Adaptive source port generation in overlay networks

Patent metadata

Field	Value
Publication number	US-11895032-B2
Application number	US-202217666415-A
Country	US
Kind code	B2
Filing date	Feb 7, 2022
Priority date	Jul 9, 2020
Publication date	Feb 6, 2024
Grant date	Feb 6, 2024

Abstract

In some embodiments, a method determines when a packet is fragmented into multiple fragmented packets in a flow between a first workload and a second workload. The method switches from generating an outer source port in the outer header using layer 4 information from the inner header to using layer 3 information from the inner header. A fragmented packet is encapsulated with the outer header that includes an outer source port value that is generated using the layer 3 information. The method initiates a process to determine when to switch back to using layer 4 information from the inner header to generate the outer source port. When it is determined to switch back to using layer 4 information, the method switches back to using layer 4 information from the inner header to generate the source port in the outer header of a packet from the first workload.

First claim

What is claimed is:

1. A method comprising:
determining a packet is fragmented into multiple fragmented packets in a flow between a first workload and a second workload, wherein the multiple fragmented packets include an inner header that is encapsulated with an outer header;
generating an outer source port in the outer header using layer 3 information from the inner header, wherein the layer 3 information is associated with a source address of the first workload and a destination address of the second workload;
encapsulating a fragmented packet with the outer header, wherein the outer header includes an outer source port value that is generated using the layer 3 information; and
using information from the inner header to generate the source port in the outer header of a packet from the first workload.

2. The method of claim 1 , further comprising:
determining a status of the flow that indicates the flow considered ended; and
based at least on the status, using layer 4 information to generate the source port.

3. The method of claim 1 , further comprising:
setting a timer;
analyzing a type of packets being sent in the flow, wherein the type includes a fragmented packet and a non-fragmented packet; and
determining to use layer 4 information using the timer based on the analyzing.

4. The method of claim 3 , further comprising:
adding an amount of time to the timer when a fragmented packet is encountered, wherein using layer 4 information is based on the timer expiring.

5. The method of claim 1 , wherein the process analyzes a type of packets being sent in the flow and predicts a type of packet, and wherein using layer 4 information comprises:
determining to use layer 4 information based at least on a prediction from the predicted type of packet.

6. The method of claim 1 , wherein:
the flow is associated with a first flow,
a second flow includes a same outer source port when using the layer 3 information of the source address associated with the first workload and the destination address associated with the second workload from the inner header to generate the outer source port, and
the second flow includes a different outer source port when using the layer 3 information and the layer 4 information to generate the outer source port.

7. The method of claim 6 , wherein:
the first flow is associated with a first application in the first workload, the first application being associated with a first inner source port, and
the second flow is associated with a second application in the first workload, the second application being associated with a second inner source port.

8. A non-transitory computer-readable storage medium comprising computer-executable instructions, that when executed by one or more processors, cause the one or more processors to perform the following operations:
determining a packet is fragmented into multiple fragmented packets in a flow between a first workload and a second workload, wherein the multiple fragmented packets include an inner header that is encapsulated with an outer header;
generating an outer source port in the outer header using layer 3 information from the inner header, wherein the layer 3 information is associated with a source address of the first workload and a destination address of the second workload;
encapsulating a fragmented packet with the outer header, wherein the outer header includes an outer source port value that is generated using the layer 3 information; and
using information from the inner header to generate the source port in the outer header of a packet from the first workload.

9. The non-transitory computer-readable storage medium of claim 8 , wherein the computer-executable instructions further cause the one or more processors to perform:
determining a status of the flow that indicates the flow considered ended; and
removing an indication to use layer 3 information to generate the source port.

10. The non-transitory computer-readable storage medium of claim 8 , wherein the computer-executable instructions further cause the one or more processors to perform:
setting a timer;
analyzing a type of packets being sent in the flow, wherein the type includes a fragmented packet and a non-fragmented packet; and
determining to use layer 4 information based at least one the timer based and the analyzing.

11. The non-transitory computer-readable storage medium of claim 10 , further operable for:
adding an amount of time to the timer when a fragmented packet is encountered, wherein using layer 4 information is based on the timer expiring.

12. The non-transitory computer-readable storage medium of claim 8 , wherein the process analyzes a type of packets being sent in the flow and predicts a type of packet, and using layer 4 information comprises:
determining to use layer 4 information based at least on a prediction from the predicted type of packet.

13. The non-transitory computer-readable storage medium of claim 8 , wherein:
the flow is associated with a first flow,
a second flow includes a same outer source port when using the layer 3 information of the source address associated with the first workload and the destination address associated with the second workload from the inner header to generate the outer source port, and
the second flow includes a different outer source port when using the layer 3 information and the layer 4 information to generate the outer source port.

14. The non-transitory computer-readable storage medium of claim 13 , wherein:
the first flow is associated with a first application in the first workload, the first application being associated with a first inner source port, and
the second flow is associated with a second application in the first workload, the second application being associated with a second inner source port.

15. An apparatus comprising:
one or more computer processors; and
a non-transitory computer-readable storage medium comprising instructions, that when executed, control the one or more computer processors to be operable for:
determining a packet is fragmented into multiple fragmented packets in a flow between a first workload and a second workload, wherein the fragmented packets include an inner header that is encapsulated with an outer header;
generating an outer source port in the outer header using layer 3 information from the inner header, wherein the layer 3 information is associated with a source address of the first workload and a destination address of the second workload;
encapsulating a fragmented packet with the outer header, wherein the outer header includes an outer source port value that is generated using the layer 3 information; and
using information from the inner header to generate the source port in the outer header of a packet from the first workload.

16. The apparatus of claim 15 , wherein using layer 4 information comprises:
determining a status of the flow that indicates the flow considered ended; and
removing an indication to use layer 3 information to generate the source port.

17. The apparatus of claim 15 , wherein using layer 4 information comprises:
setting a timer;
analyzing a type of packets being sent in the flow, wherein the type includes a fragmented packet and a non-fragmented packet; and
determining to use layer 4 information based at least one the timer based and the analyzing.

18. The apparatus of claim 17 , further operable for:
adding an amount of time to the timer when a fragmented packet is encountered, wherein using layer 4 information is based at least on t

Assignees

• VMware LLC
• Vmware Inc

Inventors

• Mathew Subin Cyriac
• Devireddy Dileep
• Tessmer Alexander
• Jiang Wenyi
• Raman Chidambareswaran

Classifications

• H04L47/125 Primary

  by balancing the load, e.g. traffic engineering · CPC title

• H04L45/74

  Address processing for routing · CPC title

• H04L69/166 Primary

  IP fragmentation; TCP segmentation · CPC title

• H04L69/325

  in the network layer [OSI layer 3], e.g. X.25 (H04L69/16 takes precedence) · CPC title

• H04L69/326

  in the transport layer [OSI layer 4] (H04L69/16 takes precedence) · CPC title