NIC-based packet assignment for virtual networks

• US 9,948,579 B1
• Filed: 03/30/2015
• Issued: 04/17/2018
• Est. Priority Date: 03/30/2015
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Sivaramakrishnan, Rajagopalan
• Primary Examiner(s): Jacobs, Lashonda
• Application Number:
  US14/673,272
• Time in Patent Office: 1,114 Days
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 49/9068 in the network interface card
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching

Abstract

In some examples, a computing device includes one or more processors configured to execute a plurality of virtual machines; and a network interface card (NIC) coupled to the one or more processors and configured to receive configuration data defining a plurality of receipt queues of the NIC and associated with respective virtual machines of the plurality of virtual machines. The NIC is further configured to assign, based on respective virtual machine identifiers of packets received by the NIC, the packets to the plurality of receipt queues associated with the respective virtual machines.

Claims

1. A method comprising:

receiving, by a network interface card (NIC) of a computing device, configuration data defining a plurality of receipt queues of the NIC and associated with respective virtual machines executing on the computing device; and

assigning, by the NIC and based on respective virtual machine identifiers included in tunnel encapsulation information of packets received by the NIC, each of the virtual machine identifiers uniquely identifying a corresponding one of the virtual machines executing on the computing device, the packets to the plurality of receipt queues associated with the respective virtual machines.

2. The method of claim 1,

wherein the virtual machine identifiers included in tunnel encapsulation information of the packets comprise one of Multiprotocol Label Switching (MPLS) labels and Generalized MPLS (GMPLS) labels.

3. The method of claim 1, further comprising:

executing, by the computing device, a virtual router for one or more virtual networks;

receiving, by the NIC, the packets from a switch fabric comprising a plurality of switches interconnected to form a physical network that switches packets for the one or more virtual networks,

wherein each of the packets comprises an outer header encapsulating a tunneled packet destined for one of the virtual machines.

4. The method of claim 3,

wherein the outer header of each packet of the packets comprises a destination network address of the computing device,

wherein the outer header of each packet of the packets comprises the virtual machine identifier of the packet.

5. The method of claim 3,

wherein a tunnel encapsulation header of each packet of the packets identifies a virtual network of the one or more virtual networks, and

wherein the tunnel encapsulation header of each packet of the packets comprises the virtual machine identifier of the packet.

6. The method of claim 3,

wherein a virtual network controller configures and manages the one or more virtual networks within the physical network, and

wherein the computing device comprises a server of a plurality of servers interconnected by the switch fabric, wherein each of the servers comprises an operating environment executing virtual machines in communication via the one or more virtual networks, and wherein the servers execute a set of virtual routers that extends the one or more virtual networks to the virtual machines.

7. The method of claim 1, wherein the virtual machines have isolated address spaces.

8. The method of claim 1, further comprising:

directly sending, by the NIC based on assigning a first packet of the packets to a first receipt queue of the plurality of receipt queues, packet data of the first packet to a first virtual machine of the virtual machines associated with the first receipt queue.

9. The method of claim 8, wherein directly sending the first packet to the first virtual machine comprising writing, by the NIC via a direct memory access (DMA) transfer, packet data of the first packet to a receipt buffer in an address space of the first virtual machine.

10. The method of claim 8, further comprising:

executing, by the computing device, a virtual router for one or more virtual networks,

wherein directly sending the first packet to the first virtual machine comprises sending, by the NIC, packet data of the first packet to the first virtual machine without writing the packet data to an address space of the virtual router.

11. The method of claim 1, further comprising:

executing, by the computing device, a virtual router for one or more virtual networks,

wherein the virtual machine identifiers included in tunnel encapsulation information of the packets comprise Multiprotocol Label Switching (MPLS) labels, and

wherein the virtual router allocates respective MPLS labels for identifying the virtual machines from a reduced MPLS label space that is reduced from the MPLS label space, the reduced MPLS label space being defined by one of the N most significant bits of the MPLS label space and the N least significant bits of the MPLS label space.

12. The method of claim 1, further comprising:

receiving, by the NIC, configuration data defining a plurality of filters that map respective virtual machine identifiers to respective receipt queues,

wherein assigning the packets to the plurality of receipt queues comprises matching respective virtual machine identifiers included in tunnel encapsulation information of the packets to respective filters of the plurality of filters.

13. The method of claim 12, wherein each filter of the plurality of filters matches an N-bit field of the packets, the N-bit field including the virtual machine identifiers.

14. A method comprising:

receiving, by a network interface card (NIC) of a computing device, a packet; and

sending, by the NIC based on a Multiprotocol Label Switching label of the packet, the Multiprotocol Label Switching label uniquely identifying a corresponding one of a plurality of virtual machines executing on the computing device, packet data of the packet directly to the corresponding virtual machine of the plurality of virtual machines.

15. The method of claim 14, wherein sending the packet directly to the virtual machine comprises writing, by the NIC via a direct memory access (DMA) transfer, packet data of the packet to an address space of the virtual machine.

16. A computing device comprising:

one or more processors configured to execute a plurality of virtual machines; and

a network interface card (NIC) coupled to the one or more processors and configured to receive configuration data defining a plurality of receipt queues of the NIC and associated with respective virtual machines of the plurality of virtual machines,

wherein the NIC is further configured to assign, based on respective virtual machine identifiers included in tunnel encapsulation information of packets received by the NIC, each of the virtual machine identifiers uniquely identifying a corresponding one of the virtual machines executing on the computing device, the packets to the plurality of receipt queues associated with the respective virtual machines.

17. The computing device of claim 16, wherein the virtual machine identifiers included in tunnel encapsulation information of the packets comprise one of Multiprotocol Label Switching (MPLS) labels and Generalized MPLS (GMPLS) labels.

18. The computing device of claim 16,

wherein the one or more processors are further configured to execute a virtual router for one or more virtual networks,

wherein the NIC is further configured to receive the packets from a switch fabric comprising a plurality of switches interconnected to form a physical network that switches packets for the one or more virtual networks, and

wherein each of the packets comprises an outer header encapsulating a tunneled packet destined for one of the plurality of virtual machines.

19. The computing device of claim 18,

wherein the outer header of each packet of the packets comprises a destination network address of the computing device,

wherein the outer header of each packet of the packets comprises the virtual machine identifier of the packet.

20. The computing device of claim 18,

wherein a tunnel encapsulation header of each packet of the packets identifies a virtual network of the one or more virtual networks, and

wherein the tunnel encapsulation header of each packet of the packets comprises the virtual machine identifier of the packet.

21. The computing device of claim 18,

wherein a virtual network controller configures and manages the one or more virtual networks within the physical network, and

wherein the computing device comprises a server of a plurality of servers interconnected by the switch fabric, wherein each of the servers comprises an operating environment executing virtual machines in communication via the one or more virtual networks, and wherein the servers execute a set of virtual routers that extends the one or more virtual networks to the virtual machines.

22. The computing device of claim 16, wherein the virtual machines have isolated address spaces.

23. The computing device of claim 16,

wherein the NIC is configured to direct send, based on assigning a first packet of the packets to a first receipt queue of the plurality of receipt queues, packet data of the first packet to a first virtual machine of the virtual machines associated with the first receipt queue.

24. The computing device of claim 23, wherein to directly send the first packet to the first virtual machine the NIC is configured to write, via a direct memory access (DMA) transfer, packet data of the first packet to a receipt buffer in an address space of the first virtual machine.

25. The computing device of claim 23,

wherein the one or more processors are further configured to execute a virtual router for one or more virtual networks, and

wherein to directly send the first packet to the first virtual machine the NIC is configured to send packet data of the first packet to the first virtual machine without writing the packet data to an address space of the virtual router.

26. The computing device of claim 16,

wherein the one or more processors are further configured to execute a virtual router for one or more virtual networks,

wherein the virtual machine identifiers included in tunnel encapsulation information of the packets comprise Multiprotocol Label Switching (MPLS) labels, and

wherein the one or more processors are further configured to execute the virtual router to allocate respective MPLS labels for identifying the virtual machines from a reduced MPLS label space that is reduced from the MPLS label space, the reduced MPLS label space being defined by one of the N most significant bits of the MPLS label space and the N least significant bits of the MPLS label space.

27. The computing device of claim 16,

wherein the NIC is further configured to receive configuration data defining a plurality of filters that map respective virtual machine identifiers to respective receipt queues,

wherein to assign the packets to the plurality of receipt queues the NIC is further configured to match respective virtual machine identifiers included in tunnel encapsulation information of the packets to respective filters of the plurality of filters.

28. The computing device of claim 27, wherein each filter of the plurality of filters matches an N-bit field of the packets, the N-bit field including the virtual machine identifiers.

29. A computing device comprising:

one or more processors configured to execute a plurality of virtual machines; and

a network interface card (NIC) coupled to the one or more processors and configured to receive a packet,

wherein the NIC is further configured to send, based on a Multiprotocol Label Switching label of the packet, the Multiprotocol Label Switching label uniquely identifying a corresponding one of the plurality of virtual machines executing on the computing device, packet data of the packet directly to the corresponding virtual machine of the plurality of virtual machines.

30. The computing device of claim 29, wherein to send the packet directly to the virtual machine the NIC is further configured to write, via a direct memory access (DMA) transfer, packet data of the packet to an address space of the virtual machine.

31. A non-transitory computer-readable medium comprising instructions for causing one or more programmable processors to:

receive, by a network interface card (NIC) of a computing device, configuration data defining a plurality of receipt queues of the NIC and associated with respective virtual machines configured for execution by the one or more programmable processors; and

assign, by the NIC and based on respective virtual machine identifiers included in tunnel encapsulation information of packets received by the NIC, each of the virtual machine identifiers uniquely identifying a corresponding one of the virtual machines executing on the computing device, the packets to the plurality of receipt queues associated with the respective virtual machines.

32. A non-transitory computer-readable medium comprising instructions for causing one or more programmable processors to:

receive, by a network interface card (NIC) of a computing device, a packet; and

send, by the NIC based on a Multiprotocol Label Switching label of the packet, the Multiprotocol Label Switching label uniquely identifying a corresponding one of a plurality of virtual machines configured for execution by the one or more programmable processors, packet data of the packet directly to the corresponding virtual machine of the plurality of virtual machines,

wherein sending the packets directly to the corresponding virtual machine comprises sending the packets to the corresponding virtual machine without a software-based virtual router executed by a general-purpose processor of the computing device accessing the Multiprotocol Label Switching label of the packet.