Performing context-rich attribute-based services on a host
First Claim
1. A method of configuring a set of service nodes on a host computer to provide a set of attribute-based services to data compute nodes (DCNs) on the host computer, the method comprising:
- on the host computer;
collecting a first set of attributes associated with attribute-based service rules processed by the set of service nodes on the host computer;
collecting a second set of attributes associated with at least one data message flow of a DCN;
comparing the first and second sets of attributes to generate a service tag to represent a subset of attributes associated with the data message flow that are relevant for the service rules of the service node set; and
associating the service tag with the data message flow for the set of service nodes to use subsequently to retrieve the subset of attributes associated with the data message flow and to use the retrieved subset of attributes to process the attribute-based service rules for data messages of the data message flow.
1 Assignment
0 Petitions
Accused Products
Abstract
Some embodiments provide a novel method for configuring a set of service one or more nodes on a host to perform context-rich, attribute-based services on the host computer, which executes several data compute nodes (DCNs) in addition to the set of service nodes. The method uses a context-filtering node on the host to collect a first set of attributes associated with service rules processed by the set of service nodes on the host computer. The context filter also collects a second set of attributes associated with at least one data message flow of a DCN (e.g., of a virtual machine (VM) or container) executing on the host. After collecting the first and second sets of attributes, the context filtering node on the host compares the first and second sets of attributes to generate a service tag to represent a subset of the first set of attributes associated with the data message flow. The method associates this service tag with the data message flow. This service tag can then be used to identify the subset of attributes associated with the data message flow when a service node needs to process its attribute-based service rules for the data message flow.
-
Citations
20 Claims
-
1. A method of configuring a set of service nodes on a host computer to provide a set of attribute-based services to data compute nodes (DCNs) on the host computer, the method comprising:
on the host computer; collecting a first set of attributes associated with attribute-based service rules processed by the set of service nodes on the host computer; collecting a second set of attributes associated with at least one data message flow of a DCN; comparing the first and second sets of attributes to generate a service tag to represent a subset of attributes associated with the data message flow that are relevant for the service rules of the service node set; and associating the service tag with the data message flow for the set of service nodes to use subsequently to retrieve the subset of attributes associated with the data message flow and to use the retrieved subset of attributes to process the attribute-based service rules for data messages of the data message flow. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15)
-
16. A non-transitory machine readable medium storing a program for performing a service at a host computer that executes data compute nodes (DCNs), the program comprising sets of instructions for:
-
collecting a first set of attributes associated with attribute-based service rules processed by a set of service nodes on the host computer; collecting a second set of attributes associated with at least one data message flow of a DCN; comparing the first and second sets of attributes to generate a service tag to represent a subset of the attributes associated with the data message flow that are relevant for the service rules of the service node set; and associating the service tag with the data message flow for the set of service nodes to use subsequently to retrieve the subset of attributes associated with the data message flow and to use the retrieved subset of attributes to process the attribute-based service rules for data messages of the data message flow. - View Dependent Claims (17, 18, 19, 20)
-
Specification