Scalable policy assignment in an edge virtual bridging (EVB) environment

• US 10,048,980 B2
• Filed: 10/28/2016
• Issued: 08/14/2018
• Est. Priority Date: 03/18/2013
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Abidi, Vasmi M., Radhakrishnan, Chandramouli
• Primary Examiner(s): Kamran, Mehran
• Application Number:
  US15/337,883
• Publication Number:
  US 20170046193A1
• Time in Patent Office: 655 Days
• Field of Search: 718 1
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

One embodiment includes obtaining virtual machine (VM) information for at least one VM. The VM information includes a VSI type identification (ID) associated with each VM. A policy discriminator (PD) is associated for each VSI type ID, where the PD represents scalable policy assignment. At least one rule and bandwidth filter information associated with a VSI type ID is retrieved from virtual station interface (VSI) database (DB) information and PD for each VSI type ID. The associated at least one rule and filter information is applied based on one of multiple PD types. The multiple PD types comprise a VM type and a virtual local area network (vLAN) type.

Claims

1. A method comprising:

obtaining, by a switch, virtual machine (VM) information for at least one VM, wherein the VM information includes, for each VM, a virtual station interface (VSI) type identification (ID) associated with the VM;

for each VSI type ID, associating, by the switch, a policy discriminator (PD) type with the VSI type ID, wherein each PD type represents a scalable policy assignment that is one of multiple PD types including a VM type and a virtual local area network (vLAN) type;

retrieving, by the switch, at least one rule and bandwidth filter information associated with a first VSI type ID from (a VSI database (DB) table, wherein the first VSI type ID is associated with a first VM; and

applying, by the switch, the at least one rule and the bandwidth filter information based on a PD type associated with the first VSI type ID.

2. The method of claim 1, further comprising:

generating, by the switch, the VSI DB table comprising at least a portion of the VM information and, for each VSI type ID, a PD type associated with the VSI type ID; and

receiving, by the switch, a message including additional VM information for the first VM;

wherein the first VM is a created VM; and

wherein the at least one rule and the bandwidth filter information are applied further based on the additional VM information or network information for the first VM.

3. The method of claim 2, wherein the additional VM information comprises a source media access control (MAC) address of the first VM, and the network information comprises a vLAN ID of the first VM.

4. The method of claim 2, wherein the VSI DB table includes a format comprising:

a VSI Type ID field;

a vLAN-ID field;

an access control list (ACL) field;

a transmission rate field; and

a receiving rate field.

5. The method of claim 2, wherein the VSI DB table includes a format comprising:

a VSI Type ID field;

a vLAN-ID field;

a filters field;

a transmission rate field;

a receiving rate field; and

a PD field.

6. The method of claim 1, wherein the VM type represents a PD based on VMs, and the vLAN type represents a PD based on vLANs.

7. The method of claim 6, wherein the vLAN type provides a coarse policy that is shared across all VMs, and the VM type provides one or more fine-grained policies that are VM specific.

8. The method of claim 7, wherein the vLAN type and the VM type co-exist with each other.

9. The method of claim 1, wherein the switch retrieves the at least one rule and the bandwidth filter information from the VSI DB table from a server in an edge virtual bridging (EVB) system.

10. A computer program product for scalable policy assignment in an edge virtual bridging (EVB) system, the computer program product comprising a computer readable hardware storage device having program instructions embodied therewith, the program instructions executable by a switch to cause the switch to:

obtain, by the switch, virtual machine (VM) information for at least one VM, wherein the VM information includes, for each VM, a virtual station interface (VSI) type identification (ID) associated with the VM;

for each VSI type ID, associate, by the switch, a policy discriminator (PD) type with the VSI type ID, wherein each PD type represents a scalable policy assignment that is one of multiple PD types including a VM type and a virtual local area network (vLAN) type;

retrieve, by the switch, at least one rule and bandwidth filter information associated with a first VSI type ID from a VSI database (DB) table, wherein the first VSI type ID is associated with a first VM; and

apply, by the switch, the at least one rule and the bandwidth filter information based on a PD type associated with the first VSI type ID.

11. The computer program product of claim 10, further comprising program instructions executable by the switch to cause the switch to:

generate, by the switch, the VSI DB table comprising at least a portion of the VM information and, for each VSI type ID, a PD type associated with the VSI type ID; and

receive, by the switch, a message including additional VM information for the first VM;

wherein the first VM is a created VM; and

wherein the at least one rule and the bandwidth filter information are applied further based on the additional VM information or network information for the first VM.

12. The computer program product of claim 11, wherein the additional VM information comprises a source media access control (MAC) address of the first VM, and the network information comprises a vLAN ID of the first VM.

13. The computer program product of claim 11, wherein the VSI DB table includes a format comprising:

a VSI Type ID field;

a vLAN-ID field;

an access control list (ACL) field;

a transmission rate field; and

a receiving rate field.

14. The computer program product of claim 11, wherein the VSI DB table includes a format comprising:

a VSI Type ID field;

a vLAN-ID field;

a filters field;

a transmission rate field;

a receiving rate field; and

a PD field.

15. The computer program product of claim 10, wherein the PD scopes policy based on VMs or vLANs.

16. The computer program product of claim 15, wherein the vLAN type provides a coarse policy that is shared across all VMs, and the VM type provides one or more fine-grained policies that are VM specific.

17. The computer program product of claim 16, wherein the vLAN type and the VM type co-exist with each other.

18. The computer program product of claim 10, wherein the switch retrieves the at least one rule and the bandwidth filter information from the VSI DB table from a server in the EVB system.