Automated network configuration of virtual machines in a virtual lab environment

• US 9,952,892 B2
• Filed: 06/30/2017
• Issued: 04/24/2018
• Est. Priority Date: 07/27/2009
• Status: Active Grant

• Current Assignee: Nicira Incorporated (Broadcom, Inc.)
• Original Assignee: Nicira Incorporated (Broadcom, Inc.)
• Inventors: Dalal, Anupam, Lai, Min-Ken, Bhardwaj, Aastha
• Primary Examiner(s): Pollack, Melvin H
• Application Number:
  US15/639,228
• Publication Number:
  US 20170300354A1
• Time in Patent Office: 298 Days
• Field of Search: 709222
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 2009/4557 Distribution of virtual machine instances; Migration and load balancing
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 41/0873 Checking configuration conflicts between network elements
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 47/783 Distributed allocation of resources, e.g. bandwidth brokers
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses

Abstract

Methods, systems, and computer programs for creating virtual machines (VM) and associated networks in a virtual infrastructure are presented. The method defines virtual network templates in a database, where each virtual network template includes network specifications. A configuration of a virtual system is created, which includes VMs, virtual lab networks associated with virtual network templates, and connections from the VMs to the virtual lab networks. Further, the configuration is deployed in the virtual infrastructure resulting in a deployed configuration. The deployment of the configuration includes instantiating in the virtual infrastructure the VMs of the configuration, instantiating in the virtual infrastructure the virtual lab networks, retrieving information from the database, and creating and executing programming instructions for the VMs. The database information includes the network specifications from the virtual network templates associated with the virtual lab networks, and network resources for the virtual lab networks from a pool of available network resources. The programming instructions are created for the particular Guest Operating System (GOS) running in each VM based on the GOS and on the retrieved database information. When executed in the corresponding VM GOS, the programming instructions configure the VMs network interfaces with the corresponding network specifications.

Claims

1. A method comprising:

deploying a first virtual system configuration on a physical network, the first virtual system configuration including a first virtual machine (VM) assigned a first internet protocol (IP) address; and

deploying a second virtual system configuration on the physical network that includes a second VM assigned the first IP address to communicate within the second virtual system,

wherein the second VM in the second system is also assigned a second IP address for communication on the physical network with machines outside of the second virtual system.

2. The method of claim 1, wherein a virtual router that is not included in the second virtual system configuration is deployed along with the second virtual system.

3. The method of claim 2, wherein the virtual router operates on a VM.

4. The method of claim 2, wherein the virtual router is undeployed when the second virtual system is undeployed.

5. The method of claim 2, wherein the virtual router is deployed to connect VMs in the second virtual system with machines outside of the second virtual system.

6. The method of claim 5, wherein the virtual router performs address translation between the first and second IP addresses for communications between the second VM in the second virtual system and machines outside of the second virtual system.

7. The method of claim 6,

wherein the virtual router is deployed as a component of a fenced deployment of the second virtual system,

wherein the first and second IP addresses are in a particular subnet,

wherein the fenced deployment of the second virtual system comprises a fenced network and an unfenced deployment of the first virtual system comprises an unfenced, shared network, the fenced and unfenced networks comprising the particular subnet, and

wherein fencing of the deployment of the second virtual system comprises routing communications between the fenced network and the shared network through the virtual router.

8. The method of claim 1, wherein the second virtual system configuration is a clone of the first virtual system configuration.

9. The method of claim 8, wherein the first virtual system configuration includes a third virtual machine (VM) assigned a third internet protocol (IP) address,

wherein the second virtual system configuration includes a fourth VM assigned the third IP address to communicate within the second virtual system, and

wherein the fourth VM in the second system is also assigned a fourth IP address for communication on the physical network with machines outside of the second virtual system.

10. The method of claim 1 further comprising deploying a third virtual system configuration on the physical network that includes a third VM assigned the first IP address to communicate within the third virtual system,

wherein the third VM in the third system is also assigned a third IP address for communication on the physical network with machines outside of the third virtual system.

11. The method of claim 1, wherein the first VM uses the first IP address for communications with machines outside the first virtual system.

12. A non-transitory computer readable medium storing sets of instructions which when executed by a set of processing units deploys virtual system configurations, the sets of instructions comprising instructions for:

deploying a first virtual system configuration on a physical network, the first virtual system configuration including a first virtual machine (VM) assigned a first internet protocol (IP) address; and

deploying a second virtual system configuration on the physical network that includes a second VM assigned the first IP address to communicate within the second virtual system,

wherein the second VM in the second system is also assigned a second IP address for communication on the physical network with machines outside of the second virtual system.

13. The non-transitory computer readable medium of claim 12, wherein a virtual router that is not included in the second virtual system configuration is deployed along with the second virtual system.

14. The non-transitory computer readable medium of claim 13, wherein the virtual router is undeployed when the second virtual system is undeployed.

15. The non-transitory computer readable medium of claim 13, wherein the virtual router is deployed to connect VMs in the second virtual system with machines outside of the second virtual system by performing address translation between the first and second IP addresses for communications between the second VM in the second virtual system and machines outside of the second virtual system.

16. The non-transitory computer readable medium of claim 15,

wherein the virtual router is deployed as a component of a fenced deployment of the second virtual system,

wherein the first and second IP addresses are in a particular subnet,

wherein the fenced deployment of the second virtual system comprises a fenced network and an unfenced deployment of the first virtual system comprises an unfenced, shared network, the fenced and unfenced networks comprising the particular subnet, and

wherein fencing of the deployment of the second virtual system comprises routing communications between the fenced network and the shared network through the virtual router.

17. The non-transitory computer readable medium of claim 12, wherein the second virtual system configuration is a clone of the first virtual system configuration.

18. The non-transitory computer readable medium of claim 17, wherein the first virtual system configuration includes a third virtual machine (VM) assigned a third internet protocol (IP) address,

wherein the second virtual system configuration includes a fourth VM assigned the third IP address to communicate within the second virtual system, and

wherein the fourth VM in the second system is also assigned a fourth IP address for communication on the physical network with machines outside of the second virtual system.

19. The non-transitory computer readable medium of claim 12 further comprising a set of instructions for deploying a third virtual system configuration on the physical network that includes a third VM assigned the first IP address to communicate within the third virtual system,

wherein the third VM in the third system is also assigned a third IP address for communication on the physical network with machines outside of the third virtual system.

20. The non-transitory computer readable medium of claim 12, wherein the first VM uses the first IP address for communications with machines outside the first virtual system.