Managing data flows in overlay networks

Patent metadata

Field	Value
Publication number	US-9692696-B2
Application number	US-201414501837-A
Country	US
Kind code	B2
Filing date	Sep 30, 2014
Priority date	Dec 12, 2013
Publication date	Jun 27, 2017
Grant date	Jun 27, 2017

Abstract

Embodiments relate to managing data flows at a virtual forwarding element. A method for managing data flows at a virtual forwarding element executing in a host that has a network interface card (NIC) is provided. The method receives, from a virtual machine executing in the host, a packet that belongs to a data flow originating from the virtual machine. The method identifies a network identifier for the data flow based on a mapping between a plurality of virtual machines executing in the host and a plurality of network identifiers. The mapping is provided by a network controller that configures the virtual forwarding element. The method encapsulates the packet with the network identifier and a tunnel header that includes network addresses of the host. The method sends the encapsulated packet to the NIC. The NIC transmits the encapsulated packet out of the host and towards a destination of the packet.

First claim

What is claimed is:

1. A computer implemented method for managing data flows at a virtual forwarding element executing in a host that has a network interface card (NIC), the method comprising:
receiving, from a virtual machine executing in the host, a packet that belongs to a data flow originating from the virtual machine;
identifying, at the virtual forwarding element and by the host, a network identifier for the data flow based on a mapping between a plurality of virtual machines executing in the host and a plurality of network identifiers, wherein the mapping is provided by a network controller that configures the virtual forwarding element;
encapsulating the packet with the network identifier and a tunnel header that includes network addresses of the host; and
sending the encapsulated packet to the NIC, wherein the NIC transmits the encapsulated packet out of the host and towards a destination of the packet.

2. The method of claim 1 further comprising determining that the packet is or is not to be sent out of the host.

3. The method of claim 2 , wherein the encapsulated packet is sent to the NIC based on the determination.

4. The method of claim 2 further comprising forwarding the packet, without encapsulating the packet, to another virtual machine executing in the host based on the determination.

5. The method of claim 2 , wherein a tunnel defined by the tunnel header terminates at another virtual forwarding element executing in another host, wherein the other virtual forwarding element forwards the packet to another virtual machine executing in the other host.

6. The method of claim 1 , wherein the NIC maps a plurality of tunnels to a plurality of data flows originating from the plurality of virtual machines using the plurality of network identifiers that the plurality of data flows carry.

7. The method of claim 6 further comprising:
creating a plurality of queues for storing a plurality of data flows originating from the plurality of virtual machines;
receiving a message from the NIC, the message indicating that a particular data flow needs a data rate adjustment; and
adjusting a data rate for the particular data flow by using a particular queue.

8. The method of claim 7 , wherein the NIC sends the message to the virtual forwarding element upon receiving a congestion message from a network device that is downstream with respect to the NIC and the virtual forwarding element, wherein the NIC identifies the particular data flow using the congestion message and the mapping between the data flows and the virtual machines.

9. A computer program product for managing data flows at a virtual forwarding element executing in a host that has a network interface card (NIC), the computer program product comprising:
a tangible storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising:
receiving, from a virtual machine executing in the host, a packet that belongs to a data flow originating from the virtual machine;
identifying, at the virtual forwarding element and by the processing circuit, a network identifier for the data flow based on a mapping between a plurality of virtual machines executing in the host and a plurality of network identifiers, wherein the mapping is provided by a network controller that configures the virtual forwarding element;
encapsulating the packet with the network identifier and a tunnel header that includes network addresses of the host; and
sending the encapsulated packet to the NIC, wherein the NIC transmits the encapsulated packet out of the host and towards a destination of the packet.

10. The computer program product of claim 9 , wherein the method further comprises determining that the packet is or is not to be sent out of the host.

11. The computer program product of claim 10 , wherein the encapsulated packet is sent to the NIC based on the determination.

12. The computer program product of claim 11 , wherein the method further comprises forwarding the packet, without encapsulating the packet, to another virtual machine executing in the host based on the determination.

13. The computer program product of claim 9 , wherein the NIC maps a plurality of tunnels to a plurality of data flows originating from the plurality of virtual machines using the plurality of network identifiers that the plurality of data flows carry.

14. The computer program product of claim 13 , wherein the method further comprises:
creating a plurality of queues for storing a plurality of data flows originating from the plurality of virtual machines;
receiving a message from the NIC, the message indicating that a particular data flow needs a data rate adjustment; and
adjusting a data rate for the particular data flow by using a particular queue.

15. The computer program product of claim 14 , wherein the NIC sends the message to the virtual forwarding element upon receiving a congestion message from a network device that is downstream with respect to the NIC and the virtual forwarding element, wherein the NIC identifies the particular data flow using the congestion message and the mapping between the data flows and the virtual machines.

Assignees

• IBM

Inventors

• Decusatis Casimer M
• Kamble Keshav G

Classifications

• H04L45/74

  Address processing for routing · CPC title

• H04L12/4633

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L45/72 Primary

  Routing based on the source address · CPC title

• H04L49/354

  for supporting virtual local area networks [VLAN] · CPC title

• H04L47/25

  with rate being modified by the source upon detecting a change of network conditions · CPC title