Chaining Virtual Network Function Services via Remote Memory Sharing

Patent metadata

Field	Value
Publication number	US-2019052735-A1
Application number	US-201816163961-A
Country	US
Kind code	A1
Filing date	Oct 18, 2018
Priority date	Dec 11, 2015
Publication date	Feb 14, 2019
Grant date	—

Abstract

Chaining virtual network functions is provided using a remote direct memory access in software-defined data centers in order to minimize latency. A data packet is processed using a virtual network function of the computer. The data packet is inserted into a shared memory pool for processing via remote direct memory access by a remote computer according to a network function of the remote computer that corresponds to the network function of the computer. The data packet is sent to a target destination device via a network in response to the remote computer marking the data packet as processed in the shared memory pool.

First claim

1 . A computer-implemented method for chaining virtual network functions, the computer-implemented method comprising:
processing, by a computer, a data packet received from a source client device using a network function of the computer; inserting, by the computer, the data packet into a shared memory pool for processing via remote direct memory access by a remote computer according to a network function of the remote computer that corresponds to the network function of the computer; and sending, by the computer, the data packet to a target destination device via a network in response to the remote computer marking the data packet as processed in the shared memory pool by the remote computer.

2 . The computer-implemented method of claim 1 further comprising:
allocating, by the computer, space in memory of the computer for the shared memory pool.

3 . The computer-implemented method of claim 1 further comprising:
exposing, by the computer, the shared memory pool to the remote direct memory access by the remote computer in order to share processing state and metadata between the network function of the computer and the network function of the remote computer using the shared memory pool.

4 . The computer-implemented method of claim 1 further comprising:
establishing, by the computer, a ring buffer in the shared memory pool to share data between the computer and the remote computer via the remote direct memory access.

5 . The computer-implemented method of claim 4 , wherein the remote computer polls the ring buffer in the shared memory pool of the computer via the network using the remote direct memory access for the data packet processed by the network function of the computer.

6 . The computer-implemented method of claim 4 , wherein the remote computer utilizes data packet location information included in the shared memory pool to locate the data packet in the ring buffer.

7 . The computer-implemented method of claim 1 further comprising:
starting, by the computer, a virtual machine corresponding to the network function of the computer;
exposing, by the computer, the shared memory pool to the virtual machine corresponding to the network function performed by the computer; and
processing, by the computer, the data packet using the virtual machine that corresponds to the network function of the computer.

8 . The computer-implemented method of claim 1 further comprising:
receiving, by the computer, via the network the data packet corresponding to the network function from a source client device sending the data packet to the target destination device via the network.

9 . The computer-implemented method of claim 1 , wherein the computer and the remote computer are coupled together by one of a software-defined cloud or a software-defined network.

10 . The computer-implemented method of claim 1 , wherein the network function of the computer is one of a plurality of different network functions performed by the computer.

11 . The computer-implemented method of claim 1 , wherein the network function of the computer is a router function that routes the data packet to the target destination device via the network.

12 . The computer-implemented method of claim 1 , wherein the network function of the remote computer that corresponds to the network function of the computer is a deep packet inspection function that identifies denial-of-service attacks on the target destination device.

13 . A computer system for chaining virtual network functions, the computer system comprising:
a bus system; a storage device connected to the bus system, wherein the storage device stores program instructions; and a processor connected to the bus system, wherein the processor executes the program instructions to:
process a data packet received from a source client device using a network function of the computer system;
insert the data packet into a shared memory pool for processing via remote direct memory access by a remote computer system according to a network function of the remote computer system that corresponds to the network function of the computer system; and
send the data packet to a target destination device via a network in response to the remote computer system marking the data packet as processed in the shared memory pool by the remote computer.

14 . The computer system of claim 13 , wherein the processor further executes the program instructions to:
allocate space in memory of the computer system for the shared memory pool.

15 . The computer system of claim 13 , wherein the processor further executes the program instructions to:
expose the shared memory pool to the remote direct memory access by the remote computer system in order to share processing state and metadata between the network function of the computer and the network function of the remote computer using the shared memory pool.

16 . A computer program product for chaining virtual network functions, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:
processing, by the computer, a data packet received from a source client device using a network function of the computer; inserting, by the computer, the data packet into a shared memory pool for processing via remote direct memory access by a remote computer according to a network function of the remote computer that corresponds to the network function of the computer; and sending, by the computer, the data packet to a target destination device via a network in response to the remote computer marking the data packet as processed in the shared memory pool by the remote computer.

17 . The computer program product of claim 16 further comprising:
allocating, by the computer, space in memory of the computer for the shared memory pool.

18 . The computer program product of claim 16 further comprising:
exposing, by the computer, the shared memory pool to the remote direct memory access by the remote computer in order to share processing state and metadata between the network function of the computer and the network function of the remote computer using the shared memory pool.

19 . The computer program product of claim 16 further comprising:
establishing, by the computer, a ring buffer in the shared memory pool to share data between the computer and the remote computer via the remote direct memory access.

20 . The computer program product of claim 19 , wherein the remote computer polls the ring buffer in the shared memory pool of the computer via the network using the remote direct memory access for the data packet processed by the network function of the computer.

Assignees

• IBM

Inventors

• Hwang Jinho
• Rajagopalan Shriram

Classifications

• H04L67/1097 Primary

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L67/42 Primary

  Electricity · mapped topic

• H04L67/01

  Protocols · CPC title