Routing across a virtual network

• US 8,370,834 B2
• Filed: 03/09/2009
• Issued: 02/05/2013
• Est. Priority Date: 03/07/2008
• Status: Active Grant

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Edwards, Aled, Fischer, Anna, Dalton, Chris I, Goldsack, Patrick
• Primary Examiner(s): Chan, Eddie P
• Assistant Examiner(s): Partridge, William B
• Application Number:
  US12/400,491
• Publication Number:
  US 20100107162A1
• Time in Patent Office: 1,429 Days
• Field of Search: None
• US Class Current: 718/1
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues
• CPC Class Codes: H04L 45/58 Association of routers
• CPC Class Codes: H04L 45/76 Routing in software-defined topologies, e.g. routing between virtual machines
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 69/32 Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
• CPC Class Codes: H04L 69/321 Interlayer communication protocols or service data unit [SDU] definitions; Interfaces between layers

Abstract

A data center can share processing resources using virtual networks. A virtual machine manager (10) hosts one or more virtual machines (11, 411), the virtual machines forming part of a segmented virtual network (34). Outgoing messages from the virtual machines have an intermediate destination address of an intermediate node in a local segment of the segmented virtual network, and the virtual machine manager has a router (18) for determining a new intermediate destination address outside the local segment, for routing the given outgoing message. By having the router as part of the virtual machine manager rather than having only a switch in the virtual machine manager, the need for virtual machines for implementing gateways is avoided. This can reduce the number of “hops” for the message between virtual entities hosted, and thus improve performance. This can help a service provider to share physical processing resources of a data center between different clients having their own virtual networks.

Claims

1. A virtual machine manager to host one or more virtual machines that form part of a segmented virtual network and to receive outgoing messages from the one or more virtual machines, at least a given one of the outgoing messages having a part allocated for an intermediate destination address representing an intermediate node in a local segment of the segmented virtual network, the intermediate node being suitable for passing the given outgoing message on towards a destination node in another of the segments, the virtual machine manager comprising:

a router configured to determine a new intermediate destination address outside the local segment, and to route the given outgoing message according to the new intermediate destination address;

wherein the router is configured to change the intermediate destination address of the given outgoing message from an address in the virtual network to an address of a node in a physical communications network; and

wherein the virtual machine manager is configured to receive an incoming message from the physical communications network destined for one or more of the one or more hosted virtual machines, and wherein the router is configured to change an intermediate destination address of the incoming message from an address in the physical communications network to an address in the virtual network.

2. The virtual machine manager of claim 1, further comprising a physical network interface configured to communicate with other entities over the physical communications network, to route messages to the other entities.

3. The virtual machine manager of claim 2, wherein the other entities comprise other virtual machine managers, and wherein the virtual machine manager is configured to determine to which of the other virtual machine managers to route the given outgoing message.

4. The virtual machine manager of claim 1, wherein the outgoing messages comprise a source address, and wherein the router is configured to change the source address.

5. The virtual machine manager of claim 1, wherein the virtual machine manager is further configured to determine the new intermediate destination address from another part of the given outgoing message.

6. The virtual machine manager of claim 1, wherein the outgoing messages each comprises a final destination address and the router is configured to determine the new intermediate destination address based on the respective final destination address.

7. The virtual machine manager of claim 1, further comprising a message filtering part.

8. The virtual machine manager of claim 1, further comprising a routing policy part, the new intermediate destination address being determined based on the routing policy part.

9. The virtual machine manager of claim 1, further comprising a rate control part.

10. The virtual machine manager of claim 3, wherein the virtual machine manager is further configured to determine the new intermediate destination address by multicasting to at least some of the other virtual machine managers to determine which of the other virtual machine managers hosts a next destination entity of the given outgoing message.

11. The virtual machine manager of claim 10, wherein the virtual machines are grouped into farms, the virtual machine manager is configured to identify to which farm a destination of the given outgoing message belongs, and the multicasting is limited according to which other virtual machine managers host entities of the same farm.

12. The virtual machine manager of claim 1, wherein the outgoing messages comprise a network layer destination address and the intermediate destination address comprises a link layer address.

13. The virtual machine manager of claim 1, wherein the virtual machine manager is further configured to route the given outgoing message directly to a final destination in the virtual network if the determined new intermediate destination address corresponds to the final destination.

14. A method of operating a virtual machine manager to host one or more virtual machines, the one or more virtual machines forming part of a segmented virtual network, the method comprising:

using the virtual machine manager to receive outgoing messages from the one or more virtual machines, at least a given one of the outgoing messages having a part allocated for an intermediate destination address representing an intermediate node in a local segment of the segmented virtual network, the intermediate node being suitable for passing the given outgoing message on towards a destination node in another of the segments;

determining a new intermediate destination address outside the local segment;

routing the given outgoing message according to the new intermediate destination address;

changing the intermediate destination address of the given outgoing message from an address in the virtual network to an address of a node in a physical communications network;

receiving an incoming message from the physical communications network, destined for one or more of the one or more hosted virtual machines; and

changing an intermediate destination address of the incoming message from an address in the physical communications network to an address in the virtual network.

15. A computer readable non-transitory medium encoded with a program which when executed causes a virtual machine manager to operate according to the method set out in claim 14.

16. A data center having a number of virtual machine managers, wherein each virtual machine manager is configured to host one or more virtual machines, the one or more virtual machines forming part of a segmented virtual network and to receive outgoing messages from the one or more virtual machines, at least some of the outgoing messages having a part allocated for an intermediate destination address representing an intermediate node in a local segment of the segmented virtual network, the intermediate node being suitable for passing the given outgoing message on towards a destination node in another of the segments, the virtual machine manager having a router configured to determine a new intermediate destination address outside the local segment, and to route the given outgoing message according to the new intermediate destination address, the virtual machine managers each having a physical network interface configured to communicate with others of the virtual machine managers over a physical communications network, and to route messages to virtual machines hosted by the other virtual machine managers,

wherein the router is configured to change the intermediate destination address of the given outgoing message from an address in the virtual network to an address of a node in the physical communications network, and

wherein the virtual machine manager is configured to receive an incoming message from the physical communications network, destined for one or more of the hosted one or more virtual machines, and wherein the route is configured to change an intermediate destination address of the incoming message from an address in the physical communications network to an address in the virtual network.

17. A method of providing a service to a user, the service being run by one or more virtual machines in a data center, the data center having a number of virtual machine managers each hosting one or more of the virtual machines, the virtual machines forming part of a segmented virtual network, the virtual machine managers each having a router and a physical network interface to communicate with others of the virtual machine managers over a physical communications network, to route messages to virtual machines hosted by the other virtual machine managers, the method comprising:

receiving from a user remote from the data center, an input to the service, the input causing a given one of the virtual machines to send an outgoing message to another of the virtual machines, the outgoing message having a part allocated for an intermediate destination address representing an intermediate node in a local segment of the segmented virtual network, the intermediate node being suitable for passing the outgoing message on towards a destination node outside the local segment, and thus causing the router of the virtual machine manager to determine a new intermediate destination address outside the local segment, and to route the given outgoing message according to the new intermediate destination address;

generating a response by running the service, and sending the response to the user using one or more of the virtual machines running the service;

changing the intermediate destination address of the outgoing message from an address in the virtual network to an address of a node in the physical communications network;

receiving an incoming message from the physical communications network, destined for one or more of the one or more hosted virtual machines; and

changing an intermediate destination address of the incoming message from an address in the physical communications network to an address in the virtual network.

18. A method of using a service run by one or more virtual machines in a data center the data center having a number of virtual machine managers each hosting one or more of the virtual machines, the virtual machines forming part of a segmented virtual network, the virtual machine managers each having a router and a physical network interface to communicate with others of the virtual machine managers over a physical communications network, to route messages to virtual machines hosted by the other virtual machine managers, the method comprising:

a user remote from the data center using the service by sending an input to the service which causes a given one of the virtual machines to send an outgoing message to another of the virtual machines, the outgoing message having a part allocated for an intermediate destination address representing an intermediate node in a local segment of the segmented virtual network, the intermediate node being suitable for passing the outgoing message on towards a destination node outside the local segment, and to cause the router of the virtual machine manager to determine a new intermediate destination address outside the local segment, and to route the given outgoing message according to the near intermediate destination address;

the user receiving a response generated by the service, the response having been sent to the user by one of the virtual machines running the service;

changing the intermediate destination address of the outgoing message from an address in the virtual network to an address of a node in the physical communications network;

receiving an incoming message from the physical communications network, destined for one or more of the one or more hosted virtual machines; and

changing an intermediate destination address of the incoming message from an address in the physical communications network to an address in the virtual network.