Distributed methodology for peer-to-peer transmission of stateful packet flows

Patent metadata

Field	Value
Publication number	US-9374302-B2
Application number	US-201414262694-A
Country	US
Kind code	B2
Filing date	Apr 25, 2014
Priority date	Apr 26, 2013
Publication date	Jun 21, 2016
Grant date	Jun 21, 2016

Abstract

Techniques for enabling peer-to-peer transmission of stateful packet flows in a virtualized network environment are provided. In certain embodiments, a computer system receives a packet belonging to a stateful flow between a first virtual machine and a second virtual machine, accesses flow associating information (e.g., network address) from the packet, determines a second computer system comprising a state analysis owner for the stateful flow, using the flow associating information, and transmits the first packet to the second computer system.

First claim

What is claimed is:

1. A method comprising:
receiving, by a computer system, a first packet belonging to a stateful flow between a first virtual machine and a second virtual machine;
accessing, by the computer system, flow associating information from the first packet, the flow associating information comprising a source network address and a destination network address;
determining, by the computer system, a source host computer system using the source network address and a destination host computer system using the destination network address;
selecting, by the computer system, from among the source host computer system and the destination host computer system, the host computer system with a lower network address as a state analysis owner for the stateful flow; and
transmitting, by the computer system, the first packet to the selected host computer system.

2. The method of claim 1 , wherein the flow associating information further comprises one or more of session ID or query subset for the first packet belonging to the stateful flow.

3. The method of claim 1 , wherein the state analysis owner for the stateful flow performs run-to-completion state processing on the first packet.

4. The method of claim 1 , wherein the state analysis owner for the stateful flow performs routing functions for packets between the first virtual machine and the second virtual machine.

5. The method of claim 1 , wherein the stateful flow comprises one of firewall traffic, network address translation (NAT) traffic, or application layer classification for Quality of Service (QoS).

6. A non-transitory computer readable medium having stored thereon program code executable by a processor, the program code comprising:
code that causes the processor to receive a first packet belonging to a stateful flow between a first virtual machine and a second virtual machine;
code that causes the processor to access flow associating information from the first packet, the flow associating information comprising a source network address and a destination network address for the first packet;
code that causes the processor to determine that only one of the source network address and the destination network address is resolvable to a host computer system;
code that causes the processor to select the host computer system as a state analysis owner for the stateful flow; and
code that causes the processor to transmit the first packet to the selected host computer system.

7. The non-transitory computer readable medium of claim 6 , wherein the flow associating information further comprises one or more of session ID or query subset for the first packet belonging to the stateful flow.

8. The non-transitory computer readable medium of claim 6 , wherein the state analysis owner for the stateful flow performs run-to-completion state processing on the first packet.

9. The non-transitory computer readable medium of claim 6 , wherein the state analysis owner for the stateful flow performs routing functions for packets between the first virtual machine and the second virtual machine.

10. The non-transitory computer readable medium of claim 6 , wherein the stateful flow comprises one of firewall traffic, network address translation (NAT) traffic, or application layer classification for Quality of Service (QoS).

11. A computer system comprising:
a processor; and
a non-transitory computer readable medium having stored thereon executable program code which, when executed by the processor, causes the processor to:
receive a first packet belonging to a stateful flow between a first virtual machine and a second virtual machine;
access flow associating information from the first packet, the flow associating information comprising a source network address and a destination network address;
determine a source host computer system using the source network address and a destination host computer system using the destination network address;
select, from among the source host computer system and the destination host computer system, the host computer system with a higher network address as a state analysis owner for the stateful flow; and
transmit the first packet to the selected host computer system.

12. The computer system of claim 11 , wherein the flow associating information further comprises one or more of session ID or query subset for the first packet belonging to the stateful flow.

13. The computer system of claim 11 , wherein the state analysis owner for the stateful flow is further configured to perform run-to-completion state processing on the first packet.

14. The computer system of claim 11 , wherein the stateful flow comprises one of firewall traffic, network address translation (NAT) traffic, or application layer classification for Quality of Service (QoS).

15. A method comprising:
receiving, by a computer system, a first packet belonging to a stateful flow between a first virtual machine and a second virtual machine;
accessing, by the computer system, flow associating information from the first packet, the flow associating information comprising a source network address and a destination network address;
determining, by the computer system, a source host computer system using the source network address and a destination host computer system using the destination network address;
selecting, by the computer system, from among the source host computer system and the destination host computer system, the host computer system with a higher network address as a state analysis owner for the stateful flow; and
transmitting, by the computer system, the first packet to the selected host computer system.

16. A method comprising:
receiving, by a computer system, a first packet belonging to a stateful flow between a first virtual machine and a second virtual machine;
accessing, by the computer system, flow associating information from the first packet, the flow associating information comprising a source network address and a destination network address;
determining, by the computer system, that only one of the source network address and the destination network address is resolvable to a host computer system;
selecting, by the computer system, the host computer system with the resolvable network address as a state analysis owner for the stateful flow; and
transmitting, by the computer system, the first packet to the selected host computer system.

17. A computer system comprising:
a processor; and
a non-transitory computer readable medium having stored thereon executable program code which, when executed by the processor, causes the processor to:
receive a first packet belonging to a stateful flow between a first virtual machine and a second virtual machine;
access flow associating information from the first packet, the flow associating information comprising a source network address and a destination network address;
determine a source host computer system using the source network address and a destination host computer system using the destination network address;
select from among the source host computer system and the destination host computer system, the host computer system with a lower network address as a state analysis owner for the stateful flow; and
transmit the first packet to the selected host computer system.

18. The computer system of claim 17 , wherein the state analysis owner for the stateful flow performs one or more of run-to-completion state processing on the first packet or routing functions for packets between the first virtual machine and the second virtual mach

Assignees

• Brocade Comm Systems Inc

Inventors

• Bays Robert
• Larson Mike
• Hemminger Stephen

Classifications

• H04L47/10

  Flow control; Congestion control · CPC title

• H04L45/74 Primary

  Address processing for routing · CPC title

• H04L67/104 Primary

  Peer-to-peer [P2P] networks · CPC title

• H04L47/2441

  relying on flow classification, e.g. using integrated services [IntServ] · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title