MAC layer bridging of network frames between isolated and external networks

• US 7,761,604 B2
• Filed: 07/24/2007
• Issued: 07/20/2010
• Est. Priority Date: 06/12/2003
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Larson, David Anthony, Lucke, Kyle Alan
• Primary Examiner(s): Strange; Aaron
• Assistant Examiner(s): Eskandarnia; Arvin
• Application Number:
  US11/782,466
• Publication Number:
  US 20080016251A1
• Time in Patent Office: 1,092 Days
• Field of Search: 709/249
• US Class Current: 709/249
• CPC Class Codes: H04L 12/462 LAN interconnection over a bridge based backbone
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/52 Multiprotocol routers

Abstract

An apparatus, program product and method bridge an isolated network such as a virtual network to an external network such as another virtual network or physical network by utilizing a network adapter on the other network that is assigned the same Media Access Control (MAC) address as an isolated network adapter on the isolated network.

Claims

1. A method of bridging first and second networks, the first network coupled to a first computer via a first network adapter in the first computer, and the second network coupled to a second computer via a second network adapter in the second computer, and wherein the first network is an isolated network and the first network adapter is an isolated network adapter, the method comprising, in the second computer:

detecting a first network frame communicated by the first computer over the first network by detecting a media access control (MAC) address for the first network frame that is associated with the first network adapter;

forwarding the first network frame to the second network using the second network adapter such that a source MAC address for the first network frame identifies the first network adapter as a source of the first network frame;

receiving a second network frame from the second network via the second network adapter, wherein the second network frame is addressed to the MAC address associated with the first network adapter; and

forwarding the second network frame to the first network;

wherein detecting the first network frame is performed by a device driver for a third network adapter coupled to the first network, and wherein forwarding the first network frame to the second network comprises passing the first network frame from the device driver for the third network adapter to a device driver for the second network adapter, and transmitting the first network frame to the second network using the third second network adapter.

2. The method of claim 1, wherein forwarding the second network frame to the first network comprises passing the second network frame from the device driver for the second network adapter to the device driver for the third network adapter, and transmitting the second network frame to the first network using the third network adapter.

3. The method of claim 1, wherein the first and second network adapters are assigned the same MAC address.

4. The method of claim 1, wherein the first network is a virtual network and the first network adapter is a virtual network adapter.

5. The method of claim 4, wherein the second network is a virtual network and the second network adapter is a virtual network adapter.

6. The method of claim 5, wherein the second computer comprises a logical partition in a logically-partitioned computer system, wherein the first network comprises an intra-partition network resident in the logical partition, and wherein the second network comprises an inter-partition network coupled to a plurality of logical partitions.

7. The method of claim 4, wherein the second network is a physical network and the second network adapter is a physical network adapter.

8. The method of claim 4, wherein the first computer is integrated into the second computer.

9. The method of claim 8, wherein the first computer comprises an integrated card-based computer.

10. The method of claim 4, wherein the second computer comprises a logical partition in a logically-partitioned computer system.

11. A method of bridging first and second networks, the first network coupled to a first computer via a first network adapter in the first computer, and the second network coupled to a second computer via a second network adapter in the second computer, wherein the first and second network adapters are assigned the same media access control (MAC) address, and wherein the first network is an isolated network and the first network adapter is an isolated network adapter, the method comprising, in the second computer:

detecting a first network frame communicated by the first computer over the first network by detecting a media access control (MAC) address for the first network frame that is associated with the first network adapter;

forwarding the first network frame to the second network using the second network adapter such that a source MAC address for the first network frame identifies the first network adapter as a source of the first network frame even though the first network frame is sent to the second network by the second network adapter;

receiving a second network frame from the second network via the second network adapter, wherein the second network frame is addressed to the MAC address associated with the first network adapter; and

forwarding the second network frame to the first network, wherein detecting the first network frame is performed by a device driver for a third network adapter coupled to the first network, and wherein forwarding the first network frame to the second network comprises passing the first network frame from the device driver for the third network adapter to a device driver for the second network adapter, and transmitting the first network frame to the second network using the second network adapter.

12. The method of claim 11, wherein forwarding the second network frame to the first network comprises passing the second network frame from the device driver for the second network adapter to the device driver for the third network adapter, and transmitting the second network frame to the first network using the third network adapter.