Service chaining for multiple uplink bridges

Patent metadata

Field	Value
Publication number	US-10356131-B2
Application number	US-201715835607-A
Country	US
Kind code	B2
Filing date	Dec 8, 2017
Priority date	Dec 9, 2016
Publication date	Jul 16, 2019
Grant date	Jul 16, 2019

Abstract

A system and method for facilitating communication between one or more of a plurality of user virtual machines and external devices is disclosed. The system includes a plurality of uplink bridges configured to facilitate communication between the plurality of user virtual machines and the external devices, a plurality of local bridges, with each of the plurality of user virtual machines being connected to one or more of the plurality of local bridges, and a first multiplexing bridge connected to the plurality of local bridges. The first multiplexing bridge is configured to direct data between the plurality of user virtual machines and the plurality of uplink bridges. The system also includes a second multiplexing bridge connected to the first multiplexing bridge and the plurality of uplink bridges. The second multiplexing bridge is configured to direct the data between the first multiplexing bridge and the plurality of uplink bridges.

First claim

What is claimed is:

1. A system comprising:
an uplink bridge to facilitate communication between a client and an external device;
a local bridge connected to the client to send data from the client to the uplink bridge and from the uplink bridge to the client;
a first multiplexing bridge between the local bridge and the uplink bridge to direct the data from the local bridge to the uplink bridge and from the uplink bridge to the local bridge;
a second multiplexing bridge connected to the first multiplexing bridge and the uplink bridge to direct the data from the first multiplexing bridge to the uplink bridge and from the uplink bridge to the first multiplexing bridge; and
a network security rules bridge between the first multiplexing bridge and the second multiplexing bridge to filter the data based on a defined rule.

2. The system of claim 1 , further comprising a network function bridge between the network security rules bridge and the second multiplexing bridge to direct the data between a network function.

3. The system of claim 1 , wherein the first multiplexing bridge combines the data received from the local bridge and other local bridges.

4. The system of claim 1 , wherein the first multiplexing bridge splits the data received from the uplink bridge and other uplink bridges.

5. The system of claim 1 , wherein the second multiplexing bridge combines the data received from the uplink bridge and other uplink bridges.

6. The system of claim 1 , wherein the second multiplexing bridge splits the data received from the first multiplexing bridge.

7. The system of claim 1 , further comprising a plurality of local bridges and a plurality of uplink bridges, and wherein a number of the plurality of local bridges is equal to a number of the plurality of uplink bridges.

8. A method comprising:
transmitting first data from a client to a local bridge connected to the client;
combining the first data from the local bridge with another data from another local bridge in a first multiplexing bridge for obtaining combined first data;
splitting the combined first data in a second multiplexing bridge for obtaining individual first data and individual another data;
transferring the individual first data to an uplink bridge;
transmitting the individual first data from the uplink bridge to an external device; and
applying a first network rule to the combined first data via a network security rules bridge between the first multiplexing bridge and the second multiplexing bridge.

9. The method of claim 8 , further comprising:
receiving a second data from the uplink bridge;
combining the second data with third data into combined second data in the second multiplexing bridge;
splitting the combined second data into individual second data and individual third data in the first multiplexing device;
transferring the individual second data to local bridge; and
transmitting the individual second data from the local bridge to the client.

10. The method of claim 9 , further comprising applying a second network rule to the combined second data via a network security rules bridge between the first multiplexing bridge and the second multiplexing bridge.

11. The method of claim 8 , further comprising creating the uplink bridge based upon an input request.

12. The method of claim 8 , further comprising a plurality of local bridges and a plurality of uplink bridges, and wherein a number of the plurality of local bridges is equal to a number of the plurality of uplink bridges.

13. The method of claim 12 , wherein each of the plurality of uplink bridges is connected to one external device.

14. The method of claim 8 , wherein a bridge chain is formed between the client and the uplink bridge for transmitting the first data from the client to the external device.

15. A non-transitory computer readable media with computer-executable instructions embodied thereon that, when executed by a processor causes the processor to perform a process comprising:
transmitting first data from a client to a local bridge connected to the client;
combining the first data from the local bridge with another data from another local bridge in a first multiplexing bridge for obtaining combined first data;
splitting the combined first data in a second multiplexing bridge for obtaining individual first data and individual another data;
transferring the individual first data to an uplink bridge;
transmitting the individual first data from the uplink bridge to an external device; and
applying a first network rule on the combined first data and applying a second network rule on the combined second data via a network security rules bridge between the first multiplexing bridge and the second multiplexing bridge.

16. The non-transitory computer readable media of claim 15 , further comprising:
receiving a second data from the uplink bridge;
combining the second data with third data into combined second data in the second multiplexing bridge;
splitting the combined second data into individual second data and individual third data in the first multiplexing device;
transferring the individual second data to the local bridge; and
transmitting the individual second data from the local bridge to the client.

17. The non-transitory computer readable media of claim 15 , further comprising connecting a network function bridge between a network security rules bridge and the second multiplexing bridge for directing the combined first data between a network function.

Assignees

• Nutanix Inc

Inventors

• Li Uzui
• Cui Miao
• Smith Gregory A
• Navasivasakthivelsamy Arunkumar

Classifications

• H04L12/4625

  Single bridge functionality, e.g. connection of two networks over a single bridge · CPC title

• H04L12/6418

  Hybrid transport · CPC title

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• H04L12/4637

  Interconnected ring systems · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title