Logical network traffic analysis
First Claim
1. A method of gathering data to perform traffic analysis between data compute nodes (DCNs) executing on host computers in a datacenter and associated with a logical network connecting the DCNs, the method comprising:
- defining a unique identifier for a logical network probe;
associating the logical network probe with at least one logical observation point in the logical network, the logical network implemented over a physical network of the datacenter comprising a plurality of managed forwarding elements, the logical observation point corresponding to a plurality of different physical observation points on at least two host computers associated with a set of at least two managed forwarding elements executing on the at least two host computers along with at least two DCNs;
generating data for a sample-action flow entry in a logical processing pipeline associated with the logical observation point; and
distributing the sample-action flow entry data to the set of at least two managed forwarding elements in the physical network that are for processing data packets associated with the logical observation point, each managed forwarding element in the set for using a sample-action flow entry to identify packets for sampling.
1 Assignment
0 Petitions
Accused Products
Abstract
Some embodiments of the invention provide a method for gathering data for logical network traffic analysis by sampling flows of packets forwarded through a logical network. Some embodiments are implemented by a set of network virtualization controllers that, on a shared physical infrastructure, can implement two or more sets of logical forwarding elements that define two or more logical networks. In some embodiments, the method (1) defines an identifier for a logical network probe, (2) associates this identifier with one or more logical observation points in the logical network, and (3) distributes logical probe configuration data, including sample-action flow entry data, to one or more managed forwarding elements that implement the logical processing pipeline at the logical observation points associated with the logical network probe identifier. In some embodiments, the sample-action flow entry data specify the packet flows that the forwarding elements should sample and the percentage of packets within these flows that the forwarding elements should sample.
264 Citations
22 Claims
-
1. A method of gathering data to perform traffic analysis between data compute nodes (DCNs) executing on host computers in a datacenter and associated with a logical network connecting the DCNs, the method comprising:
-
defining a unique identifier for a logical network probe; associating the logical network probe with at least one logical observation point in the logical network, the logical network implemented over a physical network of the datacenter comprising a plurality of managed forwarding elements, the logical observation point corresponding to a plurality of different physical observation points on at least two host computers associated with a set of at least two managed forwarding elements executing on the at least two host computers along with at least two DCNs; generating data for a sample-action flow entry in a logical processing pipeline associated with the logical observation point; and distributing the sample-action flow entry data to the set of at least two managed forwarding elements in the physical network that are for processing data packets associated with the logical observation point, each managed forwarding element in the set for using a sample-action flow entry to identify packets for sampling. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12)
-
-
13. A non-transitory machine readable medium storing a program for configuring managed forwarding elements to gather data regarding packets sent between data compute nodes (DCNs) executing on host computers in a datacenter and processed through a logical network connecting the DCNs, the program comprising sets of instructions for:
-
defining a logical network probe, with a unique identifier, and associating the logical network probe with at least one logical observation point in the logical network, the logical network implemented over a physical network of the datacenter comprising a plurality of managed forwarding elements, the logical observation point corresponding to a plurality of different physical observation points on at least two host computers associated with a set of at least two managed forwarding elements executing on the at least two host computers along with at least two DCNs; generating data for programming a set of managed forwarding elements that implement a set of logical network entities that are associated with the logical observation point; and distributing the programming data to the set of at least two managed forwarding elements in the physical network, each managed forwarding element in the set for using the programming data to sample packets associated with the logical observation point. - View Dependent Claims (14, 15, 16, 17, 18, 19, 20, 21, 22)
-
Specification