Performing context-rich attribute-based services on a host

• US 10,609,160 B2
• Filed: 12/04/2017
• Issued: 03/31/2020
• Est. Priority Date: 12/06/2016
• Status: Active Grant

• Current Assignee: Nicira Incorporated (Broadcom, Inc.)
• Original Assignee: Nicira Incorporated (Broadcom, Inc.)
• Inventors: Poon, Arnold, Gunda, Laxmikant, Jain, Jayant, Sengupta, Anirban, Vaidya, Sachin Mohan
• Primary Examiner(s): Chan, Wing F
• Assistant Examiner(s): Maniwang, Joseph R
• Application Number:
  US15/830,086
• Publication Number:
  US 20180159943A1
• Time in Patent Office: 848 Days
• Field of Search: 709223
• CPC Class Codes: G06F 9/4494 data driven
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/0846 based on copy from other elements
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 43/20 the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

Some embodiments provide a novel method for performing a service at a host computer that executes data compute nodes (DCNs). For a data message, the method identifies a service tag and a set of attributes associated with the service tag. The method then uses the identified set of attributes to identify a service rule, and performs a service on the data message based on the identified service rule.

Claims

1. A method of performing a service at a host computer that executes data compute nodes (DCNs), the method comprising:

receiving a data message;

identifying a service tag for the received data message;

identifying a set of attributes associated with the service tag;

using the identified set of attributes to identify a service rule;

performing a service on the data message based on the identified service rule.

2. The method of claim 1, wherein identifying the set of attributes comprises using the service tag to identify a record in a storage that stores a plurality of service tags and a set of attributes for each service tag.

3. The method of claim 2, wherein using the identified attribute set comprises using the attribute set to identify a record in a storage that stores a plurality of attribute sets and a service action parameter set for each attribute set.

4. The method of claim 1, wherein identifying the service tag comprises using a set of identifiers of the data message to identify the service tag in a storage that stores a plurality of service tags for a plurality of data message identifiers.

5. The method of claim 4 further comprising:

receiving a record that identifies the service tag for a message identifier of the data message before identifying the service tag for the received data message.

6. The method of claim 5, wherein receiving the record comprises receiving the record from a guest introspection agent of a DCN that sends the data message.

7. The method of claim 1, wherein identifying the service tag comprises extracting the service tag from a header of the data message.

8. The method of claim 7, wherein the header is a tunnel header.

9. The method of claim 1, wherein a service engine receives the data message and directs an attribute resolving engine to identify the set of attributes associated with the service tag for the received data message, said service engine and attribute resolving engine executing on the host computer separately from any DCN.

10. The method of claim 1, wherein the set of attributes does not include L2-L4 parameters.

11. A non-transitory machine readable medium storing a program for performing a service at a host computer that executes data compute nodes (DCNs), the program comprising sets of instructions for:

receiving a data message;

identifying a service tag for the received data message;

identifying a set of attributes associated with the service tag;

using the identified set of attributes to identify a service rule;

performing a service on the data message based on the identified service rule.

12. The non-transitory machine readable medium of claim 11, wherein the set of instructions for identifying the set of attributes comprises a set of instructions for using the service tag to identify a record in a storage that stores a plurality of service tags and a set of attributes for each service tag.

13. The non-transitory machine readable medium of claim 12, wherein the set of instructions for using the identified attribute set comprises a set of instructions for using the attribute set to identify a record in a storage that stores a plurality of attribute sets and a service action parameter set for each attribute set.

14. The non-transitory machine readable medium of claim 11, wherein the set of instructions for identifying the service tag comprises a set of instructions for using a set of identifiers of the data message to identify the service tag in a storage that stores a plurality of service tags for a plurality of data message identifiers.

15. The non-transitory machine readable medium of claim 14, wherein the program further comprises a set of instructions for receiving a record that identifies the service tag for a message identifier of the data message before identifying the service tag for the received data message.

16. The non-transitory machine readable medium of claim 15, wherein the set of instructions for receiving the record comprises a set of instructions for receiving the record from a guest introspection agent of a DCN that sends the data message.

17. The non-transitory machine readable medium of claim 11, wherein the set of instructions for identifying the service tag comprises a set of instructions for extracting the service tag from a header of the data message.

18. The non-transitory machine readable medium of claim 17, wherein the header is a tunnel header.

19. The non-transitory machine readable medium of claim 11, wherein the program is performed by a service engine that directs an attribute resolving engine to identify the set of attributes associated with the service tag for the received data message, said service engine and attribute resolving engine executing on the host computer separately from any DCN.

20. The non-transitory machine readable medium of claim 11, wherein the set of attributes does not include L2-L4 parameters.