ACCESSING ENDPOINTS IN LOGICAL NETWORKS AND PUBLIC CLOUD SERVICE PROVIDERS NATIVE NETWORKS USING A SINGLE NETWORK INTERFACE AND A SINGLE ROUTING TABLE

• US 20190068689A1
• Filed: 08/24/2017
• Published: 02/28/2019
• Est. Priority Date: 08/24/2017
• Status: Active Grant

• Current Assignee: Nicira Incorporated (Broadcom, Inc.)
• Original Assignee: Nicira Incorporated (Broadcom, Inc.)
• Inventors: Ram, Shashank, Venugopal, Sairam, Lin, Yin, Kumar, Anand, Raju, Nithin Bangalore, Hira, Mukesh, Chandrashekhar, Ganesan, Agarwal, Vivek
• Granted Patent: US 10,567,482 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 41/08 Configuration management of networks or network elements address allocation H04L61/50
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 49/70 Virtual switches
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 69/321 Interlayer communication protocols or service data unit [SDU] definitions; Interfaces between layers
• CPC Class Codes: H04W 12/009 specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks

Abstract

A physical host machine of a public cloud system includes a set of processing units for executing instructions stored in non-transitory machine readable media. The physical host machine also includes a physical network interface cars (PNIC) and a non-transitory machine readable medium that stores a data compute node (DCN). The DCN includes first and second applications, first and second logical interfaces, a network stack, and a managed forwarding element (MFE). The first application is connected to the pNIC through the network stack, the first logical interface, and the MFE. The second application is connected to the PNIC through the network stack, the second logical interface, and the MFE.

Claims

1. A physical host machine of a public cloud system, comprising:

a set of processing units for executing instructions stored in non-transitory machine readable media;

a physical network interface cars (pNIC); and

a non-transitory machine readable medium storing;

a data compute node (DCN) comprising;

first and second applications, first and second logical interfaces, a network stack, and a managed forwarding element (MFE),

wherein the first application is connected to the PNIC through the network stack, the first logical interface, and the MFE, wherein the second application is connected to the PNIC through the network stack, the second logical interface, and the MFE.

2. The physical host machine of claim 1, wherein the first application is a network management agent for configuring the MFE to implement a logical network, wherein the second application is an application of a tenant of the host machine.

3. The physical host machine of claim 1 further comprising a physical network interface card (PNIC) connecting the MFE of the DCN to a software switch of the host machine, the software switch of the host machine configured and managed by a provider of the public cloud system.

4. The physical host machine of claim 1, wherein the first logical interface is a virtual tunnel endpoint (VTEP) of an overlay network and the second logical interface is a virtual interface (VIF).

5. The physical host machine of claim 1, wherein the MFE comprises (i) a transport bridge connected to the first logical interface and (ii) an integration bridge connected to the second logical interface and to the transport bridge.

6. The physical host machine of claim 1, wherein the public cloud system does not allow access to a virtualization software of the host by the DCN and the first and second applications.

7. The physical host machine of claim 1, wherein the public cloud system does not provide more than one namespace to the DCN.

8. The physical host machine of claim 4, wherein the host machine is a first host machine and the MFE is a first MFE, wherein the MFE comprises a software module that implements an open vSwitch (OVS), wherein the software module comprises code that is used as a second MFE in a second host machine that allows DCNs hosted on the second host machine to access a virtualization software of the second host machine, wherein the software module of the first MFE enables reuses the code from the MFE of the second host machine to implement OVS in the DCN in the first host machine.

9. The physical host machine of claim 1, wherein the host machine executes a virtualization software, wherein the DCN executes a guest operating system that has no access to the virtualization software of the host machine and does not provide multiple namespaces.

10. The physical host machine of claim 1, wherein the DCN is a virtual machine (VM).

11. A non-transitory machine readable medium for execution by a processing unit of a physical host machine of a public cloud system, the non-transitory machine readable medium storing a data compute node (DCN), the DCN comprising:

first and second applications, first and second logical interfaces, a network stack, and a managed forwarding element (MFE);

wherein the first application is connected to a physical network interface card (PNIC) of the host machine through the network stack, the first logical interface, and the MFE, wherein the second application is connected to the PNIC through the network stack, the second logical interface, and the MFE.

12. The non-transitory machine readable medium of claim 11, wherein the first application is a network management agent for configuring the MFE to implement a logical network, wherein the second application is an application of a tenant of the host machine.

13. The non-transitory machine readable medium of claim 11, the physical host machine comprising a physical network interface card (PNIC) connecting the MFE of the DCN to a software switch of the host machine, the software switch of the host machine configured and managed by a provider of the public cloud system.

14. The non-transitory machine readable medium of claim 11, wherein the first logical interface is a virtual tunnel endpoint (VTEP) of an overlay network and the second logical interface is a virtual interface (VIF).

15. The non-transitory machine readable medium of claim 11, wherein the MFE comprises (i) a transport bridge connected to the first logical interface and (ii) an integration bridge connected to the second logical interface and to the transport bridge.

16. The non-transitory machine readable medium of claim 11, wherein the public cloud system does not allow access to a virtualization software of the host by the DCN and the first and second applications.

17. The non-transitory machine readable medium of claim 11, wherein the public cloud system does not provide more than one namespace to the DCN.

18. The non-transitory machine readable medium of claim 16, wherein the host machine is a first host machine and the MFE is a first MFE, wherein the MFE comprises a software module that implements an open vSwitch (OVS), wherein the software module comprises code that is used as a second MFE in a second host machine that allows DCNs hosted on the second host machine to access a virtualization software of the second host machine, wherein the software module of the first MFE enables reuses the code from the MFE of the second host machine to implement OVS in the DCN in the first host machine.

19. The non-transitory machine readable medium of claim 11, wherein the host machine executes a virtualization software, wherein the DCN executes a guest operating system that has no access to the virtualization software of the host machine and does not provide multiple namespaces.

20. The non-transitory machine readable medium of claim 11, wherein the DCN is a virtual machine (VM).