Scalable policy assignment in an edge virtual bridging (EVB) environment

• US 9,529,612 B2
• Filed: 03/18/2013
• Issued: 12/27/2016
• Est. Priority Date: 03/18/2013
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Abidi, Vasmi M., Radhakrishnan, Chandramouli
• Primary Examiner(s): Puente, Emerson
• Assistant Examiner(s): Kamran, Mehran
• Application Number:
  US13/846,733
• Publication Number:
  US 20140282524A1
• Time in Patent Office: 1,380 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

Embodiments of the invention relate to scalable policy assignment in an edge virtual bridging (EVB) environment. One embodiment includes a system including a physical end station includes a hypervisor. The physical end station creates at least one virtual machine (VM). A virtual station interface (VSI) database (DB) is coupled to a VM manager server. The VSI DB stores policy information and bandwidth filter information. A policy assignment module is coupled to a switch adjacent to the physical end station. The policy assignment module generates a VSI DB table with at least a portion of the VSI DB information from the VSI DB and a policy discriminator (PD) value for each VSI type ID.

Claims

1. A computer program product for scalable policy assignment in an edge virtual bridging (EVB) system, the computer program product comprising a computer readable hardware storage device having program instructions embodied therewith, the program instructions executable by a switch to cause the switch to:

fetch, by the switch, virtual machine (VM) information for one or more VMs from a virtual station interface (VSI) database (DB), wherein the VM information includes a VSI type identification (ID) associated with each VM;

associate, by the switch, a policy discriminator (PD) value for each VSI type ID;

generate, by the switch, a VSI DB table with at least a portion of the VM information from the VSI DB and the PD for each VSI type ID;

receive, by the switch, a message including virtual machine (VM) information for a created VM;

retrieve, by the switch, one or more rules and bandwidth filter information associated with a VSI type ID from the VSI DB table; and

apply, by the switch, the associated one or more rules and filter information based on one of multiple PD types and VM information or network information, wherein the multiple PD types comprise a VM type and a virtual local area network (vLAN) type.

2. The computer program product of claim 1, wherein the one or more rules comprise access list information, and the bandwidth filter information comprises transmission rate information and receiving rate information.

3. The computer program product of claim 2, wherein the VSI DB table comprises one or more VSI Type IDs that is associated with one or more access rules, transmission rate, receiving rate and PD, and the switch fetches the information from the VSI DB from a server in an edge virtual bridging (EVB) system.

4. The computer program product of claim 3, wherein upon creation of the VM, a hypervisor transmits a VSI discovery protocol (VDP) message to the switch, and the VDP message includes the VSI type ID, source media access control (MAC) address and vLAN ID for the VM.

5. The computer program product of claim 4, wherein applying the associated one or more rules and filter information for the PD causes the switch to:

determine PD type; and

determine a policy comprising one or more rules and bandwidth filter information based on the determined PD type.

6. The computer program product of claim 5, wherein if the PD type comprises a VM type, the VM information comprises a source MAC address of the VM, and if the PD type comprises a vLAN type the network information comprises a vLAN ID of the VM.

7. An edge virtual bridging system comprising:

a physical end station including a hypervisor, wherein the physical end station creates at least one virtual machine (VM);

a virtual station interface (VSI) database (DB) coupled to a VM manager server, the VSI DB storing policy information and bandwidth filter information; and

a switch including a policy assignment process, the switch being adjacent to the physical end station, the switch is configured to;

generate a VSI DB table with at least a portion of the VSI DB information from the VSI DB and a policy discriminator (PD) value for each VSI type ID,

receive a message including VM information for the created at least one VM;

retrieve one or more rules and bandwidth filter information associated with a VSI type ID from the VSI DB table; and

apply a policy comprising one or more rules and bandwidth filter information based on one of multiple PD types and VM information or network information, wherein the multiple PD types comprise a VM type and a virtual local area network (vLAN) type.

8. The system of claim 7, wherein upon creation of the at least one VM, a hypervisor transmits the message comprising a VSI discovery protocol (VDP) message to the switch, and the VDP message includes the VM information comprising VSI type ID, source media access control (MAC) address and vLAN ID for the created at least one VM.

9. The system of claim 8, wherein the policy assignment process determines the PD type.

10. The system of claim 9, wherein if the PD type comprises a VM type the VM information comprises a source MAC address of the VM, and if the PD type comprises a vLAN type, the network information comprises a vLAN ID of the VM.

11. The system of claim 10, wherein the rules comprise access list information, and the bandwidth filter information comprises transmission rate information and receiving rate information.