Chaining Virtual Network Function Services via Remote Memory Sharing

Patent metadata

Field	Value
Publication number	US-2017168985-A1
Application number	US-201514966058-A
Country	US
Kind code	A1
Filing date	Dec 11, 2015
Priority date	Dec 11, 2015
Publication date	Jun 15, 2017
Grant date	—

Abstract

Chaining virtual network functions is provided using a remote direct memory access in software-defined data centers in order to minimize latency. A data packet is processed using a virtual network function of the computer. The data packet is inserted into a shared memory pool for processing via remote direct memory access by a remote computer according to a network function of the remote computer that corresponds to the network function of the computer. The data packet is sent to a target destination device via a network in response to the remote computer marking the data packet as processed in the shared memory pool.

First claim

What is claimed is:

1 . A computer-implemented method for chaining virtual network functions, the computer-implemented method comprising:
processing, by a computer, a data packet using a network function of the computer; inserting, by the computer, the data packet into a shared memory pool for processing via remote direct memory access by a remote computer according to a network function of the remote computer that corresponds to the network function of the computer; and sending, by the computer, the data packet to a target destination device via a network in response to the remote computer marking the data packet as processed in the shared memory pool.

2 . The computer-implemented method of claim 1 further comprising:
allocating, by the computer, space in memory of the computer for the shared memory pool.

3 . The computer-implemented method of claim 1 further comprising:
exposing, by the computer, the shared memory pool to the remote direct memory access by the remote computer.

4 . The computer-implemented method of claim 1 further comprising:
establishing, by the computer, a ring buffer in the shared memory pool to share data between the computer and the remote computer via the remote direct memory access.

5 . The computer-implemented method of claim 4 , wherein the remote computer polls the ring buffer in the shared memory pool of the computer via the network using the remote direct memory access for the data packet processed by the network function of the computer.

6 . The computer-implemented method of claim 4 , wherein the remote computer utilizes data packet location information to locate the data packet in the ring buffer.

7 . The computer-implemented method of claim 1 further comprising:
starting, by the computer, a virtual machine corresponding to the network function of the computer;
exposing, by the computer, the shared memory pool to the virtual machine corresponding to the network function performed by the computer; and
processing, by the computer, the data packet using the virtual machine that corresponds to the network function of the computer.

8 . The computer-implemented method of claim 1 further comprising:
receiving, by the computer, via the network the data packet corresponding to the network function from a source client device sending the data packet to the target destination device via the network.

9 . The computer-implemented method of claim 1 , wherein the computer and the remote computer are coupled together by one of a software-defined cloud or a software-defined network.

10 . The computer-implemented method of claim 1 , wherein the network function of the computer is one of a plurality of different network functions performed by the computer.

11 . The computer-implemented method of claim 1 , wherein the network function of the computer is a router function that routes the data packet to the target destination device via the network.

12 . The computer-implemented method of claim 1 , wherein the network function of the remote computer that corresponds to the network function of the computer is a deep packet inspection function that identifies denial-of-service attacks on the target destination device.

13 . A computer system for chaining virtual network functions, the computer system comprising:
a bus system; a storage device connected to the bus system, wherein the storage device stores program instructions; and a processor connected to the bus system, wherein the processor executes the program instructions to:
process a data packet using a network function of the computer system;
insert the data packet into a shared memory pool for processing via remote direct memory access by a remote computer system according to a network function of the remote computer system that corresponds to the network function of the computer system; and
send the data packet to a target destination device via a network in response to the remote computer system marking the data packet as processed in the shared memory pool.

14 . The computer system of claim 13 , wherein the processor further executes the program instructions to:
allocate space in memory of the computer system for the shared memory pool.

15 . The computer system of claim 13 , wherein the processor further executes the program instructions to:
expose the shared memory pool to the remote direct memory access by the remote computer system.

16 . A computer program product for chaining virtual network functions, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:
processing, by the computer, a data packet using a network function of the computer; inserting, by the computer, the data packet into a shared memory pool for processing via remote direct memory access by a remote computer according to a network function of the remote computer that corresponds to the network function of the computer; and sending, by the computer, the data packet to a target destination device via a network in response to the remote computer marking the data packet as processed in the shared memory pool.

17 . The computer program product of claim 16 further comprising:
allocating, by the computer, space in memory of the computer for the shared memory pool.

18 . The computer program product of claim 16 further comprising:
exposing, by the computer, the shared memory pool to the remote direct memory access by the remote computer.

19 . The computer program product of claim 16 further comprising:
establishing, by the computer, a ring buffer in the shared memory pool to share data between the computer and the remote computer via the remote direct memory access.

20 . The computer program product of claim 19 , wherein the remote computer polls the ring buffer in the shared memory pool of the computer via the network using the remote direct memory access for the data packet processed by the network function of the computer.

Assignees

• IBM

Inventors

• Hwang Jinho
• Rajagopalan Shriram

Classifications

• H04L67/42

  Electricity · mapped topic

• H04L43/028

  by filtering · CPC title

• G06F15/167 Primary

  using a common memory, e.g. mailbox · CPC title

• H04L67/01

  Protocols · CPC title

• H04L67/1097 Primary

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title