Chaining virtual network function services via remote memory sharing

Patent metadata

Field	Value
Publication number	US-10110707-B2
Application number	US-201514966058-A
Country	US
Kind code	B2
Filing date	Dec 11, 2015
Priority date	Dec 11, 2015
Publication date	Oct 23, 2018
Grant date	Oct 23, 2018

Abstract

Chaining virtual network functions is provided using a remote direct memory access in software-defined data centers in order to minimize latency. A data packet is processed using a virtual network function of the computer. The data packet is inserted into a shared memory pool for processing via remote direct memory access by a remote computer according to a network function of the remote computer that corresponds to the network function of the computer. The data packet is sent to a target destination device via a network in response to the remote computer marking the data packet as processed in the shared memory pool.

First claim

What is claimed is:

1. A computer-implemented method for chaining virtual network functions using a shared memory pool of a computer that is coupled to a shared memory pool of a remote computer, the computer-implemented method comprising:
sending, by a source client device, a data packet to a target destination device via a network;
receiving, by the computer, the data packet sent by the source client device and destined for the target destination device;
responsive to receiving the data packet sent by the source client device and destined for the target destination device, processing, by the computer, the data packet using a network function of the computer by performing steps of:
starting, by the computer, a virtual machine corresponding to the network function of the computer;
exposing, by the computer, the shared memory pool of the computer to the virtual machine corresponding to the network function of the computer; and
processing, by the computer, the data packet using the virtual machine that corresponds to the network function of the computer;

responsive to processing the data packet using the network function of the computer, inserting, by the computer, the data packet into the shared memory pool of the computer for processing via remote direct memory access by the remote computer according to a network function of the remote computer that corresponds to the network function of the computer; and
sending, by the computer, the data packet processed by the remote computer to the target destination device via the network in response to the remote computer marking the data packet as processed by the remote computer;
wherein the computer and the remote computer are coupled together by one of a software-defined cloud or a software-defined network, and wherein the network function of the remote computer that corresponds to the network function of the computer is a deep packet inspection function that identifies denial-of-service attacks on the target destination device.

2. The computer-implemented method of claim 1 , wherein the remote direct memory access supports zero-copy networking by enabling a network interface to transfer data directly to and from the shared memory pool of the computer and the shared memory pool of the remote computer.

3. The computer-implemented method of claim 2 further comprising:
exposing, by the computer, the shared memory pool of the computer to the remote direct memory access.

4. The computer-implemented method of claim 1 further comprising:
establishing, by the computer, a ring buffer in the shared memory pool of the computer to share data between the computer and the remote computer via the remote direct memory access.

5. The computer-implemented method of claim 4 , wherein the remote computer polls the ring buffer in the shared memory pool of the computer via the network using the remote direct memory access for the data packet processed by the network function of the computer, and processes the data packet inserted into the shared memory pool of the computer according to the network function of the remote computer that corresponds to the network function of the computer.

6. The computer-implemented method of claim 4 , wherein the remote computer utilizes data packet location information to locate the data packet in the ring buffer.

7. The computer-implemented method of claim 1 , wherein the network function of the computer is one of a plurality of different network functions performed by the computer.

8. The computer-implemented method of claim 1 , wherein the network function of the computer is a router function that routes the data packet to the target destination device via the network.

9. A computer system for chaining virtual network functions using a shared memory pool of a computer that is coupled to a shared memory pool of a remote computer, the computer system comprising:
a bus system;
a storage device connected to the bus system, wherein the storage device stores program instructions; and
a processor connected to the bus system, wherein the processor executes the program instructions to:
receive a data packet sent by a source client device and destined for a target destination device;
process, responsive to receiving the data packet sent by the source client device and destined for the target destination device, the data packet using a network function of the computer system, wherein the program instructions to process the data packet using the network function of the computer system comprises program instructions to:
start, by the computer, a virtual machine corresponding to the network function of the computer;
expose, by the computer, the shared memory pool of the computer to the virtual machine corresponding to the network function performed by the computer; and
process, by the computer, the data packet using the virtual machine that corresponds to the network function of the computer;

insert, responsive to processing the data packet using the network function of the computer, the data packet into the shared memory pool of the computer for processing via remote direct memory access by the remote computer system according to a network function of the remote computer system that corresponds to the network function of the computer system; and
send the data packet processed by the remote computer to the target destination device via a network in response to the remote computer system marking the data packet as processed by the remote computer;

wherein the computer and the remote computer are coupled together by one of a software-defined cloud or a software-defined network, and wherein the network function of the remote computer that corresponds to the network function of the computer is a deep packet inspection function that identifies denial-of-service attacks on the target destination device.

10. The computer system of claim 9 , wherein the remote direct memory access supports zero-copy networking by enabling a network interface to transfer data directly to and from the shared memory pool of the computer and the shared memory pool of the remote computer.

11. The computer system of claim 9 , wherein the processor further executes the program instructions to:
expose the shared memory pool of the computer to the remote direct memory access.

12. A computer program product for chaining virtual network functions using a shared memory pool of a computer that is coupled to a shared memory pool of a remote computer, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:
sending, by a source client device, a data packet to a target destination device via a network;
receiving, by the computer, the data packet sent by the source client device and destined for the target destination device;
responsive to receiving the data packet sent by the source client device and destined for the target destination device, processing, by the computer, the data packet using a network function of the computer by performing steps of:
starting, by the computer, a virtual machine corresponding to the network function of the computer;
exposing, by the computer, the shared memory pool of the computer to the virtual machine corresponding to the network function of the computer; and
processing, by the computer, the data packet using the virtual machine that corresponds to the network function of the computer;

responsive to processing the data packet using the network function of the computer, inserting, by the computer, the data packet into the s

Assignees

• IBM

Inventors

• Hwang Jinho
• Rajagopalan Shriram

Classifications

• H04L43/028

  by filtering · CPC title

• H04L67/42 Primary

  Electricity · mapped topic

• H04L67/01

  Protocols · CPC title

• H04L67/1097 Primary

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title