Scalable policy assignment in an edge virtual bridging (EVB) environment

• US 10,534,631 B2
• Filed: 05/30/2018
• Issued: 01/14/2020
• Est. Priority Date: 03/18/2013
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Abidi, Vasmi M., Radhakrishnan, Chandramouli
• Primary Examiner(s): Kamran, Mehran
• Application Number:
  US15/993,488
• Publication Number:
  US 20180276026A1
• Time in Patent Office: 594 Days
• Field of Search: 718 1
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

One embodiment includes obtaining virtual machine (VM) information for at least one VM. The VM information includes a VSI type identification (ID) associated with each VM. A policy discriminator (PD) is associated for each VSI type ID, where the PD represents scalable policy assignment. At least one rule and bandwidth filter information associated with a VSI type ID is retrieved from virtual station interface (VSI) database (DB) information and PD for each VSI type ID. The associated at least one rule and filter information is applied based on one of multiple PD types. The multiple PD types comprise a VM type and a virtual local area network (vLAN) type.

Claims

1. A method comprising:

fetching virtual machine (VM) information for one or more VMs from a virtual station interface (VSI) database (DB), wherein the VM information includes, for each VM, an associated VSI type identification (ID), and each VSI type ID is associated with a policy discriminator (PD) value;

generating a VSI DB table based on a portion of the VM information and each PD value associated with each VSI type ID;

retrieving at least one rule and bandwidth filter information associated with a VSI type ID from the VSI DB table; and

applying the at least one rule and bandwidth filter information based on one of multiple PD values, wherein the multiple PD values represent different types of policies, thereby enabling scaling of VMs without increasing hardware requirements for ternary content addressable memories (TCAMs).

2. The method of claim 1, wherein the different types of policies include a first policy for a virtual local area network (vLAN) and a second policy for a VM.

3. The method of claim 2, wherein the first policy is a coarse policy that is shared across all VMs, and the second policy is a fine-grained policy that is VM specific.

4. The method of claim 2, wherein the first policy and the second policy co-exist with each other without an increased number of TCAM instances.

5. The method of claim 1, further comprising:

receiving a message including additional VM information for a created VM;

wherein the at least one rule and bandwidth filter information are applied further based on the additional VM information.

6. A system comprising:

at least one processor; and

a non-transitory processor-readable memory device storing instructions that when executed by the at least one processor causes the at least one processor to perform operations including;

fetching virtual machine (VM) information for one or more VMs from a virtual station interface (VSI) database (DB), wherein the VM information includes, for each VM, an associated VSI type identification (ID), and each VSI type ID is associated with a policy discriminator (PD) value;

generating a VSI DB table based on a portion of the VM information and each PD value associated with each VSI type ID;

retrieving at least one rule and bandwidth filter information associated with a VSI type ID from the VSI DB table; and

applying the at least one rule and bandwidth filter information based on one of multiple PD values, wherein the multiple PD values represent different types of policies, thereby enabling scaling of VMs without increasing hardware requirements for ternary content addressable memories (TCAMs).

7. The system of claim 6, wherein the different types of policies include a first policy for a virtual local area network (vLAN) and a second policy for a VM.

8. The system of claim 7, wherein the first policy is a coarse policy that is shared across all VMs, and the second policy is a fine-grained policy that is VM specific.

9. The system of claim 7, wherein the first policy and the second policy co-exist with each other without an increased number of TCAM instances.

10. The system of claim 6, wherein the operations further comprise:

receiving a message including additional VM information for a created VM;

wherein the at least one rule and bandwidth filter information are applied further based on the additional VM information.

11. A non-transitory computer-readable medium storing instructions that, when executed by at least one processor of a machine, cause the machine to perform operations comprising:

fetching virtual machine (VM) information for one or more VMs from a virtual station interface (VSI) database (DB), wherein the VM information includes, for each VM, an associated VSI type identification (ID), and each VSI type ID is associated with a policy discriminator (PD) value;

generating a VSI DB table based on a portion of the VM information and each PD value associated with each VSI type ID;

retrieving at least one rule and bandwidth filter information associated with a VSI type ID from the VSI DB table; and

applying the at least one rule and bandwidth filter information based on one of multiple PD values, wherein the multiple PD values represent different types of policies, thereby enabling scaling of VMs without increasing hardware requirements for ternary content addressable memories (TCAMs).

12. The computer program product of claim 11, wherein the different types of policies include a first policy for a virtual local area network (vLAN) and a second policy for a VM.

13. The computer program product of claim 12, wherein the first policy is a coarse policy that is shared across all VMs, and the second policy is a fine-grained policy that is VM specific.

14. The computer program product of claim 12, wherein the first policy and the second policy co-exist with each other without an increased number of TCAM instances.

15. The computer program product of claim 11, wherein the operations further comprise:

receiving a message including additional VM information for a created VM;

wherein the at least one rule and bandwidth filter information are applied further based on the additional VM information.