Adaptive source port generation in overlay networks

Patent metadata

Field	Value
Publication number	US-11245629-B2
Application number	US-202016925238-A
Country	US
Kind code	B2
Filing date	Jul 9, 2020
Priority date	Jul 9, 2020
Publication date	Feb 8, 2022
Grant date	Feb 8, 2022

Abstract

In some embodiments, a method determines when a packet is fragmented into multiple fragmented packets in a flow between a first workload and a second workload. The method switches from generating an outer source port in the outer header using layer 4 information from the inner header to using layer 3 information from the inner header. A fragmented packet is encapsulated with the outer header that includes an outer source port value that is generated using the layer 3 information. The method initiates a process to determine when to switch back to using layer 4 information from the inner header to generate the outer source port. When it is determined to switch back to using layer 4 information, the method switches back to using layer 4 information from the inner header to generate the source port in the outer header of a packet from the first workload.

First claim

What is claimed is:

1. A method comprising:
determining when a packet is fragmented into multiple fragmented packets in a flow between a first workload and a second workload, wherein the fragmented packets include an inner header that is encapsulated with an outer header;
switching from generating an outer source port in the outer header using layer 4 information from the inner header to using layer 3 information from the inner header, wherein the layer 3 information is associated with a source address of the first workload and a destination address of the second workload;
encapsulating a fragmented packet with the outer header, wherein the outer header includes an outer source port value that is generated using the layer 3 information;
initiating a process to determine when to switch back to using layer 4 information from the inner header to generate the outer source port; and
when it is determined to switch back to using layer 4 information, switching back to using layer 4 information from the inner header to generate the source port in the outer header of a packet from the first workload.

2. The method of claim 1 , wherein switching back to using layer 4 information comprises:
determining a status of the flow that indicates the flow considered ended; and
removing an indication to use layer 3 information to generate the source port.

3. The method of claim 1 , wherein switching back to using layer 4 information comprises:
setting a timer;
analyzing a type of packets being sent in the flow, wherein the type includes a fragmented packet and a non-fragmented packet; and
determining whether to switch back to using layer 4 information using the timer based on the analyzing.

4. The method of claim 3 , further comprising:
adding an amount of time to the timer when a fragmented packet is encountered, wherein switching back to using layer 4 information is based on the timer expiring.

5. The method of claim 1 , wherein the process analyzes a type of packets being sent in the flow and predicts a type of packet, and switching back to using layer 4 information comprises:
determining whether to switch back to using layer 4 information using a prediction from the predicted type of packet.

6. The method of claim 1 , wherein:
the flow is associated with a first flow,
a second flow includes a same outer source port when using the layer 3 information of the source address associated with the first workload and the destination address associated with the second workload from the inner header to generate the outer source port, and
the second flow includes a different outer source port when using the layer 3 information and the layer 4 information to generate the outer source port.

7. The method of claim 6 , wherein:
the first flow is associated with a first application in the first workload, the first application being associated with a first inner source port, and
the second flow is associated with a second application in the first workload, the second application being associated with a second inner source port.

8. A non-transitory computer-readable storage medium containing instructions, that when executed, control a computer system to be operable for:
determining when a packet is fragmented into multiple fragmented packets in a flow between a first workload and a second workload, wherein the fragmented packets include an inner header that is encapsulated with an outer header;
switching from generating an outer source port in the outer header using layer 4 information from the inner header to using layer 3 information from the inner header, wherein the layer 3 information is associated with a source address of the first workload and a destination address of the second workload;
encapsulating a fragmented packet with the outer header, wherein the outer header includes an outer source port value that is generated using the layer 3 information;
initiating a process to determine when to switch back to using layer 4 information from the inner header to generate the outer source port; and
when it is determined to switch back to using layer 4 information, switching back to using layer 4 information from the inner header to generate the source port in the outer header of a packet from the first workload.

9. The non-transitory computer-readable storage medium of claim 8 , wherein switching back to using layer 4 information comprises:
determining a status of the flow that indicates the flow considered ended; and
removing an indication to use layer 3 information to generate the source port.

10. The non-transitory computer-readable storage medium of claim 8 , wherein switching back to using layer 4 information comprises:
setting a timer;
analyzing a type of packets being sent in the flow, wherein the type includes a fragmented packet and a non-fragmented packet; and
determining whether to switch back to using layer 4 information using the timer based on the analyzing.

11. The non-transitory computer-readable storage medium of claim 10 , further operable for:
adding an amount of time to the timer when a fragmented packet is encountered, wherein switching back to using layer 4 information is based on the timer expiring.

12. The non-transitory computer-readable storage medium of claim 8 , wherein the process analyzes a type of packets being sent in the flow and predicts a type of packet, and switching back to using layer 4 information comprises:
determining whether to switch back to using layer 4 information using a prediction from the predicted type of packet.

13. The non-transitory computer-readable storage medium of claim 8 , wherein:
the flow is associated with a first flow,
a second flow includes a same outer source port when using the layer 3 information of the source address associated with the first workload and the destination address associated with the second workload from the inner header to generate the outer source port, and
the second flow includes a different outer source port when using the layer 3 information and the layer 4 information to generate the outer source port.

14. The non-transitory computer-readable storage medium of claim 13 , wherein:
the first flow is associated with a first application in the first workload, the first application being associated with a first inner source port, and
the second flow is associated with a second application in the first workload, the second application being associated with a second inner source port.

15. An apparatus comprising:
one or more computer processors; and
a non-transitory computer-readable storage medium comprising instructions, that when executed, control the one or more computer processors to be operable for:
determining when a packet is fragmented into multiple fragmented packets in a flow between a first workload and a second workload, wherein the fragmented packets include an inner header that is encapsulated with an outer header;
switching from generating an outer source port in the outer header using layer 4 information from the inner header to using layer 3 information from the inner header, wherein the layer 3 information is associated with a source address of the first workload and a destination address of the second workload;
encapsulating a fragmented packet with the outer header, wherein the outer header includes an outer source port value that is generated using the layer 3 information;
initiating a process to determine when to switch back to using layer 4 information from the inner header to generate the outer source port; and
when it is determined to switch back to using layer 4 information, switc

Assignees

• Vmware Inc

Inventors

• Mathew Subin Cyriac
• Devireddy Dileep
• Tessmer Alexander
• Jiang Wenyi
• Raman Chidambareswaran

Classifications

• H04L45/74

  Address processing for routing · CPC title

• H04L69/325

  in the network layer [OSI layer 3], e.g. X.25 (H04L69/16 takes precedence) · CPC title

• H04L69/166 Primary

  IP fragmentation; TCP segmentation · CPC title

• H04L69/326

  in the transport layer [OSI layer 4] (H04L69/16 takes precedence) · CPC title

• H04L2212/00

  Encapsulation of packets · CPC title