System and method for dynamic medium access control (MAC) relating to a virtualization environment

Patent metadata

Field	Value
Publication number	US-11089066-B2
Application number	US-201916657946-A
Country	US
Kind code	B2
Filing date	Oct 18, 2019
Priority date	Dec 9, 2016
Publication date	Aug 10, 2021
Grant date	Aug 10, 2021

Abstract

An illustrative embodiment disclosed herein is an apparatus including a processor having programmed instructions to determine that a first packet, received from a first VM on a first host, has a destination address associated with a second VM on the first host, send the first packet to a service-focused bridge, generate a rule to redirect the first packet to the second VM based on the destination address, and generate execute the rule in response to receiving the first packet from the service-focused bridge.

First claim

What is claimed:

1. An apparatus comprising: a processor; and
a memory having programmed instructions to:
determine that a first packet, received from a first virtual machine (VM) on a first host, has a destination address associated with a second VM on the first host;
send the first packet to a service-focused bridge;
generate a rule to redirect the first packet to the second VM based on the destination address;
execute the rule in response to receiving the first packet from the service-focused bridge;
receive, from the first VM, a request to operate as a standard layer 2 bridge; and
responsive to receiving the request to operate as the standard layer 2 bridge, generate a second rule that causes the apparatus to emulate operations of the standard layer 2 bridge.

2. The apparatus of claim 1 , wherein the apparatus includes one network segment and the first packet passes through the one network segment when being received from the first VM and when being sent to the second VM.

3. The apparatus of claim 1 , wherein the destination address associated with the second VM on the first host is one of a medium access control (MAC) address and a virtual local area network (VLAN) identifier (ID).

4. The apparatus of claim 1 , wherein the service-focused bridge is one of a network security rules bridge and a network function bridge.

5. The apparatus of claim 1 , wherein sending the first packet to the service-focused bridge is a default rule.

6. The apparatus of claim 1 , wherein the processor has further programmed instructions to send the first packet to the service-focused bridge, via a multiplexer bridge.

7. A method for dynamic medium access control (MAC) learning comprising:
determining, by a processor, that a first packet, received from a first virtual machine (VM) on a first host, has a destination address associated with a second VM on the first host;
sending, by the processor, the first packet to a service-focused bridge;
generating, by the processor, a rule to redirect the first packet to the second VM based on the destination address;
executing, by the processor, the rule in response to receiving the first packet from the service-focused bridges;
receiving, by the processor and from the first VM, a request to operate as a standard layer 2 bridge; and
responsive to receiving the request to operate as the standard layer 2 bridge, generating, by the processor, a second rule that causes a local bridge associated with the processor to emulate operations of the standard layer 2 bridge.

8. The method of claim 7 , wherein a local bridge associated with the processor includes one network segment and the first packet passes through the one network segment when being received from the first VM and when being sent to the second VM.

9. The method of claim 7 , wherein the destination address associated with the second VM on the first host is one of a medium access control (MAC) address and a virtual local area network (VLAN) identifier (ID).

10. The method of claim 7 , wherein the service-focused bridge is one of a network security rules bridge and a network function bridge.

11. The method of claim 7 , wherein sending the first packet to the service-focused bridge is a default rule.

12. The method of claim 7 , wherein the processor has further programmed instructions to send the first packet to the service-focused bridge, via a multiplexer bridge.

13. A non-transitory computer readable storage medium with computer-executable instructions embodied thereon that, when executed by a processor, causes the processor to perform a process comprising:
determining that a first packet, received from a first virtual machine (VM) on a first host, has a destination address associated with a second VM on the first host;
sending the first packet to a service-focused bridge;
generating a rule to redirect the first packet to the second VM based on the destination address;
executing the rule in response to receiving the first packet from the service-focused bridges;
receiving from the first VM, a request to operate as a standard layer 2 bridge; and
responsive to receiving the request to operate as the standard layer 2 bridge, generating a second rule that causes a local bridge associated with the processor to emulate operations of the standard layer 2 bridge.

14. The non-transitory storage medium of claim 13 , wherein a local bridge associated with the processor includes one network segment and the first packet passes through the one network segment when being received from the first VM and when being sent to the second VM.

15. The non-transitory storage medium of claim 13 , wherein the destination address associated with the second VM on the first host is one of a medium access control (MAC) address and a virtual local area network (VLAN) identifier (ID).

16. The non-transitory storage medium of claim 13 wherein the service-focused bridge is one of a network security rules bridge and a network function bridge.

17. The non-transitory storage medium of claim 13 , wherein sending the first packet to the service-focused bridge is a default rule.

18. The non-transitory storage medium of claim 13 , wherein the processor has further programmed instructions to send the first packet to the service-focused bridge, via a multiplexer bridge.

Assignees

• Nutanix Inc

Inventors

• Navasivasakthivelsamy Arunkumar
• Smith Gregory A
• Li Uzui

Classifications

• H04L45/02

  Topology update or discovery · CPC title

• H04L65/102 Primary

  Gateways (arrangements for connecting between networks having differing types of switching systems, e.g. gateways, H04L12/66) · CPC title

• G06F9/45558 Primary

  Hypervisor-specific management and integration aspects · CPC title

• H04L63/0281

  Proxies · CPC title

• H04L45/74

  Address processing for routing · CPC title