Independent network interfaces for virtual network environments

Patent metadata

Field	Value
Publication number	US-9602334-B2
Application number	US-201313747051-A
Country	US
Kind code	B2
Filing date	Jan 22, 2013
Priority date	Jan 22, 2013
Publication date	Mar 21, 2017
Grant date	Mar 21, 2017

Abstract

Embodiments of the invention relate to providing network independent network interfaces. One embodiment includes a networking system. The networking system includes a physical networking device connected to one or more underlying networks. A primary switch and a secondary switch are each connected to the physical networking device. A connectivity module creates a root interface for a first device. Virtual network interface cards (vNICs) are added to the root interface by the connectivity module. The root interface is a single access point for accessing the underlying networks. The first device is a virtual machine (VM) or a server with more than one network interface.

First claim

What is claimed is:

1. A networking system comprising:
a physical networking device; and
a processor coupled with the physical networking device, the processor configured to:
create a root interface for a first device;
add a plurality of virtual network interface cards (vNICs) to the root interface; and
use a bridge device in support of a kernel bridge infrastructure, the kernel bridge infrastructure is modified using netfilter hooks to prevent forwarding of broadcast packets between bridge ports and to set a source media access control (MAC) address of an egress packet to a corresponding MAC address of a vNIC; wherein:
the root interface is a single access point that is configured to access one or more underlying networks through the plurality of vNICs,
network operations are executed on the root interface for the first device based on receiving packets through the plurality of vNICs, and
the first device is a virtual machine (VM) or a server with more than one network interface.

2. The system of claim 1 , wherein:
the root interface is assigned network properties and comprises a logical parent interface for all vNICs;
processing is performed for the operating system (OS) of the first device as if the received packets are directly received on the root interface to enable the first device to perform the network operations independent of vNICs connectivity; and
each of the plurality of vNICs comprise child interfaces of the root interface.

3. The system of claim 2 , wherein the processor is configured to:
connect a vNIC added to the root interface to any virtual switch (VS) or VS port in the network system, wherein the vNICs connectivity is transparent to the underlying networks;
receive a packet comprising an address;
create a table to map the address to vNICs; and
select a vNIC to communicate to an underlying network based on a destination address, wherein broadcast packets generated in the root interface are forwarded to child vNICs without forwarding broadcast packets between the child vNICs.

4. The system of claim 3 , wherein the processor is configured to use a device driver to create the root interface, the device driver is configured to add other vNICs as child interfaces to the root interface, and a packet received on a child vNIC passes through the root interface prior to reaching a networking stack of the OS.

5. The system of claim 2 , wherein:
the bridge device is configured to create a bridge interface and to add and remove ports to and from the bridge interface,
the bridge interface is configured to act as the root interface,
the vNICs are added as ports of the bridge device and are child interfaces to the root interface, and
based on the logical relationship between the root interface and all of the child interfaces, tracking by the first device of the plurality of vNICs connectivity to the one or more underlying networks is unnecessary.

6. A computer program product comprising a computer readable hardware storage medium having program code embodied therewith, the program code being executable by a processor to implement a method comprising:
creating, by the processor, a root interface in a first device in a network system;
adding, by the processor, virtual network interface cards (vNICs) to the root interface; and
using, by the processor, a bridge device in support of a kernel bridge infrastructure, the kernel bridge infrastructure is modified using netfilter hooks to prevent forwarding of broadcast packets between bridge ports and to set a source media access control (MAC) address of an egress packet to a corresponding MAC address of a vNIC; wherein:
network operations are executed on the root interface for the first device based on receiving packets through the vNICs,
the root interface is a single access point for accessing a plurality of underlying networks via the vNICs, and

the first device is one of a virtual machine (VM), or a server with more than one network interfaces.

7. The computer program product of claim 6 , wherein the root interface comprises a logical parent interface for the vNICs, and the vNICs comprise child interfaces of the root interface.

8. The computer program product of claim 7 , wherein the method further comprises:
connecting, by the processor, a vNIC added to the root interface to a virtual switch (VS) or VS port in the network system, wherein the vNICs connectivity is transparent to the underlying networks;
receiving, by the processor, a packet comprising an address;
creating, by the processor, a table for mapping the address to vNICs;
selecting, by the processor, a vNIC for communicating to an underlying network based on a destination address; and
forwarding, by the processor, broadcast packets generated in the root interface to child vNICs without forwarding broadcast packets between the child vNICs.

9. The computer program product of claim 6 , wherein creating of the root interface comprises using a device driver, the device driver provides adding other vNICs as child interfaces to the root interface, a packet received on a child vNIC passes through the root device prior to reaching networking stack of an operating system (OS) of the first device, and processing is performed for the OS of the first device as if the received packets are directly received on the root interface to enable the first device to perform the network operations independent of the vNICs connectivity.

10. The computer program product of claim 6 , wherein creating of the root interface comprises:
providing, by the processor, the bridge device in support of the kernel bridge infrastructure;
managing, by the processor, bridge device operations using a bridge utility tool;
creating, by the processor, a bridge interface; and
adding and removing ports, by the processor, to and from the bridge interface, wherein the bridge interface acts as the root interface, and the vNICs are added as ports of the bridge device and are child interfaces to the root interface.

11. The system of claim 1 , further comprising a primary switch and a secondary switch each coupled to the physical networking device.

12. The system of claim 1 , wherein a vNIC is configured to learn and to maintain information about the one or more underlying networks in response to being added to the root interface.

13. The computer program product of claim 6 , wherein a vNIC is configured to learn and to maintain information about the one or more underlying networks in response to being added to the root interface.

Assignees

• IBM

Inventors

• Benny Stephan

Classifications

• H04L45/745

  Address table lookup; Address filtering · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• H04L49/70 Primary

  Virtual switches · CPC title

• H04L41/0213 Primary

  Standardised network management protocols, e.g. simple network management protocol [SNMP] · CPC title

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title