Packet processing using service chains

Patent metadata

Field	Value
Publication number	US-2020021518-A1
Application number	US-201816033203-A
Country	US
Kind code	A1
Filing date	Jul 12, 2018
Priority date	Jul 12, 2018
Publication date	Jan 16, 2020
Grant date	—

Abstract

Example methods are provided for a host to perform packet processing using a service chain in a software-defined networking (SDN) environment. The method may comprise establishing a datapath between a first virtualized computing instance and a second virtualized computing instance in the service chain, the datapath bypassing a forwarding element to which the first virtualized computing instance and the second virtualized computing instance are connected. The method may also comprise: the first virtualized computing instance obtaining a packet that requires processing by the service chain, and performing packet processing according to a first service. The method may further comprise: the second virtualized computing instance obtaining the processed packet via the datapath, and performing packet processing according to a second service.

First claim

1 . A method for a host to perform packet processing using a service chain in a software-defined networking (SDN) environment, wherein the service chain includes multiple virtualized computing instances supported by the host, the method comprising:
establishing a datapath between a first virtualized computing instance and a second virtualized computing instance in the service chain,
wherein the datapath bypasses a forwarding element to which the first virtualized computing instance and the second virtualized computing instance are connected,
wherein establishing the datapath comprises establishing the datapath between a first virtual component implemented by the first virtualized computing instance and a second virtual component implemented by the second virtualized computing instance, and
wherein establishing the datapath comprises, in response to receiving configuration information from a manager, configuring the first virtualized computing instance to implement the first virtual component, and the second virtualized computing instance to implement the second virtual component;
obtaining, by the first virtualized computing instance, a packet that requires processing by the service chain; performing, by the first virtualized computing instance, packet processing on the packet according to a first service; obtaining, by the second virtualized computing instance, the processed packet via the datapath established with the first virtualized computing instance; and performing, by the second virtualized computing instance, packet processing on the obtained processed packet according to a second service.

2 . (canceled)

3 . The method of claim 1 , wherein establishing the datapath comprises:
establishing the datapath by mapping a transmit (TX) queue of the first virtual component to a receive (RX) queue of the second virtual component.

4 . The method of claim 3 , wherein the first virtualized computing instance performing packet processing comprises:
writing, by the first virtualized computing instance, the processed packet to the TX queue of the first virtual component.

5 . The method of claim 3 , wherein the second virtualized computing instance obtaining the processed packet comprises:
polling, by the second virtualized computing instance, the TX queue of the first virtual component to obtain the processed packet from the first virtualized computing instance.

6 . (canceled)

7 . The method of claim 1 , wherein establishing the datapath comprises:
generating, by a first guest agent implemented by the first virtualized computing instance, first configuration items to configure the first virtual component; and generating, by a second guest agent implemented by the second virtualized computing instance, second configuration items to configure the second virtual component.

8 . A non-transitory computer-readable storage medium that includes a set of instructions which, in response to execution by a processor of a host, cause the processor to perform a method of packet processing using a service chain in a software-defined networking (SDN) environment, wherein the service chain includes multiple virtualized computing instances supported by the host, and wherein the method comprises:
establishing a datapath between a first virtualized computing instance and a second virtualized computing instance in the service chain,
wherein the datapath bypasses a forwarding element to which the first virtualized computing instance and the second virtualized computing instance are connected,
wherein establishing the datapath comprises establishing the datapath between a first virtual component implemented by the first virtualized computing instance and a second virtual component implemented by the second virtualized computing instance, and
wherein establishing the datapath comprises, in response to receiving configuration information from a manager, configuring the first virtualized computing instance to implement the first virtual component, and the second virtualized computing instance to implement the second virtual component;
obtaining, by the first virtualized computing instance, a packet that requires processing by the service chain; performing, by the first virtualized computing instance, packet processing on the packet according to a first service; obtaining, by the second virtualized computing instance, the processed packet via the datapath established with the first virtualized computing instance; and performing, by the second virtualized computing instance, packet processing on the obtained processed packet according to a second service.

9 . (canceled)

10 . The non-transitory computer-readable storage medium of claim 8 , wherein establishing the datapath comprises:
establishing the datapath by mapping a transmit (TX) queue of the first virtual component to a receive (RX) queue of the second virtual component.

11 . The non-transitory computer-readable storage medium of claim 10 , wherein the first virtualized computing instance performing packet processing comprises:
writing, by the first virtualized computing instance, the processed packet to the TX queue of the first virtual component.

12 . The non-transitory computer-readable storage medium of claim 10 , wherein the second virtualized computing instance obtaining the processed packet comprises:
polling, by the second virtualized computing instance, the TX queue of the first virtual component to obtain the processed packet from the first virtualized computing instance.

13 . (canceled)

14 . The non-transitory computer-readable storage medium of claim 8 , wherein establishing the datapath comprises:
generating, by a first guest agent implemented by the first virtualized computing instance, first configuration items to configure the first virtual component; and generating, by a second guest agent implemented by the second virtualized computing instance, second configuration items to configure the second virtual component.

15 . A host configured to perform packet processing using a service chain in a software-defined networking (SDN) environment, the host comprising:
a processor; and a non-transitory computer-readable medium having stored thereon instructions that, in response to execution by the processor, cause the processor to:
establish a datapath between a first virtualized computing instance and a second virtualized computing instance in the service chain,
wherein the datapath bypasses a forwarding element to which the first virtualized computing instance and the second virtualized computing instance are connected,
wherein the datapath is established between a first virtual component implemented by the first virtualized computing instance and a second virtual component implemented by the second virtualized computing instance, and
wherein establishment of the datapath comprises, in response to receipt of configuration information from a manager, configuration of the first virtualized computing instance to implement the first virtual component, and the second virtualized computing instance to implement the second virtual component;

obtain, by the first virtualized computing instance, a packet that requires processing by the service chain;
perform, by the first virtualized computing instance, packet processing on the packet according to a first service;
obtain, by the second virtualized computing instance, the processed packet via the datapath established with the first virtualized computing instance; and
perform, by the second virtualized computing instance, packet processing on the obtained processed packet according to a

Assignees

• Vmware Inc

Inventors

• Yan Miao
• Sun Keyong
• Zhao Dousheng
• Wang Yonggang

Classifications

• G06F9/45558 Primary

  Hypervisor-specific management and integration aspects · CPC title

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• H04L69/22

  Parsing or analysis of headers · CPC title

• H04L49/70

  Virtual switches · CPC title

• H04L45/64

  using an overlay routing layer · CPC title