公开(公告)号：WO2018191562A1

公开(公告)日：2018-10-18

申请号：PCT/US2018/027392

申请日：2018-04-12

Applicant: NICIRA, INC.

Inventor： WAN, Da ,  THAKKAR, Pankaj ,  CHANDA, Anupam ,  SHEN, Jianjun ,  CHALVADI, Anuprem ,  JIANG, Caixia ,  WANG, Hua ,  HAN, Donghai

IPC: H04L12/721 ,  H04L12/751 ,  H04L12/715

CPC classification number: H04L45/02 ,  H04L41/12 ,  H04L45/44 ,  H04L45/64 ,  H04L61/3025

Abstract: Example methods are provided for assigning a routing domain identifier in a logical network environment that includes one or more logical distributed routers and one or more logical switches. In one example, the method may comprise obtaining network topology information specifying how the one or more logical distributed routers are connected with the one or more logical switches; and selecting, from the one or more logical switches, a particular logical switch for which routing domain identifier assignment is required. The method may also comprise: identifying a particular logical distributed router that is connected with the particular logical switch based on the network topology information; assigning the particular logical switch with the routing domain identifier that is associated with the particular logical distributed router; and using the routing domain identifier in a communication between a management entity and a host.

公开(公告)号：WO2015030882A1

公开(公告)日：2015-03-05

申请号：PCT/US2014/036271

申请日：2014-04-30

Applicant: NICIRA, INC.

Inventor： WANG, Hua ,  SHEN, Jianjun ,  HAN, Donghai ,  JIANG, Caixia ,  LU, Wei ,  SUBRAMANIYAM, Rahul, Korivi

IPC: H04L29/12

CPC classification number: H04L63/0281 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L51/12 ,  H04L61/103 ,  H04L61/2015 ,  H04L61/6013 ,  H04L61/6022 ,  H04L63/0236 ,  H04L63/1441 ,  H04L63/1466

Abstract: Some embodiments use proxies on host devices to suppress broadcast traffic in a network. Each host in some embodiments executes one or more virtual machines (VMs). In some embodiments, a proxy operates on each host between each VM and the underlying network. For instance, in some of these embodiments, a VM's proxy operates between the VM and a physical forwarding element executing on the VM's host. The proxy monitors the VM's traffic, and intercepts broadcast packets when it knows how to deal with them. The proxy connects to a set of one or more controllers that provides a directory service that collects and maintains global information of the network. By connecting to the controller cluster, the proxy can obtain information that it can use to resolve broadcast requests. In some embodiments, the connection between the proxy and the controller cluster is encrypted and authenticated, to enhance the security. Also, in some embodiments, the connection is an indirect connection through an agent that executes on the host device and connects the proxies of the host device with the controller cluster.

Abstract translation: 一些实施例使用主机设备上的代理来抑制网络中的广播流量。 在一些实施例中，每个主机执行一个或多个虚拟机（VM）。 在一些实施例中，代理在每个VM和底层网络之间的每个主机上运行。 例如，在这些实施例中的一些实施例中，VM的代理在VM和在VM主机上执行的物理转发元件之间运行。 代理监视虚拟机的流量，并在知道如何处理广播数据包时拦截广播数据包。 代理连接到一组一个或多个控制器，提供收集和维护网络的全局信息的目录服务。 通过连接到控制器集群，代理可以获取可用于解决广播请求的信息。 在一些实施例中，代理和控制器集群之间的连接被加密和认证，以增强安全性。 此外，在一些实施例中，连接是通过在主机设备上执行并将主机设备的代理与控制器集群连接的代理的间接连接。