Techniques for packet management in an input/output virtualization system

• US 9,231,864 B2
• Filed: 03/19/2012
• Issued: 01/05/2016
• Est. Priority Date: 03/19/2012
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Dong, Yao Z
• Primary Examiner(s): Mew, Kevin
• Application Number:
  US13/976,428
• Publication Number:
  US 20140233568A1
• Time in Patent Office: 1,387 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 13/00 Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units interface circuits for specific input/output devices G06F3/00 ; multiprogram control therefor G06F9/46; multiprocessor systems G06F15/16
• CPC Class Codes: G06F 13/385 for adaptation of a particular data processing system to different peripheral devices
• CPC Class Codes: G06F 13/387 for adaptation of different data processing systems to different peripheral devices, e.g. protocol converters for incompatible systems, open system
• CPC Class Codes: G06F 2213/0026 PCI express
• CPC Class Codes: G06F 2213/0058 Bus-related hardware virtualisation
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/741 Routing in networks with a plurality of addressing schemes, e.g. with both IPv4 and IPv6
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 49/70 Virtual switches

Abstract

Techniques for managing packets in an input/output virtualization (IOV) capable computing environment are described herein. One aspect comprises receiving, at one or more transceivers comprising an input/output capable adapter, a packet addressed to an input/output virtualization capable adapter destination, and forwarding the packet to a virtual router; applying, by a processor circuit coupled to the one or more transceivers, one or more packet management policies to the packet via the virtual router; routing the packet via the virtual router to the input/output virtualization capable adapter destination; and transmitting the packet to the input/output virtualization capable adapter destination via an input/output virtualization capable adapter architecture. Other embodiments are described and claimed.

Claims

1. An apparatus, comprising:

one or more transceivers comprising an input/output virtualization capable adapter;

a processor circuit coupled to the one or more transceivers; and

a memory unit coupled to the processor circuit, the memory unit to store a packet management application operative on the processor circuit to apply packet management policies and to route packets transmitted to and from the input/output virtualization capable adapter, the packet management application comprising;

a proxy interface upstream component operative to receive and forward a packet addressed to an input/output virtualization capable adapter destination;

a virtual router component operative to receive the packet as forwarded by the proxy interface upstream component, the virtual router component to apply one or more packet management policies to the packet and to route the packet to the input/output virtualization capable adapter destination; and

a proxy interface downstream component operative to receive the packet as routed by the virtual router and to transmit the packet to the input/output virtualization capable adapter destination via a layer 2 switch of an input/output virtualization capable adapter architecture.

2. The apparatus of claim 1, the input/output virtualization capable adapter comprising a single root input/output virtualization capable network interface card.

3. The apparatus of claim 1, the proxy interface upstream component comprising a network interface card.

4. The apparatus of claim 1, the proxy interface upstream component comprising a virtual function of the input/output virtualization capable adapter.

5. The apparatus of claim 1, the virtual router component operative to:

apply one or more packet management policies comprising one or more address filtering policies, the one or more address filtering policies configured to lookup one or more addresses associated with the packet in an address registration associated with the input/output virtualization capable adapter; and

prevent transmission of a packet associated with an address not located in the address registration.

6. The apparatus of claim 1, the virtual router component operative to route the packet via modifying a destination address of the packet from an external destination address associated with the proxy interface upstream component to an internal destination address associated with the input/output virtualization capable adapter destination.

7. The apparatus of claim 1, the proxy interface downstream component operative to receive a packet from the input/output virtualization capable adapter architecture and to forward the packet to the virtual router component;

wherein the virtual router component is operative to apply one or more packet management policies to the packet, modify a destination address of the packet to an external destination address associated with an external destination, and to forward the packet to the proxy interface upstream component;

wherein the proxy interface upstream component is operative to transmit the packet to an external network.

8. The apparatus of claim 1, the packet management apparatus comprising a gating component operative to suppress transmission of packets from an input/output virtualization capable adapter source to an external network, the packets being configured to bypass the virtual router component.

9. The apparatus of claim 1, the input/output virtualization capable adapter comprising a plurality of virtual functions arranged in one or more sub-networks, the one or more sub-networks comprising one or more proxy interface downstream components configured to receive packets transmitted between the plurality of virtual functions.

10. A method, comprising:

receiving, at one or more transceivers comprising an input/output capable adapter and accessible by a computing device, a packet addressed to an input/output virtualization capable adapter destination, and forwarding the packet to a virtual router;

applying, by a processor circuit coupled to the one or more transceivers, one or more packet management policies to the packet via the virtual router;

routing the packet via the virtual router to the input/output virtualization capable adapter destination; and

transmitting the packet to the input/output virtualization capable adapter destination via a layer 2 switch of an input/output virtualization capable adapter architecture.

11. The method of claim 10, the input/output virtualization capable adapter comprising a single root input/output virtualization capable network interface card.

12. The method of claim 10, comprising receiving the packet addressed to the input/output virtualization capable adapter destination via a network interface card.

13. The method of claim 10, comprising receiving the packet addressed to the input/output virtualization capable adapter destination via a virtual function of the input/output virtualization capable adapter.

14. The method of claim 10, comprising transmitting the packet to the input/output virtualization capable adapter destination via the input/output virtualization capable adapter architecture utilizing a physical function of the input/output virtualization capable adapter.

15. The method of claim 10, comprising:

applying one or more packet management policies comprising one or more address filtering policies, the one or more address filtering policies configured to lookup one or more addresses associated with the packet in an address registration associated with the input/output virtualization capable adapter; and

preventing transmission of a packet associated with an address not located in the address registration.

16. The method of claim 10, comprising routing the packet via modifying a destination address of the packet from an external destination address associated with the input/output virtualization capable adapter to an internal destination address associated with the input/output virtualization capable adapter destination.

17. The method of claim 10, comprising receiving a packet from the input/output virtualization capable adapter architecture, and forwarding the packet to the virtual router;

wherein the virtual router is configured to apply one or more packet management policies to the packet, modify a destination address of the packet to an external destination address associated with an external destination, and forward the packet for transmission to an external network.

18. The method of claim 10, comprising suppressing transmission of packets from an input/output virtualization capable adapter source to an external network, the packets being configured to bypass the virtual router.

19. The method of claim 10, comprising arranging a plurality of virtual functions of the input/output virtualization capable adapter in one or more sub-networks, the one or more sub-networks comprising one or more proxy interface downstream components configured to receive packets transmitted between the plurality of virtual functions.

20. At least one non-transitory computer-readable medium comprising a plurality of instructions that in response to being executed on a computing device, cause the computing device to:

receive, at one or more transceivers comprising an input/output capable adapter and accessible by a computing device, a packet addressed to an input/output virtualization capable adapter destination, and forwarding the packet to a virtual t;

apply, by a processor circuit coupled to the one or more transceivers, one or more packet management policies to the packet via the virtual router;

route the packet via the virtual router to the input/output virtualization capable adapter destination; and

transmit the packet to the input/output virtualization capable adapter destination via a layer 2 switch of an input/output virtualization capable adapter architecture.

21. The at least one non-transitory computer-readable storage medium of claim 20, comprising instructions that when executed cause the computing device to receive a packet at a single root input/output virtualization capable network interface card.

22. The at least one non-transitory computer-readable storage medium of claim 20, comprising instructions that when executed cause the computing device to receive the packet addressed to the input/output virtualization capable adapter destination via a network interface card.

23. The at least one non-transitory computer-readable storage medium of claim 20, comprising instructions that when executed cause the computing device to receive the packet addressed to the input/output virtualization capable adapter destination via a virtual function of the input/output virtualization capable adapter.

24. The at least one non-transitory computer-readable storage medium of claim 20, comprising instructions that when executed cause the computing device to:

apply one or more packet management policies comprising one or more address filtering policies, the one or more address filtering policies configured to lookup one or more addresses associated with the packet in an address registration associated with the input/output virtualization capable adapter; and

prevent transmission of a packet associated with an address not located in the address registration.

25. The at least one non-transitory computer-readable storage medium of claim 20, comprising instructions that when executed cause the computing device to route the packet via modifying a destination address of the packet from an external destination address associated with the input/output virtualization capable adapter to an internal destination address associated with the input/output virtualization capable adapter destination.

26. The at least one non-transitory computer-readable storage medium of claim 20, comprising instructions that when executed cause the computing device to receive a packet from the input/output virtualization capable adapter architecture, and forwarding the packet to the virtual router;

wherein the virtual router is configured to apply one or more packet management policies to the packet, modify a destination address of the packet to an external destination address associated with an external destination, and forward the packet for transmission to an external network.

27. The at least one non-transitory computer-readable storage medium of claim 20, comprising instructions that when executed cause the computing device to suppress transmission of packets from an input/output virtualization capable adapter source to an external network, the packets being configured to bypass the virtual router.

28. The at least one non-transitory computer-readable storage medium of claim 20, comprising instructions that when executed cause the computing device to arrange a plurality of virtual functions of the input/output virtualization capable adapter in one or more sub-networks, the one or more sub-networks comprising one or more proxy interface downstream components configured to receive packets transmitted between the plurality of virtual functions.