公开(公告)号：WO2018191562A1

公开(公告)日：2018-10-18

申请号：PCT/US2018/027392

申请日：2018-04-12

Applicant: NICIRA, INC.

Inventor： WAN, Da ,  THAKKAR, Pankaj ,  CHANDA, Anupam ,  SHEN, Jianjun ,  CHALVADI, Anuprem ,  JIANG, Caixia ,  WANG, Hua ,  HAN, Donghai

IPC: H04L12/721 ,  H04L12/751 ,  H04L12/715

CPC classification number: H04L45/02 ,  H04L41/12 ,  H04L45/44 ,  H04L45/64 ,  H04L61/3025

Abstract: Example methods are provided for assigning a routing domain identifier in a logical network environment that includes one or more logical distributed routers and one or more logical switches. In one example, the method may comprise obtaining network topology information specifying how the one or more logical distributed routers are connected with the one or more logical switches; and selecting, from the one or more logical switches, a particular logical switch for which routing domain identifier assignment is required. The method may also comprise: identifying a particular logical distributed router that is connected with the particular logical switch based on the network topology information; assigning the particular logical switch with the routing domain identifier that is associated with the particular logical distributed router; and using the routing domain identifier in a communication between a management entity and a host.

公开(公告)号：WO2017095564A1

公开(公告)日：2017-06-08

申请号：PCT/US2016/059614

申请日：2016-10-29

Applicant: NICIRA, INC.

Inventor： SHEN, Jianjun ,  TESSMER, Alexander ,  HIRA, Mukesh ,  THAKKAR, Pankaj ,  WANG, Hua

IPC: H04L12/46

CPC classification number: H04L12/4633

Abstract: Some embodiments provide a method for a managed forwarding element (MFE). The method receives a packet from a data compute node for which the MFE performs first-hop processing. The data compute node is associated with multiple tunnel endpoints of the MFE. The method determines a destination tunnel endpoint for the packet. The method uses a load balancing algorithm to select one of the multiple tunnel endpoints of the MFE as a source tunnel endpoint for the packet. The method encapsulates the packet in a tunnel using the source and destination tunnel endpoints.

Abstract translation: 一些实施例提供了一种用于受管理转发单元（MFE）的方法。 该方法从MFE执行第一跳处理的数据计算节点接收分组。 数据计算节点与MFE的多个隧道端点相关联。 该方法确定分组的目的地隧道端点。 该方法使用负载平衡算法来选择MFE的多个隧道端点中的一个作为该分组的源隧道端点。 该方法使用源和目标隧道端点将数据包封装在隧道中。

公开(公告)号：WO2015030882A1

公开(公告)日：2015-03-05

申请号：PCT/US2014/036271

申请日：2014-04-30

Applicant: NICIRA, INC.

Inventor： WANG, Hua ,  SHEN, Jianjun ,  HAN, Donghai ,  JIANG, Caixia ,  LU, Wei ,  SUBRAMANIYAM, Rahul, Korivi

IPC: H04L29/12

CPC classification number: H04L63/0281 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L51/12 ,  H04L61/103 ,  H04L61/2015 ,  H04L61/6013 ,  H04L61/6022 ,  H04L63/0236 ,  H04L63/1441 ,  H04L63/1466

Abstract: Some embodiments use proxies on host devices to suppress broadcast traffic in a network. Each host in some embodiments executes one or more virtual machines (VMs). In some embodiments, a proxy operates on each host between each VM and the underlying network. For instance, in some of these embodiments, a VM's proxy operates between the VM and a physical forwarding element executing on the VM's host. The proxy monitors the VM's traffic, and intercepts broadcast packets when it knows how to deal with them. The proxy connects to a set of one or more controllers that provides a directory service that collects and maintains global information of the network. By connecting to the controller cluster, the proxy can obtain information that it can use to resolve broadcast requests. In some embodiments, the connection between the proxy and the controller cluster is encrypted and authenticated, to enhance the security. Also, in some embodiments, the connection is an indirect connection through an agent that executes on the host device and connects the proxies of the host device with the controller cluster.

Abstract translation: 一些实施例使用主机设备上的代理来抑制网络中的广播流量。 在一些实施例中，每个主机执行一个或多个虚拟机（VM）。 在一些实施例中，代理在每个VM和底层网络之间的每个主机上运行。 例如，在这些实施例中的一些实施例中，VM的代理在VM和在VM主机上执行的物理转发元件之间运行。 代理监视虚拟机的流量，并在知道如何处理广播数据包时拦截广播数据包。 代理连接到一组一个或多个控制器，提供收集和维护网络的全局信息的目录服务。 通过连接到控制器集群，代理可以获取可用于解决广播请求的信息。 在一些实施例中，代理和控制器集群之间的连接被加密和认证，以增强安全性。 此外，在一些实施例中，连接是通过在主机设备上执行并将主机设备的代理与控制器集群连接的代理的间接连接。