SCALABLE POLICY ASSIGNMENT IN AN EDGE VIRTUAL BRIDGING (EVB) ENVIRONMENT

• US 20170046193A1
• Filed: 10/28/2016
• Published: 02/16/2017
• Est. Priority Date: 03/18/2013
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Abidi, Vasmi M., Radhakrishnan, Chandramouli
• Granted Patent: US 10,048,980 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

One embodiment includes obtaining virtual machine (VM) information for at least one VM. The VM information includes a VSI type identification (ID) associated with each VM. A policy discriminator (PD) is associated for each VSI type ID, where the PD represents scalable policy assignment. At least one rule and bandwidth filter information associated with a VSI type ID is retrieved from virtual station interface (VSI) database (DB) information and PD for each VSI type ID. The associated at least one rule and filter information is applied based on one of multiple PD types. The multiple PD types comprise a VM type and a virtual local area network (vLAN) type.

Claims

1. A method comprising:

obtaining, by a switch, virtual machine (VM) information for at least one VM, wherein the VM information includes a VSI type identification (ID) associated with each VM;

associating, by the switch, a policy discriminator (PD) for each VSI type ID, the PD representing scalable policy assignment;

retrieving, by the switch, at least one rule and bandwidth filter information associated with a VSI type ID from virtual station interface (VSI) database (DB) information and PD for each VSI type ID; and

applying, by the switch, the associated at least one rule and filter information based on one of multiple PD types, wherein the multiple PD types comprise a VM type and a virtual local area network (vLAN) type.

2. The method of claim 1, further comprising:

generating, by the switch, a VSI DB table with at least a portion of the VM information from a VSI DB and the PD for each VSI type ID; and

receiving, by the switch, a message including VM information for a created VM;

wherein the associated at least one rule and filter information are applied further based on VM information or network information.

3. The method of claim 2, wherein for a VM type PD, the VM information comprises a source media access control (MAC) address of the VM, and for a vLAN type PD, the network information comprises a vLAN ID of the VM.

4. The method of claim 2, wherein the VSI DB table includes a format comprising:

a VSI Type ID field;

a vLAN-ID field;

an access control list (ACL) field;

a transmission rate field; and

a receiving rate field.

5. The method of claim 2, wherein the VSI DB table includes a format comprising:

a VSI Type ID field;

a vLAN-ID field;

a filters field;

a transmission rate field;

a receiving rate field; and

a PD field.

6. The method of claim 1, wherein the PD scopes policy based on VMs or vLANs.

7. The method of claim 6, a vLAN type PD provides for a coarse policy that is shared across all VMs, and a VM type PD provides applying fine-grained policies that are VM specific.

8. The method of claim 7, wherein the vLAN type PD and the VM type PD co-exist with each other.

9. The method of claim 1, wherein the switch fetches the information from the VSI DB from a server in an edge virtual bridging (EVB) system.

10. A computer program product for scalable policy assignment in an edge virtual bridging (EVB) system, the computer program product comprising a computer readable hardware storage device having program instructions embodied therewith, the program instructions executable by a switch to cause the switch to:

obtain, by the switch, virtual machine (VM) information for at least one VM, wherein the VM information includes a VSI type identification (ID) associated with each VM;

associate, by the switch, a policy discriminator (PD) for each VSI type ID, the PD representing scalable policy assignment;

retrieve, by the switch, at least one rule and bandwidth filter information associated with a VSI type ID from virtual station interface (VSI) database (DB) information and PD for each VSI type ID; and

apply, by the switch, the associated at least one rule and filter information based on one of multiple PD types, wherein the multiple PD types comprise a VM type and a virtual local area network (vLAN) type.

11. The computer program product of claim 10, further comprising program instructions executable by the switch to cause the switch to:

generate, by the switch, a VSI DB table with at least a portion of the VM information from a VSI DB and the PD for each VSI type ID; and

receive, by the switch, a message including VM information for a created VM;

wherein the associated at least one rule and filter information are applied further based on VM information or network information.

12. The computer program product of claim 11, wherein for a VM type PD, the VM information comprises a source media access control (MAC) address of the VM, and for a vLAN type PD, the network information comprises a vLAN ID of the VM.

13. The computer program product of claim 11, wherein the VSI DB table includes a format comprising:

a VSI Type ID field;

a vLAN-ID field;

an access control list (ACL) field;

a transmission rate field; and

a receiving rate field.

14. The computer program product of claim 11, wherein the VSI DB table includes a format comprising:

a VSI Type ID field;

a vLAN-ID field;

a filters field;

a transmission rate field;

a receiving rate field; and

a PD field.

15. The computer program product of claim 10, wherein the PD scopes policy based on VMs or vLANs.

16. The computer program product of claim 15, a vLAN type PD provides for a coarse policy that is shared across all VMs, and a VM type PD provides applying fine-grained policies that are VM specific.

17. The computer program product of claim 16, wherein the vLAN type PD and the VM type PD co-exist with each other.

18. The computer program product of claim 10, wherein the switch fetches the information from a VSI DB from a server in the EVB system.