Alleviating congestion in a virtual network deployed over public clouds for an entity

Patent metadata

Field	Value
Publication number	US-11252106-B2
Application number	US-201916662570-A
Country	US
Kind code	B2
Filing date	Oct 24, 2019
Priority date	Aug 27, 2019
Publication date	Feb 15, 2022
Grant date	Feb 15, 2022

Abstract

A method for deploying different virtual networks over several public cloud datacenters for different entities. For each entity, the method (1) identifies a set of public cloud datacenters of one or more public cloud providers to connect a set of machines of the entity, (2) deploys managed forwarding nodes (MFNs) for the entity in the identified set of public cloud datacenters, and then (3) configures the MFNs to implement a virtual network that connects the entity's set of machines across its identified set of public cloud datacenters. In some embodiments, the method identifies the set of public cloud datacenters for an entity by receiving input from the entity's network administrator. In some embodiments, this input specifies the public cloud providers to use and/or the public cloud regions in which the virtual network should be defined. Conjunctively, or alternatively, this input in some embodiments specifies actual public cloud datacenters to use.

First claim

The invention claimed is:

1. A method of operating a virtual network for an entity over a set of two or more public cloud datacenters, the method comprising:
deploying a larger, first virtual network over the set of the public cloud datacenters, said first virtual network using at least a particular forwarding element near an Internet backbone;
receiving, from the entity, identities of a subset of public cloud datacenters over which a smaller, second virtual network for the entity should be deployed, the subset of public cloud datacenters not including all the public cloud datacenters in the set;
performing a first set of path searches to identify a first set of paths through the subset of public cloud datacenters to connect machines of the entity outside of the public cloud datacenters;
based on the first set of paths, configuring a set of forwarding elements operating in the subset of public cloud datacenters to implement the second virtual network for the entity, in order to forward through the second virtual network a first set of data message flows associated with the machines of the entity outside of the public cloud datacenters;
performing a second set of path searches to identify at least a first path that uses the particular forwarding element near the Internet backbone that is determined to be better based on a set of metrics to a second path in the first set of paths;
based on the identification of the first path, providing a recommendation to the entity to use the particular forwarding element; and
after the entity accepts the recommendation, using the first virtual network including the particular forwarding element near the Internet backbone to forward a second set of data message flows associated with the machines of the entity outside of the public cloud datacenters through the first path in place of the second path.

2. The method of claim 1 , wherein using the first virtual network comprises using the first path in place of the second path to forward at least one data message flow in the second set of data message flows.

3. The method of claim 1 , wherein:
providing the recommendation comprises providing the recommendation after deploying and configuring the set of forwarding elements in the subset of public cloud datacenters to implement the second virtual network; and
using the first path comprises replacing a set of forwarding records that implement the second path from the configured set of forwarding elements with another set of forwarding records that implement the first path.

4. The method of claim 1 , wherein providing the recommendation comprises providing the recommendation before deploying and configuring the set of forwarding elements in the subset of public cloud datacenters to implement the second virtual network.

5. A method of operating a virtual network for an entity over a set of two or more public cloud datacenters, the method comprising:
deploying a larger, first virtual network over the set of the public cloud datacenters, said first virtual network using at least a particular forwarding element near an Internet backbone;
receiving, from the entity, identities of a subset of public cloud datacenters over which a smaller, second virtual network for the entity should be deployed, the subset of public cloud datacenters not including all the public cloud datacenters in the set;
performing a first set of path searches to identify a first set of paths through the subset of public cloud datacenters to connect machines of the entity outside of the public cloud datacenters;
based on the first set of paths, configuring a set of forwarding elements operating in the subset of public cloud datacenters to implement the second virtual network for the entity, in order to forward through the second virtual network a first set of data message flows associated with the machines of the entity outside of the public cloud datacenters;
receiving a preference setting from the entity to use forwarding elements near the Internet backbone when the use of such forwarding elements improves a forwarding of a data message flow for the entity;
based on the preference setting, performing a second set of path searches to identify at least a first path that uses the particular forwarding element near the Internet backbone that is determined to be better based on a set of metrics to a second path in the first set of paths; and
using the first virtual network including the particular forwarding element near the Internet backbone to forward a second set of data message flows associated with the machines of the entity outside of the public cloud datacenters.

6. A method of operating a virtual network for an entity over a set of two or more public cloud datacenters, the method comprising:
deploying a larger, first virtual network over the set of the public cloud datacenters, said first virtual network using at least a particular forwarding element near an Internet backbone;
receiving, from the entity, identities of a subset of public cloud datacenters over which a smaller, second virtual network for the entity should be deployed, the subset of public cloud datacenters not including all the public cloud datacenters in the set;
performing a first set of path searches to identify a first set of paths through the subset of public cloud datacenters to connect machines of the entity outside of the public cloud datacenters;
based on the first set of paths, configuring a first set of forwarding elements operating in the subset of public cloud datacenters to implement the second virtual network for the entity, in order to forward through the second virtual network a first set of data message flows associated with the machines of the entity outside of the public cloud datacenters;
performing a second set of path searches to identify at least a first path that uses the particular forwarding element near the Internet backbone that is determined to be better based on a set of metrics to a second path in the first set of paths;
based on the second set of path searches, using the first virtual network including the particular forwarding element near the Internet backbone to forward a second set of data message flows associated with the machines of the entity outside of the public cloud datacenters;
the particular forwarding element is part of a second set of forwarding elements that are shared forwarding elements used to forward data message flows associated with multiple different entities that are tenants of a virtual network provider that deploys the forwarding elements for the different entities; and
the first set of forwarding elements are dedicated forwarding elements deployed by the virtual network provider for the entity in order to forward data message flows associated with the particular entity and no other tenant of the virtual network provider.

7. The method of claim 1 , wherein the particular forwarding element is in a datacenter near the Internet backbone.

8. The method of claim 1 , wherein the particular forwarding element is in a datacenter that is part of the Internet backbone.

9. A system for operating a virtual network for an entity over a set of two or more public cloud datacenters, the system comprising:
a first set of managed forwarding elements deployed in a set of public cloud datacenters (PCDs) to implement a first virtual network over the PCD set, the first set of managed forwarding elements comprising a particular forwarding element near an Internet backbone;
a second set of managed forwarding elements deployed, for the entity, in a subset of the PCDs identified by the entity, the PCD subset not including all the PCDs in the PCD set in order to implement a second virtual network for the entity; and
a set of

Assignees

• Vmware Inc

Inventors

• Cidon Israel
• Venugopal Prashanth
• Bergman Aran
• Dar Chen
• Markuze Alex
• Zohar Eyal

Classifications

• H04L43/08

  Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters · CPC title

• H04L45/745

  Address table lookup; Address filtering · CPC title

• H04L43/20

  the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV · CPC title

• H04L41/122

  of virtualised topologies, e.g. software-defined networks [SDN] or network function virtualisation [NFV] · CPC title

• H04L41/0897

  by horizontal or vertical scaling of resources, or by migrating entities, e.g. virtual resources or entities · CPC title