Hardware assisted flow acceleration and L2 SMAC management in a heterogeneous distributed multi-tenant virtualized clustered system

• US 9,519,501 B1
• Filed: 09/30/2013
• Issued: 12/13/2016
• Est. Priority Date: 09/30/2012
• Status: Active Grant

• Current Assignee: F5 Networks, Inc. (F5 Incorporated)
• Original Assignee: F5 Networks, Inc. (F5 Incorporated)
• Inventors: Cai, Hao, Michels, Timothy S., Szabo, Paul I.
• Primary Examiner(s): Crompton, Christopher R
• Application Number:
  US14/041,838
• Time in Patent Office: 1,170 Days
• Field of Search: 370/389
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 61/5038 for local use, e.g. in LAN or USB networks, or in a controller area network [CAN]
• CPC Class Codes: H04L 61/5061 Pools of addresses

Abstract

A method performed by a hypervisor in a virtual network traffic management cluster, the method comprising: assigning a set of continuous available source media access control (SMAC) addresses to one or more virtual network traffic management devices in a network traffic management cluster, the one or more virtual network traffic management devices configured to handle connections for virtual guest instances; assigning a region of predetermined size in a SMAC-index mapping table to a corresponding virtual network traffic management device; wherein the assigned SMAC addresses and assigned region in the SMAC-index mapping table are accessible by the virtual guest instances; and maintaining SMAC-index pool allocation to virtual guest instances handled by corresponding virtual network traffic management devices.

Claims

1. A method for facilitating network address translation in a virtualized network traffic management cluster, executable by one or more traffic management devices with at least one processor executing the method, the method comprising steps to:

assign, by a first processor on the one or more network traffic management devices, a set of continuous available source media access control (SMAC) addresses stored in a region of a MAC table to a network traffic management cluster comprising one or more virtual network traffic management devices;

establish, by a second processor on the one or more network traffic management devices, a connection in response to a request from one of the virtual network traffic management devices that received a packet associated with a new flow;

insert, by a third processor on the one or more network traffic management devices, a flow table entry comprising an index to the MAC table into a flow table in a hardware-based data flow segment (DFS), wherein the flow table entry can be identified based on a key generated from a flow signature of the packet and the index corresponds to a MAC table entry in the MAC table storing one of the SMAC addresses corresponding to the one of the virtual network traffic management devices; and

transform, by a fourth processor on the one or more network traffic management devices, the packet associated with the connection using the one of the SMAC addresses as a source address of the received packet and send the received packet to a destination network device.

2. The method of claim 1, further comprising employing at least one of the first, second, third, or fourth processors on the one or more network traffic management devices to:

generate the key based on the flow signature of another received packet;

retrieve the flow table entry using the key and the MAC table entry using the index retrieved from the flow table entry; and

transform the another received packet using the MAC address.

3. The method of claim 1, wherein the at least a portion of the MAC table has a base boundary and a limit boundary, wherein storing of data associated with the virtual network traffic management devices is performed from the limit boundary in a converging manner to the base boundary.

4. The method of claim 1, further comprising employing at least one of the first, second, third, or fourth processors on the one or more network traffic management devices to enforce use of the set of SMAC addresses assigned to the virtual network traffic management devices.

5. The method of claim 1, further comprising employing at least one of the first, second, third, or fourth processors on the one or more network traffic management devices to:

receive a request from another one of the virtual network traffic management devices for one or more additional SMAC addresses; and

allocate additional space in the MAC table for, and assign to the another one of the virtual network traffic management devices, the one or more additional SMAC addresses.

6. The method as set forth in claim 1, wherein the first processor, the second processor, the third, and the fourth processor are the same processor.

7. The method as set forth in claim 1, wherein two or more of the first processor, the second processor, the third processor, or the fourth processor are on a same one of the network traffic management devices.

8. A non-transitory computer readable medium having stored thereon instructions for facilitating network address translation in a virtualized, comprising executable code which when executed by one or more processors causes the processors to perform steps comprising:

assigning a set of continuous available source media access control (SMAC) addresses stored in a region of a MAC table to a network traffic management cluster comprising one or more virtual network traffic management devices;

establishing a connection in response to a request from one of the virtual network traffic management devices that received a packet associated with a new flow;

inserting a flow table entry comprising an index to the MAC table into a flow table in a hardware-based data flow segment (DFS), wherein the flow table entry can be identified based on a key generated from a flow signature of the packet and the index corresponds to a MAC table entry in the MAC table storing one of the SMAC addresses corresponding to the one of the virtual network traffic management devices; and

transforming the packet associated with the connection using the one of the SMAC addresses as a source address of the received packet and send the received packet to a destination network device.

9. The non-transitory computer readable medium of claim 8, further having stored thereon executable code which when executed by the processors further causes the processors to perform one or more additional steps comprising:

generating the key based on the flow signature of another received packet;

retrieving the flow table entry using the key and the MAC table entry using the index retrieved from the flow table entry; and

transforming the another received packet using the MAC address.

10. The non-transitory computer readable medium of claim 8, wherein the at least a portion of the MAC table has a base boundary and a limit boundary, wherein storing of data associated with the virtual network traffic management devices is performed from the limit boundary in a converging manner to the base boundary.

11. The non-transitory computer readable medium of claim 8, further having stored thereon executable code which when executed by the processors further causes the processors to perform one or more additional steps comprising enforcing use of the set of SMAC addresses assigned to the virtual network traffic management devices.

12. The non-transitory computer readable medium of claim 8, further having stored thereon executable code which when executed by the processors further causes the processors to perform one or more additional steps comprising:

receiving a request from another one of the virtual network traffic management devices for one or more additional SMAC addresses; and

allocating additional space in the MAC table for, and assign to the another one of the virtual network traffic management devices, the one or more additional SMAC addresses.

13. One or more network traffic management devices comprising:

memory comprising programmed instructions stored in the memory; and

one or more processor configured to be capable of executing the programmed instructions stored in the memory to;

assign a set of continuous available source media access control (SMAC) addresses stored in a region of a MAC table to a network traffic management cluster comprising one or more virtual network traffic management devices;

establish a connection in response to a request from one of the virtual network traffic management devices that received a packet associated with a new flow;

insert a flow table entry comprising an index to the MAC table into a flow table in a hardware-based data flow segment (DFS), wherein the flow table entry can be identified based on a key generated from a flow signature of the packet and the index corresponds to a MAC table entry in the MAC table storing one of the SMAC addresses corresponding to the one of the virtual network traffic management devices; and

transform the packet associated with the connection using the one of the SMAC addresses as a source address of the received packet and send the received packet to a destination network device.

14. The one or more network traffic management devices of claim 13, wherein the one or more processor are further configured to be capable of executing the programmed instructions stored in the memory to:

generate the key based on the flow signature of another received packet;

retrieve the flow table entry using the key and the MAC table entry using the index retrieved from the flow table entry; and

transform the another received packet using the MAC address.

15. The one or more network traffic management devices of claim 13, wherein the at least a portion of the MAC table has a base boundary and a limit boundary, wherein storing of data associated with the virtual network traffic management devices is performed from the limit boundary in a converging manner to the base boundary.

16. The one or more network traffic management devices of claim 13, wherein the one or more processor are further configured to be capable of executing the programmed instructions stored in the memory to enforce use of the set of SMAC addresses assigned to the virtual network traffic management devices.

17. The one or more network traffic management devices of claim 13, wherein the one or more processor are further configured to be capable of executing the programmed instructions stored in the memory to:

receive a request from another one of the virtual network traffic management devices for one or more additional SMAC addresses; and

allocate additional space in the MAC table for, and assign to the another one of the virtual network traffic management devices, the one or more additional SMAC addresses.

18. A method for facilitating network address translation in a virtualized network traffic management cluster, the method comprising:

assigning, by a network traffic management device, a set of continuous available source media access control (SMAC) addresses stored in a region of a MAC table to a network traffic management cluster comprising one or more virtual network traffic management devices;

establishing, by the network traffic management device, a connection in response to a request from one of the virtual network traffic management devices that received a packet associated with a new flow;

inserting, by the network traffic management device, a flow table entry comprising an index to the MAC table into a flow table in a hardware-based data flow segment (DFS), wherein the flow table entry can be identified based on a key generated from a flow signature of the packet and the index corresponds to a MAC table entry in the MAC table storing one of the SMAC addresses corresponding to the one of the virtual network traffic management devices; and

transforming, by the network traffic management device, the packet associated with the connection using the one of the SMAC addresses as a source address of the received packet and send the received packet to a destination network device.