Methods and apparatus for providing a network service to a virtual machine

• US 7,228,337 B1
• Filed: 09/11/2001
• Issued: 06/05/2007
• Est. Priority Date: 09/11/2001
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: O'Toole, James W. Jr., Morris, Stephen Jeffrey, Bornstein, David M.
• Primary Examiner(s): Lim; Krisna
• Assistant Examiner(s): REILLY, SEAN M
• Application Number:
  US09/950,334
• Time in Patent Office: 2,093 Days
• Field of Search: 709/227, 709/238, 709/249, 718/104, 718/105, 718/106, 718/107, 719/311, 719/319, 370/389, 370/392, 370/395.31, 703 23- 27
• US Class Current: 709/217
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2517 using port numbers
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

In a computational device, a technique provides network communications to a virtual machine. In particular, the technique includes receiving a first communications signal having a first address and data from an external device, performing a network address translation operation based on the first communications signal to obtain a second address that identifies the virtual machine and providing a second communications signal having the second address and the data, to the virtual machine. The technique may further include using an external network Internet Protocol address and port identifier and to translate the first communications signal into an internal network Internet Protocol address by accessing an entry of a network address translation table.

Claims

1. In a computational device, a method for providing a network service to a virtual machine, the method comprising the steps of:

running a native operating system and running a virtual machine environment operating system on the native operating system, the virtual machine environment operating system being different than said native operating system;

receiving a first communications signal from an external device, the first communications signal having a first address and data;

performing a network address translation operation based on the first communications signal to obtain a second address that identifies the virtual machine environment operating system; and

providing, to the virtual machine, a second communications signal having the second address and the data;

wherein a first content server runs in the virtual machine environment operating system, wherein a second content server runs in native operating system, and wherein the method further comprises;

transferring a communication from the second content server to the first content server, and

moving content from both the first and second content servers to the external device in response to the second communications signal.

2. The method of claim 1 wherein the computational device connects with the external device through an external network, wherein the first address is an external network Internet Protocol address, wherein the virtual machine resides in an internal network within the computational device, wherein the second address is an internal network Internet Protocol address, and wherein the step of performing includes the step of:

conducting a network address translation routine to convert the external network Internet Protocol address to the internal network Internet Protocol address.

3. The method of claim 2 wherein the computational device includes a network address translation table, wherein the first communications signal further includes a port identifier, and wherein the step of conducting includes the step of:

accessing an entry of the network address translation table based on the port identifier of the first communications signal in order to obtain the internal network Internet Protocol address.

4. The method of claim 1 wherein the step of providing the second communications signal includes the steps of:

removing a first header from the first communications signal, the first header having the first address;

creating a second header having the second address; and

combining the second header with the data to form the second communications signal.

5. The method of claim 1 wherein the virtual machine includes a virtual network interface, and wherein the step of providing includes the step of:

transferring the data to the virtual machine through the virtual network interface.

6. The method of claim 1 wherein, based upon identifying a second communications signal that will not be provided to the virtual machine, the step of receiving further includes the step of:

discarding the first communications signal.

16. The method of claim 1 wherein the computational device connects with the external device through an external network, wherein the first address is an external network Internet Protocol address, wherein the virtual machine resides in an internal network within the computational device, wherein the second address is an internal network Internet Protocol address, and wherein the step of performing includes the step of conducting a network address translation routine to convert the external network Internet Protocol address to the internal network Internet Protocol address;

wherein the first communications signal further includes a port identifier, and wherein the step of conducting includes the step of accessing an entry of the network address translation table based on the port identifier of the first communications signal in order to obtain the internal network Internet Protocol address;

wherein the step of providing the second communications signal includes the steps of;

removing a first header from the first communications signal, the first header having the first address;

creating a second header having the second address; and

combining the second header with the data to form the second communications signal;

wherein the step of providing includes the step of sending at least one additional communications signal having at least one additional address and the data to at least one application running in the at least one additional operating system environments;

wherein a first content server runs in the first operating system environment, wherein a second content server runs in the second operating system environment, and wherein the method further comprises the steps of;

transferring a communication from the second content server to the first content server; and

moving content from both the first and second content servers to the external device in response to the second communications signal;

wherein the virtual machine includes a virtual network interface, and

wherein the step of providing includes the step of;

transferring the data to the virtual machine through the virtual network interface; and

wherein, based upon identifying a second communications signal that will not be provided to the virtual machine, the step of receiving further includes the step of discarding the first communications signal.

20. The method of claim 1, wherein receiving comprises receiving, by the native operating system, the first communications signal from an external device, the first communications signal having the first address and data.

21. The method of claim 1, wherein running a virtual machine environment operating system on the native operating system comprises running a first virtual machine environment operating system and a second virtual machine environment operating system on the native operating system, the first virtual machine environment operating system being different than the second operating system environment.

22. The method of claim 1, wherein the computational device comprises a single network address that identifies the native operating system on a network.

23. The method of claim 1 wherein:

receiving comprises receiving a single content request from the external device, the single content request having the first address and data; and

moving content comprises;

sending a first content portion, by the first content server through the computational device, to the external device in response to the single content request; and

sending a second content portion, by the second content server through the computational device, to the external device in response to the single content request, the first content portion and the second content portion forming a collective response to the single content request.

24. The method of claim 23, further comprising detecting, by the second content server, presence of the first content portion, the first content portion forming part of the collective response to the single content request and wherein:

transferring comprise transferring the communication from the second content server to the first content server, the communication indicating the first portion forms part of the collective response to the single content request; and

moving comprises moving, in response to the single content request and the communication from the first content server to the second content server, content from both the first and second content servers to the external device in response to the second communications signal.

7. A computational device comprising:

a network interface that is capable of coupling to an external device;

memory that stores a control application; and

a processor coupled to the network interface and the memory, wherein said processor runs a native operating system and runs a virtual machine environment operating system on the native operating system, the virtual machine environment operating system being different than said native operating system, and wherein when (i) the processor operates in accordance with the control application, (ii) the processor runs the virtual machine, and (iii) the network interface couples to the external device, the processor is configured to;

receive a first communications signal from the external device, the first communications signal having a first address and data,

perform a network address translation operation based on the first communications signal to obtain a second address that identifies the virtual machine environment operating system, and

provide, to the virtual machine, a second communications signal having the second address and the data,

wherein the computational device runs a first operating system to Provide a first operating system environment, wherein the controller, to provide at least one additional communications signal, is configured to;

send at least one additional communications signal having at least one additional address and the data to an application running in the at least one additional operating system environment,

wherein a first content server runs in the first operating system environment, wherein a second content server runs in the second operating system environment, and wherein the controller, obtain content, is configured to;

transfer a communication from the second content server to the first content server; and

move content from both the first and second content servers to the external device in response to obtain the second communications signal.

8. The computational device of claim 7 wherein the first address is an external network Internet Protocol address, wherein the virtual machine resides in an internal network within the computational device, wherein the second address is an internal network Internet Protocol address, and wherein the processor, to perform the network address translation, is further configured to:

conduct a network address translation routine to convert the external network Internet Protocol address to the internal network Internet Protocol address.

9. The computational device of claim 8 wherein the computational device includes a network address translation table, wherein the first communications signal further includes a port identifier, and wherein the processor, to perform the network address translation, is configured to:

access an entry of the network address translation table based on the port identifier of the first communications signal in order to obtain the internal network Internet Protocol address.

10. The computational device of claim 7 wherein the controller, to provide the second communications signal, is configured to:

remove a first header from the first communications signal, the first header having the first address;

create a second header having the second address; and

combine the second header with the data to form the second communications signal.

11. The computational device of claim 7 wherein the virtual machine includes a virtual network interface, and wherein the controller, to provide content, is configured to:

transfer the data to the virtual machine through the virtual network interface.

12. The computational device of claim 7 wherein the virtual machine, based upon determining whether to translate a first communication signal, is further configured to:

optionally conduct the network address translation.

13. The computational device of claim 7 which further includes system parameters that are capable of controlling operation of a second operating system upon installation of the second operating system, wherein the second operating system is capable of running at least one application program, and wherein the processor, to send the second communications signal to the applications, is configured to:

use a pre-determined set of system parameters upon installation of the second operating system.

17. The computational device of claim 7 wherein the first address is an external network Internet Protocol address, wherein the virtual machine resides in an internal network within the computational device, wherein the second address is an internal network Internet Protocol address, and wherein the processor, to perform the network address translation, is further configured to conduct a network address translation routine to convert the external network Internet Protocol address to the internal network Internet Protocol address;

wherein the computational device includes a network address translation table, wherein the first communications signal further includes a port identifier, and wherein the processor, to perform the network address translation, is configured to access an entry of the network address translation table based on the port identifier of the first communications signal in order to obtain the internal network Internet Protocol address;

wherein the controller, to provide the second communications signal, is configured to;

remove a first header from the first communications signal, the first header having the first address;

create a second header having the second address; and

combine the second header with the data to form the second communications signal;

wherein the controller, to provide at least one additional communications signal, is configured to send at least one additional communications signal having at least one additional address and the data to an application running in the at least one additional operating system environment;

wherein a first content server runs in the first operating system environment, wherein a second content server runs in the second operating system environment, and wherein the controller, obtain content, is configured to;

transfer a communication from the second content server to the first content server; and

move content from both the first and second content servers to the external device in response to obtain the second communications signal;

wherein the virtual machine includes a virtual network interface, and wherein the controller, to provide content, is configured to transfer the data to the virtual machine through the virtual network interface;

wherein the virtual machine, based upon determining whether to translate a first communication signal, is further configured to optionally conduct the network address translation; and

wherein said computational device further includes system parameters that are capable of controlling operation of a second operating system upon installation of the second operating system, wherein the second operating system is capable of running at least one application program, and wherein the processor, to send the second communications signal to the applications, is configured to use a pre-determined set of system parameters upon installation of the second operating system.

14. A computer program product that includes a computer readable medium having instructions stored thereon such that the instructions, when carried out by a computer running a native operating system, cause the computer to perform the steps of:

running a native operating system and running a virtual machine environment operating system on the native operating system, the virtual machine environment operating system being different than said native operating system;

receiving a first communications signal from an external device, the first communications signal having a first address and data;

performing a network address translation operation based on the first communications signal to obtain a second address that identifies the virtual machine environment operating system different than said native operating system; and

providing, to the virtual machine, a second communications signal having the second address and the data;

wherein a first content server runs in the virtual machine environment operating system, wherein a second content server runs in native operating system, and wherein the method further comprises;

transferring a communication from the second content server to the first content server, and

moving content from both the first and second content servers to the external device in response to the second communications signal.

18. The computer program product of claim 14 wherein the instructions further cause the computational device to perform the steps of:

connecting with the external device through an external network, wherein the first address is an external network Internet Protocol address, wherein the virtual machine resides in an internal network within the computational device, wherein the second address is an internal network Internet Protocol address;

wherein the step of performing includes the step of conducting a network address translation routine to convert the external network Internet Protocol address to the internal network Internet Protocol address;

wherein the first communications signal further includes a port identifier,

and wherein the step of conducting includes the step of accessing an entry of the network address translation table based on the port identifier of the first communications signal in order to obtain the internal network Internet Protocol address;

wherein the step of providing the second communications signal includes the steps of;

removing a first header from the first communications signal, the first header having the first address;

creating a second header having the second address; and

combining the second header with the data to form the second communications signal;

wherein the step of providing includes the step of sending at least one additional communications signal having at least one additional address and the data to at least one application running in the at least one additional operating system environments;

wherein a first content server runs in the first operating system environment, wherein a second content server runs in the second operating system environment, and wherein the method further comprises the steps of;

transferring a communication from the second content server to the first content server; and

moving content from both the first and second content servers to the external device in response to the second communications signal;

wherein the virtual machine includes a virtual network interface, and

wherein the step of providing includes the step of;

transferring the data to the virtual machine through the virtual network interface; and

wherein, based upon identifying a second communications signal that will not be provided to the virtual machine, the step of receiving further includes the step of discarding the first communications signal.

15. A computational device, comprising:

a network interface to communicate with at least one external device;

a processor to manipulate data received, the processor running a native operating system for running a virtual machine environment operating system different than said native operating system, capable of providing a network service to a virtual machine process; and

coupled to the network interface and the processor, means to receive a first communications signal from an external device, the first communications signal having data;

means to identify the virtual machine as a destination for the data; and

means to provide a second communications signal having the data to the virtual machine;

wherein a first content server runs in the virtual machine environment operating system, wherein a second content server runs in the native operating system, and wherein the device further comprises;

means for transferring a communication from the second content server to the first content server, and

means for moving content from both the first and second content servers to the external device in response to the second communications signal.

19. The computational device of claim 15 wherein the first address is an external network Internet Protocol address, wherein the virtual machine resides in an internal network within the computational device, wherein the second address is an internal network Internet Protocol address, and wherein the processor, to perform the network address translation, is further configured to conduct a network address translation routine to convert the external network Internet Protocol address to the internal network Internet Protocol address;

wherein the computational device includes a network address translation table, wherein the first communications signal further includes a port identifier, and wherein the processor, to perform the network address translation, is configured to access an entry of the network address translation table based on the port identifier of the first communications signal in order to obtain the internal network Internet Protocol address;

wherein the controller, to provide the second communications signal, is configured for;

means to remove a first header from the first communications signal, the first header having the first address;

means for creating a second header having the second address; and

means for combining the second header with the data to form the second communications signal;

wherein the controller, to provide at least one additional communications signal, is configured to send at least one additional communications signal having at least one additional address and the data to an application running in the at least one additional operating system environment;

wherein a first content server runs in the first operating system environment, wherein a second content server runs in the second operating system environment, and wherein the controller, obtain content, is configured for;

means for transferring a communication from the second content server to the first content server; and

means for moving content from both the first and second content servers to the external device in response to obtain the second communications signal;

wherein the virtual machine includes a virtual network interface, and wherein the controller, to provide content, is configured to transfer the data to the virtual machine through the virtual network interface;

wherein the virtual machine, based upon determining whether to translate a first communication signal, is further configured to optionally conduct the network address translation; and

wherein said computational device further includes system parameters that are capable of controlling operation of a second operating system upon installation of the second operating system, wherein the second operating system is capable of running at least one application program, and wherein the processor, to send the second communications signal to the applications, is configured to use a pre-determined set of system parameters upon installation of the second operating system.