Private allocated networks over shared communications infrastructure

• US 9,306,910 B2
• Filed: 10/21/2013
• Issued: 04/05/2016
• Est. Priority Date: 07/27/2009
• Status: Active Grant

• Current Assignee: Vmware LLC (Broadcom, Inc.)
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Lambeth, W. Andrew, Dalal, Anupam, Deianov, Borislav, Xiao, Jun
• Primary Examiner(s): O CONNOR, BRIAN T
• Application Number:
  US14/059,413
• Publication Number:
  US 20140112343A1
• Time in Patent Office: 897 Days
• Field of Search: 370/389, 370/390, 370/392, 709/238, 709/239
• US Class Current: 1/1
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 49/354 for supporting virtual local area networks [VLAN]
• CPC Class Codes: H04L 49/70 Virtual switches
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 65/611 for multicast or broadcast systems for broadcast or conference H04L12/18; arrangements for broadcast or distribution combined with broadcast H04H20/00; arrangements for broadcast applications with a direct linkage to broadcast information or to broadcast space-time H04H60/00; selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS], H04W4/06
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/324 in the data link layer [OSI layer 2], e.g. HDLC
• CPC Class Codes: H04L 69/325 in the network layer [OSI layer 3], e.g. X.25 H04L69/16 takes precedence

Abstract

Methods and systems for implementing private allocated networks in a virtual infrastructure are presented. One method operation creates virtual switches in one or more hosts in the virtual infrastructure. Each port in the virtual switches is associated with a private allocated network (PAN) from a group of possible PANs. In one embodiment, one or more PANs share the same physical media for data transmission. The intranet traffic within each PAN is not visible to nodes that are not connected to the each PAN. In another operation, the method defines addressing mode tables for the intranet traffic within each PAN. The entries in the addressing mode tables define addressing functions for routing the intranet traffic between the virtual switches, and different types of addressing functions are supported by the virtual switches.

Claims

1. For a controller, a method for managing a virtualized infrastructure, the method comprising:

assigning a set of virtual machines on a particular private allocated network (PAN) to a set of host machines in a network of host machines, wherein a plurality of PANs are implemented within the network;

generating, for each host machine of the set of host machines, a different addressing mode table that specifies, for a virtual switch on the host machine, rules for forwarding packets between virtual machines within the particular PAN, wherein the addressing mode table for a first host machine in the set specifies different rules for forwarding packets to a particular virtual machine in the PAN than the rules for forwarding packets to the particular virtual machine specified by the addressing mode table for a second host machine in the set; and

distributing the generated addressing mode tables to the set of host machines in order for the host machines to forward packets between the virtual machines assigned to the particular PAN.

2. The method of claim 1, wherein the addressing mode table for the first host machine comprises a plurality of entries for forwarding packets to virtual machines assigned to the particular PAN.

3. The method of claim 1, wherein the particular virtual machine is located in the first host machine.

4. The method of claim 1, wherein the particular virtual machine is located on a third host machine, the first host machine is on a same L2 network as the third host machine, and the second host machine is on a different L2 network from the third host machine.

5. The method of claim 1, wherein the particular PAN is a first PAN, the method further comprising:

assigning a second set of virtual machines on a second PAN to a second set of host machines in the network;

generating, for each host machine of the second set of host machines, a different addressing mode table that specifies, for a virtual switch on the host machine of the second set of host machines, rules for forwarding packets between virtual machines within the second PAN; and

distributing the generated addressing mode tables to the second set of host machines in order for the host machines to forward packets between the virtual machines assigned to the second PAN.

6. The method of claim 5, wherein at least one host machine is in both the first set of host machines and the second set of host machines.

7. The method of claim 1, wherein assigning the set of virtual machines to the set of host machines comprises:

assigning each virtual machine to a corresponding port of a host machine; and

assigning the corresponding ports to the particular PAN.

8. For a virtual switch operating in a host machine, a method for forwarding packets between virtual machines residing on a plurality of host machines, the method comprising:

receiving, from a centralized controller, an addressing mode table for a particular private allocated network (PAN), the addressing mode table specifying addressing functions for use in forwarding packets to virtual machines on the PAN;

receiving a packet from a first virtual machine through a port of the virtual switch, the particular port assigned to the particular PAN;

looking up an addressing function to use in forwarding the packet to a destination virtual machine;

modifying the packet as specified by the addressing function, wherein unicast packets addressed to a first virtual machine on the PAN are modified according to a first addressing function and unicast packets addressed to a second virtual machine on the PAN are modified according to a second addressing function; and

sending the modified packet to the destination virtual machine.

9. The method of claim 8, wherein modifying the packet comprises translating a PAN-specific layer 2 address to a unique layer 2 address.

10. The method of claim 9, wherein a plurality of different PANs are implemented by virtual switches operating in the host machines, wherein the PAN-specific layer 2 address is an address used within the particular PAN as the layer 2 address for the destination virtual machine, wherein the PAN-specific layer 2 address is also used within a different PAN as the layer 2 address for a different virtual machine.

11. The method of claim 8, wherein modifying the packet comprises encapsulating the packet with an IP address of a host machine on which the destination virtual machine resides.

12. The method of claim 8 further comprising:

receiving a second packet from the first virtual machine, wherein the second packet is addressed to a second virtual machine assigned to the PAN, the second virtual machine also residing on the host machine; and

sending the second packet to the second virtual machine without modification.

13. The method of claim 8, wherein the packet is a broadcast packet to all virtual machines assigned to the PAN, wherein modifying the packet comprises converting the broadcast packet to a multicast packet for a predefined multicast group.

14. A system comprising:

a plurality of host machines that each comprise a virtual switch for forwarding packets between virtual machines that reside on the host machines, wherein each virtual machine is assigned to a private allocated network (PAN), wherein virtual machines on a same PAN communicate with each other and not with virtual machines on different PANs; and

a controller for generating, for each host machine in the plurality of host machines, a set of addressing mode tables that specify rules for forwarding packets between virtual machines in a PAN and distributing the addressing mode tables to the host machines,

wherein each host machine receives from the controller an addressing mode table for each PAN to which any one of its virtual machines belongs, wherein a first host machine receives an addressing mode table for a particular PAN that specifies a different rule for forwarding packets to a particular virtual machine in the particular PAN than a rule for forwarding packets to the particular virtual machine specified by the addressing mode table received by a second host machine.

15. The system of claim 14, wherein the plurality of host machines update the addressing mode tables for the particular PAN when virtual machines in the particular PAN are migrated between host machines.

16. The system of claim 14, wherein when a particular virtual machine assigned to the particular PAN migrates from a third host machine to a fourth host machine on which the particular PAN is not implemented, the controller generates a new addressing mode table for the particular PAN for the fourth host machine and distributes the new addressing mode table to the fourth host machine.

17. The system of claim 14, wherein the addressing mode table for the first host machine for the particular PAN specifies using L2 translation for packets sent to the particular virtual machine while the addressing mode table for the second host machine for the particular PAN specifies using L3 encapsulation for packets sent to the particular virtual machine.

18. The system of claim 14, wherein the addressing mode table for the first host machine for the particular PAN specifies using L2 translation for packets sent to the particular virtual machine while the addressing mode table for the second host machine for the particular PAN specifies not modifying the packet for sending to the particular virtual machine.

19. The system of claim 18, wherein the particular virtual machine resides on the second host machine.