Private allocated networks over shared communications infrastructure

• US 10,291,753 B2
• Filed: 01/08/2018
• Issued: 05/14/2019
• Est. Priority Date: 09/30/2009
• Status: Active Grant

• Current Assignee: Nicira Incorporated (Broadcom, Inc.)
• Original Assignee: Nicira Incorporated (Broadcom, Inc.)
• Inventors: Lambeth, W. Andrew, Dalal, Anupam, Deianov, Borislav, Xiao, Jun
• Primary Examiner(s): O Connor, Brian T
• Application Number:
  US15/865,226
• Publication Number:
  US 20180219983A1
• Time in Patent Office: 491 Days
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 49/354 for supporting virtual local area networks [VLAN]
• CPC Class Codes: H04L 49/70 Virtual switches
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 65/611 for multicast or broadcast systems for broadcast or conference H04L12/18; arrangements for broadcast or distribution combined with broadcast H04H20/00; arrangements for broadcast applications with a direct linkage to broadcast information or to broadcast space-time H04H60/00; selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS], H04W4/06
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/324 in the data link layer [OSI layer 2], e.g. HDLC
• CPC Class Codes: H04L 69/325 in the network layer [OSI layer 3], e.g. X.25 H04L69/16 takes precedence

Abstract

Methods and systems for implementing private allocated networks in a virtual infrastructure are presented. One method operation creates virtual switches in one or more hosts in the virtual infrastructure. Each port in the virtual switches is associated with a private allocated network (PAN) from a group of possible PANs. In one embodiment, one or more PANs share the same physical media for data transmission. The intranet traffic within each PAN is not visible to nodes that are not connected to the each PAN. In another operation, the method defines addressing mode tables for the intranet traffic within each PAN. The entries in the addressing mode tables define addressing functions for routing the intranet traffic between the virtual switches, and different types of addressing functions are supported by the virtual switches.

Claims

1. For a virtual switch executing on a host computer that hosts at least (i) a first virtual machine having an address in a first overlay network of a plurality of overlay networks implemented by the virtual switch encapsulating packets transmitted in a physical network and (ii) a second virtual machine having an address in a second overlay network of the plurality of overlay networks, a method comprising:

receiving a first packet from the first virtual machine, wherein the first packet comprises a first destination address in the first overlay network;

making a forwarding decision for the first packet based on the first overlay network destination address;

encapsulating the first packet using a second destination address in the physical network;

transmitting the encapsulated packet to the physical network that processes the packet using the second destination address;

receiving a second packet from the second virtual machine, wherein the second packet comprises a third destination address in the second overlay network;

making a forwarding decision for the second packet based on the third destination address;

encapsulating the second packet using a fourth destination address in the physical network; and

transmitting the encapsulated second packet to the physical network that processes the second packet using the fourth destination address.

2. The method of claim 1, wherein the first destination address and the third destination address are the same address.

3. The method of claim 1, wherein making the forwarding decision for the first packet comprises looking up the first destination address in an addressing mode table, wherein the addressing mode table specifies to encapsulate the first packet using the second destination address.

4. The method of claim 1, wherein the second destination address is an address of a host computer that hosts a virtual machine having the first destination address in the overlay network.

5. A method comprising:

receiving a first packet from a virtual machine that has an address in an overlay network that is implemented by encapsulating packets transmitted in a physical network, wherein the first packet comprises a first destination address in the overlay network;

making a forwarding decision for the first packet based on the first destination address;

encapsulating the first packet using a second destination address in the physical network;

transmitting the encapsulated packet to the physical network that processes the packet using the second destination address;

receiving a second packet from the virtual machine, the second packet comprising a third destination address in the overlay network;

making a forwarding decision for the second packet based on the third destination address;

replacing the third destination address with a fourth destination address in the physical network; and

transmitting the second packet to the physical network that processes the packet using the fourth destination address.

6. The method of claim 5, wherein encapsulating the first packet comprises adding metadata identifying the first overlay network to the first packet.

7. The method of claim 5, wherein the second destination address is an address of a host computer that hosts a virtual machine having the first destination address in the overlay network.

8. A method comprising:

receiving a packet from a virtual machine that has an address in an overlay network that is implemented by encapsulating packets transmitted in a physical network, wherein the packet comprises a destination MAC address in the overlay network;

making a forwarding decision for the packet based on the overlay network destination MAC address;

encapsulating the packet using a destination IP address in the physical network; and

transmitting the encapsulated packet to the physical network that processes the packet using the destination IP address.

9. The method of claim 8, wherein the method is performed by a virtual switch executing on a host computer that hosts the virtual machine.

10. The method of claim 9, wherein the overlay network is a first overlay network, wherein a plurality of overlay networks are implemented by the virtual switch.

11. The method of claim 10 further comprising:

receiving a second packet from a second virtual machine hosted on the host computer that has an address in a second overlay network implemented by encapsulating packets transmitted in the physical network, wherein the second packet comprises a third destination address in the second overlay network;

making a forwarding decision for the second packet based on the third destination address;

encapsulating the packet using a fourth destination address in the physical network; and

transmitting the encapsulated second packet to the physical network that processes the second packet using the fourth destination address.

12. A non-transitory machine-readable medium storing a virtual switch for execution by at least one processing unit of a host computer that hosts at least (i) a first virtual machine having an address in a first overlay network of a plurality of overlay networks implemented by the virtual switch encapsulating packets transmitted in a physical network and (ii) a second virtual machine having an address in a second overlay network of the plurality of overlay networks, the virtual switch comprising sets of instructions for:

receiving a first packet from the first virtual machine, wherein the first packet comprises a first destination address in the first overlay network;

making a forwarding decision for the first packet based on the first overlay network destination address;

encapsulating the first packet using a second destination address in the physical network;

transmitting the encapsulated packet to the physical network that processes the packet using the second destination address;

receiving a second packet from the second virtual machine, wherein the second packet comprises a third destination address in the second overlay network;

making a forwarding decision for the second packet based on the third destination address;

encapsulating the second packet using a fourth destination address in the physical network; and

transmitting the encapsulated second packet to the physical network that processes the second packet using the fourth destination address.

13. The non-transitory machine-readable medium of claim 12, wherein the first destination address and the third destination address are the same address.

14. The non-transitory machine-readable medium of claim 12, wherein the set of instructions for making the forwarding decision for the first packet comprises a set of instructions for looking up the first destination address in an addressing mode table, wherein the addressing mode table specifies to encapsulate the first packet using the second destination address.

15. The non-transitory machine-readable medium of claim 12, wherein the second destination address is an address of a host computer that hosts a virtual machine having the first destination address in the overlay network.

16. A non-transitory machine-readable medium storing a program for execution by at least one processing unit, the program comprising sets of instructions for:

receiving a first packet from a virtual machine that has an address in an overlay network that is implemented by encapsulating packets transmitted in a physical network, wherein the first packet comprises a first destination address in the overlay network;

making a forwarding decision for the first packet based on the first destination address;

encapsulating the first packet using a second destination address in the physical network;

transmitting the encapsulated packet to the physical network that processes the packet using the second destination address;

receiving a second packet from the virtual machine, the second packet comprising a third destination address in the overlay network;

making a forwarding decision for the second packet based on the third destination address;

replacing the third destination address with a fourth destination address in the physical network; and

transmitting the second packet to the physical network that processes the packet using the fourth destination address.

17. The non-transitory machine-readable medium of claim 16, wherein the set of instructions for encapsulating the first packet comprises a set of instructions for adding metadata identifying the first overlay network to the first packet.

18. The non-transitory machine-readable medium of claim 16, wherein the second destination address is an address of a host computer that hosts a virtual machine having the first destination address in the overlay network.

19. A non-transitory machine-readable medium storing a program for execution by at least one processing unit, the program comprising sets of instructions for:

receiving a packet from a virtual machine that has an address in an overlay network that is implemented by encapsulating packets transmitted in a physical network, wherein the packet comprises a destination MAC address in the overlay network;

making a forwarding decision for the packet based on the overlay network destination MAC address;

encapsulating the packet using a destination IP address in the physical network; and

transmitting the encapsulated packet to the physical network that processes the packet using the destination IP address.

20. The non-transitory machine-readable medium of claim 19, wherein the program is a virtual switch for execution by at least one processing unit of a host computer that hosts the virtual machine.

21. The non-transitory machine-readable medium of claim 20, wherein the overlay network is a first overlay network, wherein a plurality of overlay networks are implemented by the virtual switch.

22. The non-transitory machine-readable medium of claim 21, wherein the virtual switch further comprises sets of instructions for:

receiving a second packet from a second virtual machine hosted on the host computer that has an address in a second overlay network implemented by encapsulating packets transmitted in the physical network, wherein the second packet comprises a third destination address in the second overlay network;

making a forwarding decision for the second packet based on the third destination address;

encapsulating the packet using a fourth destination address in the physical network; and

transmitting the encapsulated second packet to the physical network that processes the second packet using the fourth destination address.