STORAGE OF HYPERVISOR MESSAGES IN NETWORK PACKETS GENERATED BY VIRTUAL MACHINES

• US 20170300349A1
• Filed: 09/26/2014
• Published: 10/19/2017
• Est. Priority Date: 09/26/2014
• Status: Abandoned Application

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Shaw, Adrian, Dalton, Chris I
• Application Number:
  US15/511,933
• Publication Number:
  US 20170300349A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 2009/45583 Memory management, e.g. access or allocation
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

Techniques for storing hypervisor messages in a network packet are described. In one aspect, a hypervisor of a computing device obtains a network packet generated by a virtual machine. The hypervisor may then identify available space within the network packet that can store data relating to a hypervisor message. The hypervisor may then store the hypervisor message in the available space within the network packet. The hypervisor may cause a physical network interface controller to transmit the network packet to a destination device through a network path that includes a message logging device.

Claims

1. A method comprising:

obtaining, by a hypervisor of a computing device, a network packet generated by a virtual machine executing on the computing device;

identifying, by the hypervisor of the computing device, available space within the network packet that can store data relating to a hypervisor message;

storing, by the hypervisor of the computing device, the hypervisor message in the available space within the network packet; and

causing, by the hypervisor of the computing device, a physical network interface controller to transmit the network packet to a destination device through a network path that includes a message logging device.

2. The method of claim 1, wherein identifying the available space within the network packet includes performing a byte matching search for empty space.

3. The method of claim 1, wherein identifying the available space and storing the hypervisor message is responsive to determining that the hypervisor message is pending.

4. The method of claim 1, wherein storing the hypervisor message in the available space within the network packet includes inserting a magic marker in the available space.

5. The method of claim 1, wherein storing the hypervisor message in the available space within the network packet includes inserting magic markers in the available space and inserting a hypervisor message between the magic markers.

6. The method of claim 1, wherein identifying the available space within the network packet comprises:

determining an importance classification corresponding to the network packet; and

based on the importance classification of the network packet, selecting locations of the network packet that include non-empty space.

7. The method of claim 6, wherein determining the importance classification of the network packet include determining whether the network packet is a message in a connection handshake protocol.

8. A system comprising:

a physical network buffer;

a shadow network buffer to store a network packet generated by a virtual machine; and

a processor to;

identify available space within the network packet that can store data relating to a hypervisor message,

store the hypervisor message in the available space within the network packet, and

remap the network packet to the physical network buffer to initiate network transmission of the network packet.

9. The system of claim 8, wherein the processor is to further recalculate header data of the network packet after the hypervisor messaged is stored.

10. The system of claim 8, wherein the hypervisor message includes data pertaining to an audit log.

11. The system of claim 8, wherein the processor is further to generate the hypervisor message from data collected according to a company policy.

12. The system of claim 8, wherein the processor is further to link the shadow network buffer with a network stack on the virtual machine.

13. The system of claim 8, wherein the processor is further to:

determine an importance classification of the network packet; and

based on the importance classification of the network packet, select locations of the network packet that includes non-empty space.

14. The method of claim 13, wherein the processor is to determine the importance classification of the network packet by determining whether the network packet is a message in a connection handshake protocol.

15. A system comprising:

a processor to;

receive a network packet sent over a network path generated by a virtual machine execution on a computing device;

determine whether a magic marker is stored in the network packet; and

based a determination that the magic marker is stored in the network packet, extract a hypervisor message from the network packet; and

forward the network packet, with the hypervisor message extracted out, to a next network device along a network path leading to a destination computing device.