System and method for routing network frames between virtual machines

Patent metadata

Field	Value
Publication number	US-2016350151-A1
Application number	US-201615193772-A
Country	US
Kind code	A1
Filing date	Jun 27, 2016
Priority date	Dec 10, 2012
Publication date	Dec 1, 2016
Grant date	—

Abstract

VM-to-VM switching is an enhancement to Ethernet card technology that enables virtual machines on the same hardware server platform to switch Ethernet Frames (or IP Packets) directly without exiting the server or using a slower and bandwidth limited software process in the hypervisor. The method does not require new network switch hardware. The invention creates a unique switching ability that allows users to modify parameters applied to Ethernet Frames passing between Virtual Machines, such as quality of service or firewall rules without adding considerable latency to the switching process. The hardware switching method enriches the functionality of the Ethernet Card and permits more advanced switching architectures in servers and thus increases density of VMs and reduces complexity of planning the location of virtual machines in a virtualized infrastructure.

First claim

What is claimed is:

1 . A method of routing network frames between virtual machines on a common physical server comprising a plurality of central processing units (CPUs), the method comprising:
associating a virtual machine-to-virtual machine (VM-to-VM) switch embedded in a network interface card (NIC) with a physical port of the NIC; establishing two or more virtual ports of the VM-to-VM switch; associating at least one virtual machine (VM) of a first CPU with a first one of the virtual ports of the VM-to-VM switch and associating at least one virtual machine (VM) of a second CPU with a second one of the virtual ports of the VM-to-VM switch, wherein the first CPU and the second CPU are on a common physical server; assigning Quality of Service (QoS) to network frames received from the physical port of the NIC and the virtual ports of the VM-to-VM switch, using hardware in the VM-to-VM switch; and routing network frames between the VMs associated with the virtual ports through the VM-to-VM switch based upon the QoS assigned by the VM-to-VM switch.

2 . The method of claim 1 , wherein associating the one VM with each of the virtual ports of the VM-to-VM switch further comprises storing the association between the VMs and the virtual ports of the VM-to-VM switch in a look-up table.

3 . The method of claim 1 , wherein associating one VM with each of the virtual ports of the VM-to-VM switch further comprises:
identifying a virtual media access control (vMAC) address of each VM; and associating the vMAC address of the VM with one of the virtual ports of the VM-to-VM switch.

4 . The method of claim 1 , wherein routing network frames between the VMs associated with the virtual ports through the VM-to-VM switch further comprises:
storing the association between the VMs and the virtual ports of the VM-to-VM switch in a look-up table; receiving a network frame originating from a source VM, at the VM-to-VM switch, the network frame identifying a destination VM; accessing the look-up table to identify the virtual port associated with the destination VM and routing the network frame to the destination VM through the VM-to-VM switch.

5 . The method of claim 1 , wherein the VM-to-VM Switch is a single root I/O virtualization (SR-IOV) enabled switch.

6 . The method of claim 1 , wherein the VM-to-VM switch is a single root I/O virtualization (SR-IOV) enabled switch, and associating one VM with each of the virtual ports of the VM-to-VM switch further comprises:
assigning a virtual Media Access Control (vMAC) address to the VM; associating the assigned vMAC addresses with a Virtual Function (VF) associated with the Physical Function (PF) of the SR-IOV enabled switch; and storing the assigned vMAC address and the associated VF in a look-up table.

7 . The method of claim 3 , wherein the VM-to-VM switch is a single root I/O virtualization (SR-IOV) enabled switch and wherein each vMAC address includes an Organizationally Unique Identifier (OUI) identifying a Physical Function (PF) of the SR-IOV enabled switch.

8 . The method of claim 1 , wherein the VM-to-VM switch is a single root I/O virtualization (SR-IOV) enabled switch and routing network frames between the VMs associated with the virtual ports through the VM-to-VM switch further comprises:
receiving a network frame originating from a source VM, the network frame including a vMAC address of the source VM and a vMAC address of the destination VM, wherein each vMAC address includes an Organizationally Unique Identifier (OUI) identifying a Physical Function (PF) of the SR-IOV enabled switch; comparing the vMAC address of the source VM and the vMAC address of the destination VM of the network frame; and if the OUI of the vMAC address of the source VM is equal to the OUI of the vMAC address of the destination VM of the network frame, using the vMAC address of the destination VM to identify the VF associated with the destination VM; and routing the network frame to the VF associated with the destination VM.

9 . The method of claim 1 , further comprising prioritizing the network frames prior to routing the network frames.

10 . The method of claim 1 , further comprising assigning security features to the network frames using the VM-to-VM switch.

11 . The method of claim 1 , further comprising monitoring the network frames using the VM-to-VM switch.

12 . The method of claim 1 , wherein the VMs associated with the virtual ports are located on different virtual local area networks (VLANs), the method further comprising utilizing a router protocol of the VM-to-VM switch to route the network frames between the VMs associated with the virtual ports.

13 . The method of claim 1 , further comprising:
intercepting a network frame between a source VM and a destination VM; identifying the virtual local network identification (VLAN ID) of the source VM within the intercepted network frame; rewriting the VLAN ID of the source VM in the intercepted network frame to the VLANID of the destination VM; and routing the intercepted network frame from the source VM to the destination VM.

14 . A virtual machine-to-virtual machine (VM-to-VM) switch embedded in a network interface card (NIC), the switch comprising:
initialization circuitry configured for associating the virtual machine-to-virtual machine (VM-to-VM) switch with a physical port of the NIC, for establishing two or more virtual ports of the VM-to-VM switch and for associating at least one virtual machine (VM) of a first CPU with a first one of the virtual ports of the VM-to-VM switch and associating at least one virtual machine (VM) of a second CPU with a second one of the virtual ports of the VM-to-VM switch, wherein the first CPU and the second CPU are on a common physical server; circuitry for assigning Quality of Service (QoS) to network frames received from the physical port of the NIC and the virtual ports of the VM-to-VM switch; and routing circuitry configured for routing network frames between the VMs associated with the virtual ports through the VM-to-VM switch based upon the QoS assigned by the circuitry of the VM-to-VM switch.

15 . The VM-to-VM switch of claim 14 , wherein the initialization circuitry is further configured for identifying a virtual media access control (vMAC) address of each VM and for associating the vMAC address of the VM with one of the virtual ports of the VM-to-VM switch.

16 . The VM-to-VM switch of claim 14 , wherein the routing circuitry is further configured for receiving a network frame originating from a source VM, at the VM-to-VM switch, the network frame identifying a destination VM, and for accessing the look-up table to identify the virtual port associated with the destination VM and routing the network frame to the destination VM through the VM-to-VM switch.

17 . The VM-to-VM switch of claim 14 , wherein the VM-to-VM switch is a single root I/O virtualization (SR-IOV) enabled switch and the initialization circuitry is further configured for assigning a virtual Media Access Control (vMAC) address to the VM, for associating the assigned vMAC addresses with a Virtual Function (VF) associated with the Physical Function (PF) of the SR-IOV enabled switch and for storing the assigned vMAC address and the associated VF in a look-up table.

18 . The VM-to-VM switch of claim 19 , wherein the VM-to-VM switch is a single root I/O virtualization (SR-IOV) switch and wherein each vMAC address includes an Organizationally Unique Identifier (OUI) identifying a Physical Function (PF) of the SR-IOV enabled switc

Assignees

• Univ Central Florida Res Found Inc

Inventors

• Zou Changchun
• Bardgett Jim

Classifications

• H04L45/745

  Address table lookup; Address filtering · CPC title

• H04L45/302

  Route determination based on requested QoS · CPC title

• H04L45/586

  of virtual routers · CPC title

• H04L45/66

  Layer 2 routing, e.g. in Ethernet based MAN's · CPC title

• H04L67/322

  Electricity · mapped topic