Architecture of networks with middleboxes
First Claim
1. A system for implementing a logical network to communicatively connect a plurality of end machines, the logical network comprising (i) a set of logical forwarding elements collectively implemented by a set of managed forwarding elements and (ii) at least two logical middleboxes, the system comprising:
- a plurality of host computers on each of which (i) a managed forwarding element executes to implement the set of logical forwarding elements and (ii) a middlebox element executes to implement a first logical middlebox of the logical network, wherein the middlebox elements collectively implement the first logical middlebox and each store state information for the first logical middlebox but do not communicate the state information with the other middlebox elements; and
a set of separate physical middleboxes for implementing a second logical middlebox of the logical network, wherein the second logical middlebox performs an operation that requires state information relating to packets between several different sets of end machines connected by the logical network and the set of separate physical middleboxes share the state information for the second logical middlebox with each other;
wherein the middlebox elements and the set of separate physical middleboxes perform middlebox services on packets between the end machines of the logical network.
0 Assignments
0 Petitions
Accused Products
Abstract
Some embodiments provide a system for implementing a logical network that includes a set of end machines, a first logical middlebox, and a second logical middlebox connected by a set of logical forwarding elements. The system includes a set of nodes. Each of several nodes includes (i) a virtual machine for implementing an end machine of the logical network, (ii) a managed switching element for implementing the set of logical forwarding elements of the logical network, and (iii) a middlebox element for implementing the first logical middlebox of the logical network. The system includes a physical middlebox appliance for implementing the second logical middlebox.
-
Citations
18 Claims
-
1. A system for implementing a logical network to communicatively connect a plurality of end machines, the logical network comprising (i) a set of logical forwarding elements collectively implemented by a set of managed forwarding elements and (ii) at least two logical middleboxes, the system comprising:
-
a plurality of host computers on each of which (i) a managed forwarding element executes to implement the set of logical forwarding elements and (ii) a middlebox element executes to implement a first logical middlebox of the logical network, wherein the middlebox elements collectively implement the first logical middlebox and each store state information for the first logical middlebox but do not communicate the state information with the other middlebox elements; and a set of separate physical middleboxes for implementing a second logical middlebox of the logical network, wherein the second logical middlebox performs an operation that requires state information relating to packets between several different sets of end machines connected by the logical network and the set of separate physical middleboxes share the state information for the second logical middlebox with each other; wherein the middlebox elements and the set of separate physical middleboxes perform middlebox services on packets between the end machines of the logical network. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A method for implementing a logical network to communicatively connect a plurality of end machines, the method comprising:
-
receiving a logical network configuration, the logical network comprising (i) a set of logical forwarding elements collectively implemented by a set of managed forwarding elements, (ii) a first logical middlebox, and (iii) a second logical middlebox; distributing configuration data to configure middlebox elements, executing on a plurality of host computers, to collectively implement the first logical middlebox, wherein each of the middlebox elements stores state information for the first logical middlebox but does not communicate the state information with the other middlebox elements; and distributing configuration data to configure a set of separate physical middleboxes to implement a second logical middlebox comprising operations that require state information relating to packets between several different sets of end machines connected by the logical network, wherein the set of separate physical middleboxes share state information for the second logical middlebox with each other, wherein the configured middlebox elements and the set of separate physical middleboxes perform middlebox services on packets between the end machines of the logical network. - View Dependent Claims (10, 11, 12, 13, 14, 15, 16, 17, 18)
-
Specification