Multi-tenant isolation in a cloud environment using software defined networking
US-2015139238-A1 · May 21, 2015 · US
US11706127B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11706127-B2 |
| Application number | US-202117474034-A |
| Country | US |
| Kind code | B2 |
| Filing date | Sep 13, 2021 |
| Priority date | Jan 31, 2017 |
| Publication date | Jul 18, 2023 |
| Grant date | Jul 18, 2023 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A method comprising instantiating virtual routers (VRs) at each of a set of nodes that form a network. Each VR is coupled to the network and to a tenant of the node. The network comprises virtual links in an overlay network provisioned over an underlay network including servers of a public network. The method comprises configuring at least one VR to include a feedback control system comprising at least one objective function that characterizes the network. The method comprises configuring the VR to receive link state data of a set of virtual links of the virtual links, and control routing of a tenant traffic flow of each tenant according to a best route of the network determined by the at least one objective function using the link state data.
Opening claim text (preview).
What is claimed is: 1. A method comprising: instantiating a plurality of virtual routers (VRs) at each node of a plurality of nodes that form a network, wherein each VR is coupled to the network and to a tenant of a plurality of tenants of the node, wherein the network comprises a plurality of virtual links in an overlay network provisioned over an underlay network including servers of a public network, said instantiating comprising configuring each node to include a plurality of virtual machines (VMs), wherein each VM includes a VR of the plurality of VRs and corresponds to a tenant; configuring each VR to implement a routing control algorithm to define a plurality of routing behaviors based on an objective function; configuring at least one VR to include a feedback control system used to collect data for the objective function; and configuring the at least one VR to receive link state data of a set of virtual links of the plurality of virtual links and to use the link state and the collected data in the objective function to define the plurality of routing behaviors. 2. The method of claim 1 further comprising configuring each VM to isolate at least one of a control plane and a data plane of each tenant from each other tenant of the plurality of tenants. 3. The method of claim 1 , wherein the plurality of routing behaviors comprises routing a tenant traffic flow from an ingress node to an egress node of the plurality of nodes. 4. The method of claim 1 further comprising defining the plurality of routing behaviors to include each VR separately controlling routing of a tenant traffic flow of each tenant to at least one next node of the best route. 5. The method of claim 1 further comprising configuring the plurality of virtual links as a component of the overlay network that utilizes the underlay network for delivery of a tenant traffic flow. 6. The method of claim 1 further comprising configuring each VR to form in the network the set of virtual links corresponding to the tenant and configuring the set of virtual links to form a private tenant network corresponding to the tenant. 7. The method of claim 1 further comprising configuring the plurality of virtual links to include a plurality of single-hop virtual links coupled between each node of the plurality of nodes. 8. The method of claim 1 further comprising configuring the plurality of virtual links to include a plurality of sets of virtual links, wherein each set of virtual links forms a private tenant network of a corresponding tenant of the plurality of tenants. 9. The method of claim 8 further comprising configuring the network to include a plurality of private tenant networks corresponding to the plurality of tenants, wherein each private tenant network is isolated from each other private tenant network of the plurality of private tenant networks. 10. The method of claim 9 further comprising configuring the plurality of private tenant networks to maintain separation of multi-tenant traffic flows throughout the network. 11. The method of claim 9 further comprising configuring each private tenant network with a tenant configuration of a corresponding tenant to control routing of tenant traffic flows of the tenant. 12. The method of claim 11 further comprising configuring the tenant configuration to include traffic classification data, route data, and bandwidth. 13. The method of claim 1 further comprising configuring each routing control algorithm to determine at least one path through the network for routing a tenant traffic flow from an ingress node of the plurality of nodes to an egress node of the plurality of nodes. 14. The method of claim 1 further comprising configuring each routing behavior to correspond to a traffic classification of a tenant traffic flow. 15. The method of claim 1 further comprising configuring the VR to apply a corresponding objective function to the link state data and generate a link weight for each virtual link of the set of virtual links. 16. The method of claim 15 further comprising configuring the VR to determine the best route of a tenant traffic flow according to link weights of the set of virtual links. 17. The method of claim 16 further comprising defining the plurality of routing behaviors to include adapting the best route in response to changes in the link state data as processed by the corresponding objective function.
Address table lookup; Address filtering · CPC title
Alternate routing · CPC title
the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV · CPC title
Network analysis or design · CPC title
Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.