Distributed inline proxy

Patent metadata

Field	Value
Publication number	US-11399075-B2
Application number	US-202016937278-A
Country	US
Kind code	B2
Filing date	Jul 23, 2020
Priority date	Nov 30, 2018
Publication date	Jul 26, 2022
Grant date	Jul 26, 2022

Abstract

In some embodiments, a method instantiates a proxy that stores first state information for first workloads running on a first computing device. The first computing device receives a migrated workload from a second computing device and second state information for a session associated with the migrated workload. The second state information is generated by a proxy on the second computing device that processed one or more packets for the migrated workload on the second computing device. The method stories the second state information for the proxy on the first computing device and resumes the session associated with the migrated workload using the proxy on the first computing device.

First claim

What is claimed is:

1. A method comprising: instantiating, by a first computing device, a proxy that stores first state information for first workloads running on the first computing device;
receiving, by the first computing device, a migrated workload from a second computing device and second state information for a session associated with the migrated workload, wherein the second state information is generated by a proxy on the second computing device that processed one or more packets for the migrated workload on the second computing device;
storing, by the first computing device, the second state information for the proxy on the first computing device; and
resuming, by the first computing device, the session associated with the migrated workload using the proxy on the first computing device.

2. The method of claim 1 , wherein the second state information comprises information extracted from the one or more packets that are sent in the session at the second computing device.

3. The method of claim 1 , wherein the proxy on the first computing device establishes a first session between the proxy on the first computing device and a destination and a second session between the proxy on the first computing device and the migrated workload using the second state information.

4. The method of claim 1 , further comprising:
determining an identifier for the migrated workload; and
storing the second state information for the migrated workload in a portion of a data structure associated with the identifier, wherein the data structure stores the first state information for the first workloads running on the first computing device.

5. The method of claim 1 , wherein the second state information comprises layer 7 information that the proxy on the first computing device uses to resume the session.

6. The method of claim 1 , wherein each of the first workloads running on the first computing device and the migrated workload is associated with an instantiation of the proxy on the first computing device.

7. The method of claim 1 , further comprising:
intercepting, by a hypervisor, a packet being sent to the migrated workload or a packet being sent from the migrated workload; and
sending the packet to the proxy on the first computing device, wherein the proxy on the first computing device processes the packet.

8. A non-transitory computer-readable storage medium containing instructions, that when executed, control a first computing device to be configured for:
instantiating a proxy that stores first state information for first workloads running on the first computing device;
receiving a migrated workload from a second computing device and second state information for a session associated with the migrated workload, wherein the second state information is generated by a proxy on the second computing device that processed one or more packets for the migrated workload on the second computing device;
storing the second state information for the proxy on the first computing device; and
resuming the session associated with the migrated workload using the proxy on the first computing device.

9. The non-transitory computer-readable storage medium of claim 8 , wherein the second state information comprises information extracted from the one or more packets that are sent in the session at the second computing device.

10. The non-transitory computer-readable storage medium of claim 8 , wherein the proxy on the first computing device establishes a first session between the proxy on the first computing device and a destination and a second session between the proxy on the first computing device and the migrated workload using the second state information.

11. The non-transitory computer-readable storage medium of claim 8 , further operable for:
determining an identifier for the migrated workload; and
storing the second state information for the migrated workload in a portion of a data structure associated with the identifier, wherein the data structure stores the first state information for the first workloads running on the first computing device.

12. The non-transitory computer-readable storage medium of claim 8 , wherein the second state information comprises layer 7 information that the proxy on the first computing device uses to resume the session.

13. The non-transitory computer-readable storage medium of claim 8 , wherein each of the first workloads running on the first computing device and the migrated workload is associated with an instantiation of the proxy on the first computing device.

14. The non-transitory computer-readable storage medium of claim 8 , further operable for:
intercepting, by a hypervisor, a packet being sent to the migrated workload or a packet being sent from the migrated workload; and
sending the packet to the proxy on the first computing device, wherein the proxy on the first computing device processes the packet.

15. A first computing device comprising:
one or more computer processors; and
a non-transitory computer-readable storage medium comprising instructions, that when executed, control the one or more computer processors to be configured for:
instantiating a proxy that stores first state information for first workloads running on the first computing device;
receiving a migrated workload From a second computing device and second state information for a session associated with the migrated workload, wherein the second state information is generated by a proxy on the second computing device that processed one or more packets for the migrated workload on the second computing device;
storing the second state information for the proxy on the first computing device; and
resuming the session associated with the migrated workload using the proxy on the first computing device.

16. The first computing device of claim 15 , wherein the second state information comprises information extracted from the one or more packets that are sent in the session at the second computing device.

17. The first computing device of claim 15 , wherein the proxy on the first computing device establishes a first session between the proxy on the first computing device and a destination and a second session between the proxy on the first computing device and the migrated workload using the second state information.

18. The first computing device of claim 15 , further operable for:
determining an identifier for the migrated workload; and
storing the second state information for the migrated workload in a portion of a data structure associated with the identifier, wherein the data structure stores the first state information for the first workloads running on the first computing device.

19. The first computing device of claim 15 , wherein the second state information comprises layer 7 information that the proxy on the first computing device uses to resume the session.

20. The first computing device of claim 15 , wherein each of the first workloads running on the first computing device and the migrated workload is associated with an instantiation of the proxy on the first computing device.

21. The first computing device of claim 15 , further operable for:
intercepting, by a hypervisor, a packet being sent to the migrated workload or a packet being sent from the migrated workload; and
sending the packet to the proxy on the first computing device, wherein the proxy on the first computing device processes the packet.

Assignees

• Vmware Inc

Inventors

• Jain Jayant
• Lund Rick
• Parsa Mike
• Blanco Brenden
• Sengupta Anirban

Classifications

• H04L67/56

  Provisioning of proxy services (store-and-forward switching systems in data switching networks H04L12/54) · CPC title

• G06F9/45558 Primary

  Hypervisor-specific management and integration aspects · CPC title

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• H04L67/01

  Protocols · CPC title

• H04L67/148

  Migration or transfer of sessions · CPC title