Accessing cloud resources using private network addresses
US-2019334868-A1 · Oct 31, 2019 · US
US11595303B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11595303-B2 |
| Application number | US-201916538855-A |
| Country | US |
| Kind code | B2 |
| Filing date | Aug 13, 2019 |
| Priority date | Jun 10, 2019 |
| Publication date | Feb 28, 2023 |
| Grant date | Feb 28, 2023 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Example methods and systems for packet handling in a software-defined networking (SDN) environment are disclosed. One example method may comprise detecting an egress application-layer message from a first logical endpoint supported by a first host; and identifying a second logical endpoint supported by the second host for which the egress application-layer message is destined. The method may also comprise generating an egress packet that includes the egress application-layer message and metadata associated with the second logical endpoint, but omits one or more headers that are addressed from the first logical endpoint to the second logical endpoint. The method may further comprise sending the egress packet to the second host to cause the second host to identify the second logical endpoint based on the metadata, and to send the egress application-layer message to the second logical endpoint.
Opening claim text (preview).
We claim: 1. A method for a first host to perform packet handling in a software-defined networking (SDN) environment that includes the first host and a second host, the method comprising: detecting an egress application-layer message from a first logical endpoint supported by the first host, wherein the egress application-layer message is directed towards a virtual domain name that is mapped to a plurality of different virtual domain names having a same domain identifier, wherein the egress application-layer message is encapsulated with a plurality of headers, including a transport-layer header, that are addressed from the first logical endpoint to a second logical endpoint supported by the second host, and wherein the second logical endpoint is associated with a particular virtual domain name amongst the plurality of different virtual domain names; identifying the second logical endpoint supported by the second host for which the egress application-layer message is destined, wherein the second logical endpoint is identified based on control information that associates the second logical endpoint with at least one attribute specified by the egress application-layer message; generating an egress packet that includes the egress application-layer message and metadata associated with the second logical endpoint, but omits at least the transport-layer header of the plurality of headers that are addressed from the first logical endpoint to the second logical endpoint, wherein the metadata specifies the domain identifier and the particular virtual domain name to uniquely identify the second logical endpoint; and sending the egress packet to the second host to cause the second host to identify the second logical endpoint based on the metadata, and to send the egress application-layer message to the second logical endpoint. 2. The method of claim 1 , wherein generating the egress packet comprises: generating the egress packet to include the metadata which uniquely associates, within a routing domain having the domain identifier, the second logical endpoint with the at least one attribute specified by the egress application-layer message. 3. The method of claim 1 , wherein identifying the second logical endpoint comprises: obtaining, from a network manager, the control information which associates the at least one attribute specified by the egress application-layer message with a group of logical endpoints that are capable of processing the application-layer message. 4. The method of claim 3 , wherein identifying the second logical endpoint comprises: performing load balancing to select, from the group of logical endpoints, the second logical endpoint to handle the egress application-layer message. 5. The method of claim 1 , wherein the plurality of headers, in addition to the transport-layer header, comprises: an Internet Protocol (IP) header and a media access control (MAC) header. 6. The method of claim 5 , wherein generating the egress packet comprises: generating the egress packet by removing at least one of the IP header and the MAC header from the egress application-layer message, in addition to omission of the transport-layer header. 7. The method of claim 1 , wherein detecting the egress application-layer message comprises: detecting the egress application-layer message via an application programming interface (API) invocation. 8. A non-transitory computer-readable storage medium that includes a set of instructions which, in response to execution by a processor of a computer system, cause the processor to perform a method of packet handling in a software-defined networking (SDN) environment that includes the computer system acting as a first host, and a second host, wherein the method comprises: detecting an egress application-layer message from a first logical endpoint supported by the computer system, wherein the egress application-layer message is directed towards a virtual domain name that is mapped to a plurality of different virtual domain names having a same domain identifier, wherein the egress application-layer message is encapsulated with a plurality of headers, including a transport-layer header, that are addressed from the first logical endpoint to a second logical endpoint supported by the second host, and wherein the second logical endpoint is associated with a particular virtual domain name amongst the plurality of different virtual domain names; identifying the second logical endpoint supported by the second host for which the egress application-layer message is destined, wherein the second logical endpoint is identified based on control information that associates the second logical endpoint with at least one attribute specified by the egress application-layer message; generating an egress packet that includes the egress application-layer message and metadata associated with the second logical endpoint, but omits at least the transport-layer header of the plurality of headers that are addressed from the first logical endpoint to the second logical endpoint, wherein the metadata specifies the domain identifier and the particular virtual domain name to uniquely identify the second logical endpoint; and sending the egress packet to the second host to cause the second host to identify the second logical endpoint based on the metadata, and to send the egress application-layer message to the second logical endpoint. 9. The non-transitory computer-readable storage medium of claim 8 , wherein generating the egress packet comprises: generating the egress packet to include the metadata which uniquely associates, within a routing domain having the domain identifier, the second logical endpoint with the at least one attribute specified by the egress application-layer message. 10. The non-transitory computer-readable storage medium of claim 8 , wherein identifying the second logical endpoint comprises: obtaining, from a network manager, the control information which associates the at least one attribute specified by the egress application-layer message with a group of logical endpoints that are capable of processing the application-layer message. 11. The non-transitory computer-readable storage medium of claim 10 , wherein identifying the second logical endpoint comprises: performing load balancing to select, from the group of logical endpoints, the second logical endpoint to handle the egress application-layer message. 12. The non-transitory computer-readable storage medium of claim 8 , wherein the plurality of headers, in addition to the transport-layer header, comprises: an Internet Protocol (IP) header and a media access control (MAC) header. 13. The non-transitory computer-readable storage medium of claim 12 , wherein generating the egress packet comprises: generating the egress packet by removing at least one of the IP header and the MAC header from the egress application-layer message, in addition to omission of the transport-layer header. 14. The non-transitory computer-readable storage medium of claim 8 , wherein detecting the egress application-layer message comprises: detecting the egress application-layer message via an application programming interface (API) invocation. 15. A computer system configured to perform packet handling in a software-defined networking (SDN) environment that includes the computer system acting as a first host, and a second host, wherein the computer system comprises: a processor; and a non-transitory computer-readable medium having stored thereon instructions that, in response to execution by the processor, cause the processor to: detect an egress ap
using an overlay routing layer · CPC title
Network integration; Enabling network access in virtual machine instances · CPC title
Flow based routing · CPC title
Layer 2 routing, e.g. in Ethernet based MAN's · CPC title
by balancing the load, e.g. traffic engineering · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.