Tunneled packet aggregation for virtual networks

Patent metadata

Field	Value
Publication number	US-9942148-B1
Application number	US-201715431156-A
Country	US
Kind code	B1
Filing date	Feb 13, 2017
Priority date	Jan 10, 2014
Publication date	Apr 10, 2018
Grant date	Apr 10, 2018

Abstract

In general, techniques are described for enhancing operations of virtual networks. In some examples, a network system includes a plurality of servers interconnected by a switch fabric comprising a plurality of switches interconnected to form a physical network. Each of the servers comprises an operating environment executing one or more virtual machines in communication via one or more virtual networks. The servers comprise a set of virtual routers configured to extend the virtual networks to the operating environments of the virtual machines. A virtual router of the set of virtual routers is configured to aggregate a plurality of inbound tunnel packets according to a same virtual network identifier in order to generate an aggregate tunnel packet. The virtual router is further configured to route the aggregate tunnel packet to a host associated with a virtual network identified by the same virtual network identifier.

First claim

What is claimed is:

1. A method comprising:
by a computing device, receiving a plurality of inbound tunnel packets that include a common virtual network identifier that identifies a virtual network of one or more virtual networks;
by the computing device, providing, to an aggregation routine, a data structure for each inbound tunnel packet from the inbound tunnel packets, wherein the data structure includes a pointer to a packet and a pointer for a layer 2 header for the packet, wherein the pointer for the layer 2 header in the data structure for the inbound tunnel packet is set to a memory location of the virtual network identifier for the inbound tunnel packet, wherein the aggregation routine uses the data structure for each inbound tunnel packet from the inbound tunnel packets to generate an aggregate tunnel packet comprising a payload that merges payloads of the inbound tunnel packets and a header that includes a single instance of the common virtual network identifier; and
routing, by a virtual router of the computing device, the aggregate tunnel packet to a host executing on the computing device and associated with the identified virtual network.

2. The method of claim 1 ,
wherein a network interface card of the computing device executes the aggregation routine.

3. The method of claim 1 , wherein a network interface card of the computing device executes the virtual router.

4. The method of claim 1 , wherein the common virtual network identifier comprises one of a Multiprotocol Label Switching (MPLS) label or VxLAN tag.

5. The method of claim 1 , further comprising:
receiving, by the computing device, the inbound tunnel packets from a switch fabric comprising a plurality of switches interconnected to form a physical network that switches packets for the one or more virtual networks,
wherein the computing device comprises a server of a plurality of servers interconnected by the switch fabric, wherein each of the servers comprises an operating environment executing one or more virtual machines in communication via the one or more virtual networks, and wherein the servers execute a set of virtual routers that extends the one or more virtual networks to the virtual machines.

6. The method of claim 1 ,
wherein each inbound tunnel packet of the inbound tunnel packets includes an outer header comprising an outer layer three (L3) header and the virtual network identifier and an inner packet comprising an inner L3 header and a payload, and
wherein aggregating the inbound tunnel packets to generate the aggregate tunnel packet comprises:
for each inbound tunnel packet of the inbound tunnel packets, removing the outer L3 header to generate a modified tunnel packet that includes the virtual network identifier and the inner packet for the inbound tunnel packet;
determining the modified tunnel packets include the common virtual network identifier;
merging the payloads of the modified tunnel packets to generate a merged payload; and
generating the aggregate tunnel packet to include the virtual network identifier of the inbound tunnel packets, the inner L3 header of the inbound tunnel packets, and the merged payload.

7. The method of claim 1 ,
wherein each inbound tunnel packet of the inbound tunnel packets includes an outer header comprising the virtual network identifier and an inner packet comprising an inner header and a payload, and
wherein the header comprises at least one field value common to all of the inner headers of the inbound tunnel packets.

8. The method of claim 1 , wherein routing the aggregate tunnel packet comprises applying a routing instance associated with the identified virtual network to route the aggregate tunnel packet to the host based at least on the virtual network identifier.

9. The method of claim 1 , wherein routing the aggregate tunnel packet to the host comprises routing the aggregate tunnel packet to a virtual machine operating within a virtual environment provided by the computing device on which the virtual router executes.

10. A method comprising:
executing, by a computing device, an aggregation routine that, when provided with a plurality of layer 2 packets that each have a common layer 2 destination address, aggregates the layer 2 packets to generate an aggregate layer 2 packet with the common layer 2 destination address;
receiving, by the aggregation routine, a data structure for each inbound tunnel packet from a plurality of inbound tunnel packets, wherein the data structure includes a pointer to a packet and a pointer for a layer 2 header for the packet, wherein the pointer for the layer 2 header for the inbound tunnel packet is set to a memory location of the virtual network identifier for the inbound tunnel packet;
aggregating, by the aggregation routine, the plurality of inbound tunnel packets, each of the inbound tunnel packets including a common virtual network identifier that identifies a virtual network of one or more virtual networks, to generate an aggregate tunnel packet comprising a payload that merges payloads of the inbound tunnel packets and comprising a header that includes the common virtual network identifier; and
routing, by a virtual router of the computing device, the aggregate tunnel packet to a host executing on the computing device and associated with the identified virtual network.

11. The method of claim 10 , wherein the aggregation routine comprises a Generic Receive Offload (GRO) routine.

12. The method of claim 10 , further comprising:
by the computing device, determining the plurality of inbound tunnel packets include the common virtual network identifier and providing, in response to the determining, the inbound tunnel packets to the aggregation routine.

13. A computing device comprising:
one or more processors operably coupled to at least one memory,
wherein the one or more processors are configured to:
receive a plurality of inbound tunnel packets include a common virtual network identifier that identifies a virtual network of one or more virtual networks;
generate, for an aggregation routine, a data structure for each inbound tunnel packet from the inbound tunnel packets, wherein the data structure includes a pointer to a packet and a pointer for a layer 2 header for the packet, wherein the pointer for the layer 2 header in the data structure for the inbound tunnel packet is set to a memory location of the virtual network identifier for the inbound tunnel packet; and
execute the aggregation routine to use the data structure for each inbound tunnel packet from the inbound tunnel packets to aggregate the inbound tunnel packets to generate an aggregate tunnel packet comprising a payload that merges payloads of the inbound tunnel packets and a header that includes a single instance of the common virtual network identifier; and
execute a virtual router to route the aggregate tunnel packet to a host associated with the identified virtual network.

14. The computing device of claim 13 , further comprising:
a network interface card comprising at least one of the one or more processors and configured to execute the aggregation routine.

15. The computing device of claim 13 , further comprising:
a network interface card configured to execute the virtual router.

16. A computing device comprising:
one or more processors operably coupled to at least one memory;
a kernel configured for execution by the one or more processors;
an aggregation routine of the kernel,
wherein the aggregation routine is configured to, when provided with a plurality of layer 2 packets that each have a common layer 2 destination addre

Assignees

• Juniper Networks Inc

Inventors

• Sivaramakrishnan Rajagopalan
• Krishnan Anand H

Classifications

• H04L45/50

  using label swapping, e.g. multi-protocol label switch [MPLS] · CPC title

• H04L45/7453 Primary

  using hashing · CPC title

• H04L45/586

  of virtual routers · CPC title

• H04L45/745

  Address table lookup; Address filtering · CPC title

• H04L47/31

  by tagging of packets, e.g. using discard eligibility [DE] bits · CPC title