Virtual network data control with network interface card

Patent metadata

Field	Value
Publication number	US-9515933-B2
Application number	US-201414501501-A
Country	US
Kind code	B2
Filing date	Sep 30, 2014
Priority date	May 30, 2014
Publication date	Dec 6, 2016
Grant date	Dec 6, 2016

Abstract

Embodiments relate to managing data flows through a virtual network. An aspect includes receiving, by a network interface card (NIC) connected to a hypervisor of a source computer, flows of data packets from one or more virtual machines managed by the hypervisor. The aspect includes running, by the NIC, an overlay network protocol to encapsulate the data packets, and to manage the flow of data through tunnels for the virtual network to a destination computer based on the overlay protocol, the tunnels transmitting the data packets through an underlying physical network underlying the virtual network.

First claim

What is claimed is:

1. A computer implemented method for controlling data in a virtual network, the method comprising:
receiving, by a network interface card (NIC) connected to a hypervisor of a source computer, flows of data packets from one or more virtual machines managed by the hypervisor; and
encapsulating the data packets, by the NIC, based on an overlay network protocol and managing the flow of data packets through tunnels for the virtual network to a destination computer based on the overlay network protocol, said tunnels for transmitting the data packets through an underlying physical network underlying the virtual network,
wherein managing the flow of data packets through the tunnels comprises applying, by the NIC, a data flow strategy to the tunnels in the underlying physical network by assigning a higher priority to a first tunnel and a lower priority to a second tunnel, and reducing a transmission rate of the flow of data packets through the first tunnel less than through the second tunnel based on detecting congestion in the underlying physical network or between one of the tunnels and the destination computer.

2. The computer implemented method of claim 1 , wherein the overlay network protocol is a virtual extensible local area network (VXLAN) protocol.

3. The computer implemented method of claim 1 , wherein managing the flow of data packets through the tunnels comprises:
identifying, by the NIC, a VXLAN identifier (ID) of the data packets; and
routing the data packets through the underlying physical network based on at least one of the VXLAN ID and outer packet headers of the data packets.

4. The computer implemented method of claim 1 , wherein managing the flow of data packets through the tunnels comprises directing multiple different flows of data packets through a same tunnel among the tunnels.

5. The computer implemented method of claim 1 , wherein managing the flow of data packets through the tunnels comprises identifying the data packets designated to flow through each tunnel, respectively, and managing the flows of data packets through each tunnel separately from each other tunnels.

6. A computer program product for implementing a virtual network control system, the computer program product comprising:
a tangible, non-transitory, storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising:
receiving, by a network interface card (NIC) connected to a hypervisor of a source computer, flows of data packets from one or more virtual machines managed by the hypervisor; and
encapsulating the data packets, by the NIC, based on an overlay network protocol and managing the flow of data packets through tunnels through an underlying physical network underlying a virtual network to a destination computer based on the overlay network protocol,
wherein managing the flow of data packets through the tunnels comprises applying, by the NIC, a data flow strategy to the tunnels in the underlying physical network by assigning a higher priority to a first tunnel and a lower priority to a second tunnel, and reducing a transmission rate of the flow of data packets through the first tunnel less than through the second tunnel based on detecting congestion in the underlying physical network or between one of the tunnels and the destination computer.

7. The computer program product of claim 6 , further comprising:
creating, by the NIC, the tunnels through the underlying physical network from the source computer to the destination computer.

8. The computer program product of claim 6 , wherein managing the flow of data packets through the tunnels comprises:
identifying, by the NIC, a virtual extensible local area network (VXLAN) identifier (ID) of the data packets; and
routing the data packets through the underlying physical network based on at least one of the VXLAN ID or outer packet headers of the data packets.

9. The computer program product of claim 6 , wherein managing the flow of data packets through the tunnels comprises directing multiple different flows of data packets through a same tunnel among the tunnels.

10. The computer program product of claim 6 , wherein managing the flow of data packets through the tunnels comprises identifying the data packets designated to flow through each tunnel, respectively, and managing the flows of data packets through each tunnel separately from each other tunnels.

11. A computer program product for implementing a virtual network control system, the computer program product comprising:
a tangible, non-transitory, storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising:
receiving, by a network interface card (NIC) connected to a hypervisor of a source computer, flows of data packets from one or more virtual machines managed by the hypervisor; and
encapsulating the data packets, by the NIC, based on an overlay network protocol and managing the flow of data packets through tunnels through an underlying physical network underlying a virtual network to a destination computer based on the overlay network protocol,
wherein managing the flow of data packets through the tunnels comprises assigning a higher priority to a first tunnel and a lower priority to a second tunnel, and setting a transmission rate of the flow of data packets through the first tunnel to less than through the second tunnel based on detecting congestion in the first tunnel.

Assignees

• IBM

Inventors

• Decusatis Casimer M
• Kamble Keshav G

Classifications

• H04L12/4641 Primary

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• H04L47/122 Primary

  by diverting traffic away from congested entities · CPC title

• H04L12/4633

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L47/12

  Avoiding congestion; Recovering from congestion · CPC title