Providing services with service VM mobility

Patent metadata

Field	Value
Publication number	US-11036538-B2
Application number	US-201916444845-A
Country	US
Kind code	B2
Filing date	Jun 18, 2019
Priority date	Feb 22, 2019
Publication date	Jun 15, 2021
Grant date	Jun 15, 2021

Abstract

Some embodiments provide a method for migrating a service machine between two hosts. The method configures a first host (1) to gather service machine data associated with the service machine executing on the first host and (2) to send the gathered service machine data to the second host. Each host executes a software forwarding element to implement a distributed forwarding element (DFE) that implements a dedicated service forwarding plane that forwards data messages associated with guest machines to the services machines. The method configures the second host to use the received service machine data to deploy the service machine on the second host and to connect the deployed service machine to the DFE. The method configures the DFE to forward data messages associated with a guest machine executing on a third host, and addressed to the service machine to the second host instead of the first host.

First claim

The invention claimed is:

1. A method for migrating a service machine executing on a first host computer to a second host computer, the method comprising:
configuring the first host computer (i) to gather a set of service machine data associated with the service machine executing on the first host computer and (ii) to send the gathered service machine data to the second host computer, wherein a plurality of host computers including the first and second host computers each execute at least one software forwarding element to implement a distributed forwarding element (DFE) connected to a plurality of service machines including the service machine, the DFE implementing a dedicated service forwarding plane that forwards data messages associated with guest machines executing on the plurality of host computers to the services machines;
configuring the second host computer to use the received service machine data to deploy the service machine on the second host computer and to connect the deployed service machine to the DFE at the second host computer; and
configuring the DFE to forward data messages associated with a guest machine executing on a third host computer in the plurality of host computers, and addressed to the service machine, to the second host computer instead of the first host computer.

2. The method of claim 1 , wherein
when the service machine executes at the first host computer, the DFE forwards data messages to the service machine when they are addressed to a particular network address; and
when the service machine executes at the second host computer, the DFE forwards data messages to the service machine when they are addressed to the same particular network address, the particular network address being the address associated with the service machine on the DFE.

3. The method of claim 2 , wherein the particular network address is a MAC address associated with the service machine.

4. The method of claim 3 , wherein
the DFE forwards data messages to the service machine by identifying a virtual tunnel endpoint (VTEP) mapped to the particular MAC address to which to send the data message; and
configuring the DFE to forward data messages addressed to the service machine to the second host computer instead of the first host computer comprises distributing to each of the plurality of hosts a mapping of the particular MAC address to a VTEP on the second host computer to replace a mapping of the particular MAC address to a VTEP on the first host computer.

5. The method of claim 1 , wherein the DFE is a first DFE, the method further comprising:
configuring the first DFE to forward a data message sent by the guest machine executing on the third host computer in the plurality of host computers to a set of one or more service machines before the data message is forwarded by a second DFE to destinations specified by the data message, the set of service machines comprising the service machine; and
configuring the second DFE to forward the data message sent by the guest machine based on a destination network address stored in a header of the data message.

6. The method of claim 1 , wherein
the service machine data comprises a set of service data maintained at the first host computer by the service machine for processing data flows; and
deploying the service machine on the second host computer comprises restoring the service data at the second host computer.

7. The method of claim 6 , wherein the service data comprises a set of at least one flow decision, each flow decision comprising a flow identifier and specifying at least one service action to perform on data messages that match the flow identifier.

8. The method of claim 1 , wherein deploying the service machine on the second host computer further comprises deploying a proxy module, wherein the proxy module performs at least one of formatting, processing, and passing data messages between the service machine and a port of the DFE.

9. The method of claim 8 , wherein the service machine data comprises a set of proxy data maintained at the first host computer by a proxy module for the service machine on the first host computer and deploying the proxy module comprises restoring the proxy data at the second host computer.

10. The method of claim 9 , wherein deploying the service machine further comprises deploying a transport module for formatting and passing data messages between the proxy module and the port of the DFE.

11. A non-transitory machine readable medium storing a program for execution by at least one processing unit and for migrating a service machine executing on a first host computer to a second host computer, the program comprising sets of instructions for:
configuring the first host computer (i) to gather a set of service machine data associated with the service machine executing on the first host computer and (ii) to send the gathered service machine data to the second host computer, wherein a plurality of host computers including the first and second host computers each execute at least one software forwarding element to implement a distributed forwarding element (DFE) connected to a plurality of service machines including the service machine, the DFE implementing a dedicated service forwarding plane that forwards data messages associated with guest machines executing on the plurality of host computers to the services machines;
configuring the second host computer to, use the received service machine data to deploy the service machine on the second host computer and to connect the deployed service machine to the DFE at the second host computer; and
configuring the DFE to forward data messages associated with a guest machine executing on a third host computer in the plurality of host computers, and addressed to the service machine, to the second host computer instead of the first host computer.

12. The non-transitory machine readable medium of claim 11 , wherein
when the service machine executes at the first host computer, the DFE forwards data messages to the service machine when they are addressed to a particular network address; and
when the service machine executes at the second host computer, the DFE forwards data messages to the service machine when they are addressed to the same particular network address, the particular network address being the address associated with the service machine on the DFE.

13. The non-transitory machine readable medium of claim 12 , wherein the particular network address is a MAC address associated with the service machine.

14. The non-transitory machine readable medium of claim 13 , wherein
the DFE forwards data messages to the service machine by identifying a virtual tunnel endpoint (VTEP) mapped to the particular MAC address to which to send the data message; and
the set of instructions for configuring the DFE to forward data messages addressed to the service machine to the second host computer instead of the first host computer comprises a set of instructions for distributing to each of the plurality of hosts a mapping of the particular MAC address to a VTEP on the second host computer to replace a mapping of the particular MAC address to a VTEP on the first host computer.

15. The non-transitory machine readable medium of claim 11 , wherein the DFE is a first DFE, the program further comprising sets of instructions for:
configuring the first DFE to forward a data message sent by the guest machine executing on the third host computer in the plurality of host computers to a set of one or more service machines before the data message is forwarded by a second DFE to destinations specified by the data mes

Assignees

• Vmware Inc

Inventors

• Lecuyer Camille
• Gokhale Saahil
• Nair Rajeev
• Chalvadi Anuprem
• Ping Yang
• Mundaragi Kantesh
• Mishra Rahul
• Rolando Pierluigi
• Jain Jayant
• Koganty Raju

Classifications

• H04L45/745

  Address table lookup; Address filtering · CPC title

• H04L67/30

  Profiles · CPC title

• H04L41/0895

  Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements · CPC title

• H04L41/40

  using virtualisation of network functions or resources, e.g. SDN or NFV entities · CPC title

• H04L41/0893

  Assignment of logical groups to network elements · CPC title