Private allocated networks over shared communications infrastructure

Patent metadata

Field	Value
Publication number	US-2019260858-A1
Application number	US-201916403518-A
Country	US
Kind code	A1
Filing date	May 4, 2019
Priority date	Sep 30, 2009
Publication date	Aug 22, 2019
Grant date	—

Abstract

Methods and systems for implementing private allocated networks in a virtual infrastructure are presented. One method operation creates virtual switches in one or more hosts in the virtual infrastructure. Each port in the virtual switches is associated with a private allocated network (PAN) from a group of possible PANs. In one embodiment, one or more PANs share the same physical media for data transmission. The intranet traffic within each PAN is not visible to nodes that are not connected to the each PAN. In another operation, the method defines addressing mode tables for the intranet traffic within each PAN. The entries in the addressing mode tables define addressing functions for routing the intranet traffic between the virtual switches, and different types of addressing functions are supported by the virtual switches.

First claim

1 - 23 . (canceled)

24 . A method comprising:
receiving a packet from a virtual machine that has an address in an overlay network that is implemented by encapsulating packets transmitted in a physical network, wherein the packet comprises a first destination address in the overlay network; making a forwarding decision for the packet based on the overlay network destination address; encapsulating the packet using a second destination address in the physical network; and transmitting the encapsulated packet to the physical network that processes the packet using the second destination address.

25 . The method of claim 24 , wherein the method is performed by a virtual switch executing on a host computer that hosts the virtual machine.

26 . The method of claim 25 , wherein the overlay network is a first overlay network, wherein a plurality of overlay networks are implemented by the virtual switch.

27 . The method of claim 24 , wherein making the forwarding decision comprises:
from a plurality of addressing tables that store plurality of sets of forwarding rules for a plurality of different overlay networks, selecting an addressing table for the overlay network associated with the received packet; making the forwarding decision for the packet based on a forwarding rule in the selected addressing table.

28 . The method of claim 27 , wherein the different overlay networks serve as different private allocated networks (PANs) that connect different sets of end machines, and packet traffic exchanged between the set of end machines of one PAN are not visible to the set of end machines connected by another PAN.

29 . The method of claim 24 , wherein making the forwarding decision comprises looking up the first destination address in an addressing table, wherein the addressing mode table specifies to encapsulate the packet using the second destination address.

30 . The method of claim 24 , wherein the second destination address is an address of a host computer that hosts a virtual machine having the first destination address in the overlay network.

31 . The method of claim 24 , wherein encapsulating the packet comprises adding metadata identifying the overlay network to the packet.

32 . The method of claim 24 , wherein the encapsulating the packet comprises encapsulating the packet with an layer 3 encapsulation header for the overlay network.

33 . The method of claim 24 , wherein the encapsulating the packet comprises encapsulating the packet with an layer 2 encapsulation header for the overlay network.

34 . A non-transitory machine-readable medium storing a program for execution by at least one processing unit, the program comprising sets of instructions for:
receiving a packet from a virtual machine that has an address in an overlay network that is implemented by encapsulating packets transmitted in a physical network, wherein the packet comprises a first destination address in the overlay network; making a forwarding decision for the packet based on the overlay network destination address; encapsulating the packet using a second destination address in the physical network; and transmitting the encapsulated packet to the physical network that processes the packet using the second destination address.

35 . The non-transitory machine-readable medium of claim 34 , wherein the program is a virtual switch for execution by at least one processing unit of a host computer that hosts the virtual machine.

36 . The non-transitory machine-readable medium of claim 35 , wherein the overlay network is a first overlay network, wherein a plurality of overlay networks are implemented by the virtual switch.

37 . The non-transitory machine-readable medium of claim 34 , wherein the set of instructions for making the forwarding decision comprises sets of instructions for:
selecting, from a plurality of addressing tables that store plurality of sets of forwarding rules for a plurality of different overlay networks, an addressing table for the overlay network associated with the received packet; making the forwarding decision for the packet based on a forwarding rule in the selected addressing table.

38 . The non-transitory machine-readable medium of claim 37 , wherein the different overlay networks serve as different private allocated networks (PANs) that connect different sets of end machines, and packet traffic exchanged between the set of end machines of one PAN are not visible to the set of end machines connected by another PAN.

39 . The non-transitory machine-readable medium of claim 34 , wherein the set of instructions for making the forwarding decision comprises a set of instructions for looking up the first destination address in an addressing mode table, wherein the addressing mode table specifies to encapsulate the packet using the second destination address.

40 . The non-transitory machine-readable medium of claim 34 , wherein the second destination address is an address of a host computer that hosts a virtual machine having the first destination address in the overlay network.

41 . The non-transitory machine-readable medium of claim 34 , wherein the set of instructions for encapsulating the packet comprises a set of instructions for adding metadata identifying the overlay network to the packet.

42 . The non-transitory machine-readable medium of claim 34 , wherein the set of instructions for encapsulating the packet comprises a set of instructions for encapsulating the packet with an layer 3 encapsulation header for the overlay network.

43 . The non-transitory machine-readable medium of claim 34 , wherein the set of instructions for encapsulating the packet comprises a set of instructions for encapsulating the packet with an layer 2 encapsulation header for the overlay network.

Assignees

• Nicira Inc

Inventors

• Lambeth W Andrew
• Dalal Anupam
• Deianov Borislav
• Xiao Jun

Classifications

• H04L49/70

  Virtual switches · CPC title

• H04L49/354

  for supporting virtual local area networks [VLAN] · CPC title

• H04L69/325

  in the network layer [OSI layer 3], e.g. X.25 (H04L69/16 takes precedence) · CPC title

• H04L12/4641

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• H04L12/4633

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title