application segments of the multi-segment application are to be defined or modified, and how the communication profiles between these segments. In some embodiments, these manifests are application specific. Also, in some embodiments, deployment managers in a software defined datacenter (SDDC) provide these manifests as templates to administrators, who can use these templates to express their intent when they are deploying multi-segment applications in the datacenter. Application-based manifests can also be used to control previously deployed multi-segmented applications in the SDDC. Using such manifests would enable the administrators to be able to manage fine grained micro-segmentation rules based on endpoint and network attributes.

公开(公告)号：US12107722B2

公开(公告)日：2024-10-01

申请号：US17869637

申请日：2022-07-20

Applicant: VMware LLC

Inventor： Amarnath Palavalli ,  Suresh Muppala ,  Farzad Ghannadian ,  Sukhdev Singh ,  Pavlush Margarian

IPC: G06F15/177 ,  H04L41/0816 ,  H04L41/0894 ,  H04L47/125 ,  H04L47/70 ,  H04L49/90

CPC classification number: H04L41/0816 ,  H04L41/0894 ,  H04L47/125 ,  H04L47/827 ,  H04L49/90

Abstract: Some embodiments provide a method for one of multiple shared API processing services in a container cluster that implements a network policy manager shared between multiple tenants. The method receives a configuration request from a particular tenant to modify a logical network configuration for the particular tenant. Configuration requests from the plurality of tenants are balanced across the plurality of shared API processing services. Based on the received configuration request, the method posts a logical network configuration change to a configuration queue in the cluster. The configuration queue is dedicated to the logical network of the particular tenant. Services are instantiated separately in the container cluster for each tenant to distribute configuration changes from the respective configuration queues for the tenants to datacenters that implement the tenant logical networks such that configuration changes for one tenant do not slow down processing of configuration changes for other tenants.