41 results about "Virtual network interface card" patented technology

A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.

Techniques are disclosed for providing high performant packets processing capabilities in a virtualized cloud environment that enhance the scalability and high availability of the packets processing infrastructure. In certain embodiments disclosed herein, the VNICs functionality performed by network virtualization devices (NVDs) is offloaded from the NVDs to a fleet of computers, referred to as VNIC-as-a-Service System (or VNICaaS system). VNICaaS system is configured to provide Virtual Network Interface Cards (VNICs)-related functionality or service for multiple compute instances belonging to multiple tenants or customers of the CSPI. The VNICaaS system is capable of hosting multiple VNICs to process and transmit traffic in a distributed virtualized cloud networks environment. A single VNIC executed by the VNICaaS system can be used to process packets received from multiple compute instances.

Systems and methods of interface-based ACLs in a virtual Layer-2 network. The method can include sending a packet from source compute instance in a virtual network to a destination compute instance via a destination virtual network interface card (destination VNIC) within a first virtual layer 2 network and evaluating an access control list (ACL) for the packet with a source virtual network interface card (source VNIC). ACL information relevant to the packet can be embedded in the packet. The VSRS can receive the packet and can identify the destination VNIC within the first virtual layer 2 network for delivery of the packet based on information received with the packet and mapping information contained within a mapping table. The VSRS can access ACL information from the packet and can apply the ACL information to the packet.

Techniques are described for enforcing the flow of traffic between VNICs using ZPR policy. A method includes accessing a ZPR policy that specifies how a flow of traffic is enforced between endpoints within the one or more networks, wherein the policy includes one or more layer 4 rules and one or more layer 7 rules; identifying from the ZPR policy, a ZPR statement that specifies a connection between a first virtual network interface card (VNIC) and an endpoint; generating, based on the ZPR statement, one or more network security group (NSG) rules; and distributing at least one of the one or more NSG rules to a first NSG associated with the first VNIC.

The invention discloses a virtual network card management method based on a KVM (Keyboard Video Mouse), which is applied to a KVM virtualization environment and comprises the following steps: a, starting a kvm-br-sync daemon process, b, acquiring an actual connection state of a virtual network bridge and a virtual network card from a virtual network bridge module; c, verifying the consistency of the mapping relation and the actual connection state; d, detecting whether the virtual machine is not operated or whether the virtual network card is invalid; e, detecting whether the connection between the virtual network bridge and the virtual network card is lost for no reason; and f, after the network is restarted or the fault of the virtual network bridge / hardware network card is repaired, reading the mapping relation in the database, and detecting whether the current state of the virtual machine is matched with the state of the virtual network card or not. Effective mapping is stored through a database, the core pain point that automatic recovery cannot be achieved after fault recovery is solved, and the reachability of a virtual machine network is guaranteed.

Techniques for managing the distribution of configuration information that supports the flow of packets in a cloud environment are described. In an example, a virtual network interface card (VNIC) hosted on a network virtualization device NVD receives a first packet from a compute instance associated with the VNIC. The VNIC determines that flow information to send the first packet on a virtual network is unavailable from a memory of the NVD. The VNIC sends, via the NVD, the first packet to a network interface service, where the network interface service maintains configuration information to send packets on the substrate network and is configured to send the first packet on the substrate network based on the configuration information. The NVD receives the flow information from the network interface service, where the flow information is a subset of the configuration information. The NVD stores the flow information in the memory.

Provided in the embodiments of the present disclosure are a processing method, platform, and apparatus based on a chip simulator platform. The chip simulator platform is deployed with a first test end and a second test end, and the first test end and the second test end are respectively bound with different CPU resources in the chip simulator platform. The method comprises: performing received data packet redirection configuration on a local virtual network interface card of the chip simulator platform, the data packet redirection configuration being used for sending a specified data packet to a designated CPU resource; and when a soft interrupt is triggered in response to a network request issued by the first test end, according to an instruction of the received data packet redirection configuration and by means of the local virtual network interface card, sending a data packet corresponding to the soft interrupt to a CPU resource bound to the second test end for processing. According to the embodiments of the present disclosure, network environment simulation in a chip simulator environment is achieved by utilizing received data packet redirection technology.

A distributed unit (DU) in a virtual radio access network (vRAN) of a wireless 5G (fifth generation) network is implemented using software-defined networking (SDN) technology on a single computer server that is physically co-located with a radio unit in a distributed RAN (D-RAN) architecture. An update agent facilitates versioning support through interoperations with different DU versions, v1 and v2, to prevent them from concurrently executing real-time processing threads on the server's processor which would cause malfunctions. DU v2 is initialized using non-real-time threads. The update agent blocks real-time processing thread generation by DU v2 after initialization is complete. The update agent sets DU v1 processing threads to non-real-time and unblocks DU v2 to migrate data traffic between the versions. A layer 2 switch provides duplicated data packets to virtual network interface cards that are implemented for the respective DU versions and which share a common MAC (medium access control) address.

The invention discloses a cross-protocol interaction system and a cross-protocol interaction method. The cross-protocol interaction method comprises the following steps: creating a virtual network card and a static route indicating that the next hop of a data packet to be sent to a target local IP address in a Linux host points to the virtual network card in the Linux host; hijacking all outbound DNS requests in the Linux host and forwarding the outbound DNS requests to a target local port of the Linux host; capturing a target DNS request for analyzing the target domain name into a target IP address based on a second network protocol from a target local port, and forwarding a first data packet of a target server to be originally sent to the target IP address to the target local IP address by a target application program managing and controlling the target DNS request; obtaining a first data packet arriving at the virtual network card based on the static routing and forming a target data packet; and the cloud protocol conversion module converts the first data packet into a second data packet capable of accessing the target server of the target IP address according to the target data packet to access the target server.

The invention relates to a method for realizing non-real-time instruction communication of upper and lower computer modules of CNC (Computer Numerical Control) based on a virtual network card. The method comprises the following steps of: respectively accessing the upper computer module and the lower computer module into a virtual network interface card; the upper computer module initiates non-real-time instruction communication; encapsulating the communication data; the packaged data packet is submitted to a PCIe bus through a virtual network card drive of the upper computer module, and the data is directly transmitted to the lower computer module; and the virtual network card driver of the lower computer module receives the data transmitted through the PCIe, de-encapsulates the data, and sends the original instruction data to the lower computer module. The method, the system, the device, the processor and the computer readable storage medium for realizing the non-real-time instruction communication of the CNC upper and lower computer modules based on the virtual network card have the advantages of high performance, low delay, high reliability, strong isolation and more stable and reliable communication; development is convenient, compatibility is high, the resource utilization rate is high, physical network cards and external network ports do not need to be occupied, and hardware resources are saved.

A system can, for a cluster that comprises a group of nodes and that hosts a group of virtual machines, create and attach respective new virtual network interface cards to respective virtual machines of the group of virtual machines, wherein the respective new virtual network interface cards are assigned to the new external subnet. The system can create the new external subnet. The system can delete respective current virtual network interface cards from the respective virtual machines, wherein the respective current virtual network interface cards are assigned to the current external subnet. The system can acquire respective dynamic host control protocol leases for the respective virtual machines, wherein the respective dynamic host control protocol leases correspond to the new external subnet. The system can halt a connection from a computer on the new external subnet via the respective new virtual network interface cards.

A method for creating a virtual machine includes receiving a virtual machine creation request comprising parameter information of a virtual network interface card occupied by a to-be-created virtual machine; obtaining current resource usage information of the network interface card resource pools of at least one computing node, wherein the at least one computing node is deployed on a cloud platform, each computing node comprises a network interface card resource pool comprising physical network interface cards; determining a target computing node, in the at least one computing node based on the parameter information and the current resource usage information; and invoking the target computing node to create the virtual machine.

Provided in the embodiments of the present disclosure are a virtual-network-interface-card detection method, an electronic device, a storage medium, and a computer program product. In the embodiments of the present disclosure, by means of information interaction between a detection tool and a virtual switch, a virtual-network-interface-card detection mechanism at a queue granularity is provided, such that whether a receive queue of a virtual network interface card is abnormal can be accurately and efficiently detected, thereby ensuring the stability of a virtual machine, enhancing the stability and operation and maintenance capability of a cloud service, and thus improving the user experience of the cloud service.

Techniques for utilizing multiple network interfaces for a cloud shell are provided. The techniques include receiving, by a computer system, a request including a command to execute an operation on a cloud resource of the first virtual cloud network, the request being received from a network external to the first virtual cloud network via a secondary virtual network interface card, the secondary virtual network interface card being configured to permit outgoing traffic from the virtual machine instance. The techniques further include rejecting, by the computer system, the request. The techniques further include transmitting, by the computer system, an error message to a router via a primary virtual network interface card configured to permit incoming traffic to the virtual machine instance.

This application provides a container network communication method, a cloud computing platform, an electronic device, a storage medium, and a computer program product. In this application, it is not necessary to create a virtual network interface card (NIC) for each container. After creating a virtual NIC for a virtual machine, by enabling multiple virtual functions of the virtual NIC (i.e., enabling the virtual NIC to support SR-IOV capabilities), a single virtual NIC can meet the network communication needs of multiple containers, greatly shortening the virtual NIC creation time, improving container startup speed, and meeting the requirements of high-density deployment. Furthermore, the virtual functions allocated to each container enable each container to have an independent and high-performance network interface, resulting in good network performance for each container.

The present application relates to a network interface card configuration method and apparatus, and an electronic device and a storage medium. The method comprises: during the generation of a target container pod, associating the target container group with a target network interface card identifier; determining whether a target network interface card corresponding to the target network interface card identifier is a target virtual network interface card or a target physical network interface card; in response to the fact that the target network interface card corresponding to the target network interface card identifier is a target virtual network interface card, acquiring a first required accelerator card resource corresponding to the target container pod; and on the basis of the first required accelerator card resource, configuring the target virtual network interface card for the target container pod, or mapping the target virtual network interface card to a target physical network interface card corresponding to the target virtual network interface card and configuring the target physical network interface card corresponding to the target virtual network interface card for the target container pod.

This invention provides a network system, a network worker node, network management and control, and a network isolation method. The network system includes: a container network server interface deployed within the network worker node; the container network server interface is used to: create a corresponding identifier for the container when a container is created within the network worker node, request network management to create a virtual network interface card (NIC) corresponding to the container, and send a virtual port creation request generated based on the virtual NIC and identifier to network management; the first communication port of the virtual NIC is associated with the main namespace of the network system's operating system, and the second communication port of the virtual NIC is associated with the container's namespace; network management is used to create virtual ports according to the virtual port creation request, assign IP addresses to the virtual ports, and feed back the IP addresses to the container network server interface; and a virtual infrastructure network is used to process network data based on the identifier information and IP address of the virtual NIC. This invention can achieve network security isolation.

A cloud service is provided and accessible via a virtual IP address in a virtual cloud network (VCN), where the VCN is part of an overlay network. A source network virtualization device (NVD) receives a first packet destined to the virtual IP address. The source NVD determined based upon a dynamic routing gateway table, the VCN mapped to the virtual IP address. Further, the source NVD identifies based upon the virtual IP address, a substrate IP address of a destination NVD that implements a virtual network interface card (VNIC) associated with the virtual IP address and communicates the first packet from the source NVD to the destination NVD using the substrate IP address.

Techniques are described for implementing a container environment where each pod within the container environment is provided with a unique IP address and a virtual communication device such as an IPvlan device. Communications from source pods are directly routed to destination pods within the container environment by one or more virtualized network interface cards (VNICs) utilizing the unique IP addresses of the destination pods, without the need for bridging and encapsulation. This reduces a size of data being transmitted and also eliminates a compute cost necessary to perform encapsulation of data during transmission.

This application discloses a traffic processing method, device, and storage medium based on a virtual network interface card (NIC), relating to the field of network traffic processing technology. The method includes: capturing raw data packets from a traffic source device and transmitting the raw data packets to a traffic processing node via a preset transmission protocol; performing at least one processing operation on the raw data packets at the traffic processing node to obtain processed standardized Layer 2 data packets, including protocol adaptation, data packet decryption, data packet modification, and traffic filtering; determining the target virtual NIC corresponding to the standardized Layer 2 data packets and writing the standardized Layer 2 data packets to the target virtual NIC; connecting the acquisition interface of a preset analysis tool to the target virtual NIC, and performing analysis operations on the standardized Layer 2 data packets through the preset analysis tool to obtain corresponding data analysis results. This solves the technical problem of poor compatibility in existing traffic analysis and processing methods, and improves the flexibility of traffic processing.

To evaluate an interface-based access control list (ACL) in a virtual Layer 2 network.SOLUTION: The method transmits a packet from a source compute instance in the virtual network to a destination compute instance via a destination virtual network interface card (destination VNIC) in the first virtual Layer 2 network, evaluates access control lists (ACLs) of the packet using a source virtual network interface card (source VNIC), and embeds ACL information associated with the packet in the packet. A virtual switching and routing service (VSRS) receives the packet, identifies a destination VNIC in the first virtual Layer 2 network for delivering the packet based on information received with the packet and mapping information included in a mapping table, obtains ACL information from the packet, and applies the ACL information to the packet.SELECTED DRAWING: Figure 21

Techniques for utilizing multiple network interfaces for a cloud shell are provided. The techniques include receiving, by a computer system, a command to execute an operation by the computer system, the command being received from a router via a primary virtual network interface card (vNIC), the primary vNIC being configured to permit incoming traffic. The computer system may execute the operation, generating an output of the operation. The techniques also include transmitting, by the computer system, a message comprising the output of the operation to a shell subnet via a secondary vNIC, the secondary vNIC being configured to permit outgoing traffic from the computer system to the shell subnet.

The invention discloses a vehicle-mounted communication method and system, and relates to the technical field of vehicle-mounted communication, and the method comprises the step of connecting a plurality of slave computing units through a PCIe bus. And setting a corresponding first virtual internet protocol address for the first virtual network card created by each slave computing unit. And associating a plurality of second virtual network cards created by the main computing unit with the virtual network bridge. Taking the plurality of first virtual network cards and the plurality of second virtual network cards as network interfaces for bidirectional communication between the plurality of slave computing units and the master computing unit respectively, and according to first virtual internet protocol addresses corresponding to the plurality of first virtual network cards and an association relationship between the plurality of second virtual network cards and the virtual network bridge, establishing a virtual network bridge between the plurality of slave computing units and the master computing unit; and performing Ethernet communication with the plurality of slave computing units. The main computing unit and the slave computing units are connected through the PCIe bus, the requirement of vehicle-mounted computing power can be met, and the Ethernet communication requirement of an upper-layer application algorithm can be considered under the condition that physical hardware is not changed through a virtual network card and a virtual network bridge.

Systems and methods for geometric based flow programming are disclosed herein. The method can include receiving at least one compiled rule at a first Network Virtualization Device (“NVD”), each of the at least one compiled rules can be applicable to a class of packets received by the first NVD for delivery to a Virtualized Network Interface Card (“VNIC”). The method can include receiving a first packet at the first NVD for delivery to a first VNIC, determining with the first NVD that a first rule of the at least one compiled rule is applicable to the first packet, and processing with the first NVD the first packet according to the first rule.

This application relates to a gateway determination method, apparatus, computer device, and storage medium. The method includes: determining whether a target association entry containing the protocol address exists in a preset association flow table based on the protocol address of the target virtual network interface card (NIC) to which the data to be transmitted belongs; the preset association flow table is used to indicate whether the target virtual NIC is associated with a flexible network address; if it exists, determining the target gateway for the data to be transmitted based on the target association entry and the routing address corresponding to the target virtual NIC; if it does not exist, determining the target gateway for the data to be transmitted based on the protocol address and routing address of the target virtual NIC. This method can accurately determine whether a target virtual NIC is associated with a flexible network address by setting a preset association flow table, and accurately determine the target gateway for the data to be transmitted, avoiding gateway selection confusion caused by identical routing configurations of target gateways, and further improving the accuracy of gateway selection.

A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.

Systems and methods for interface-based ACLs in virtual layer 2 networks. The method can include sending a packet from a source compute instance in a virtual network to a destination compute instance via a destination virtual network interface card (destination VNIC) within a first virtual layer 2 network and evaluating an access control list (ACL) for the packet with a source virtual network interface card (source VNIC). The ACL information related to the packet can be embedded in the packet. A VSRS can receive the packet and can identify the destination VNIC within the first virtual layer 2 network to deliver the packet based on information received with the packet and mapping information contained in a mapping table. The VSRS can access the ACL information from the packet and can apply the ACL information to the packet.

A data configuration method includes monitoring a target segment of a virtual network interface card (VF) capable of implementing a remote direct memory access (RDMA) communication mode, and in response to detecting a change event in the target segment of the VF, synchronizing configuration data of a namespace represented by the target segment to configuration information of a container resource in a first communication mode and a second communication mode. The target segment is set in a configuration space of the VF and is used to represent identification information of an independent namespace assigned to the VF in a container.

A Network Virtualization Device (NVD) executes a set of Virtual Network Interface Cards (VNICs). The set of VNICs includes a first VNIC that forwards packets for a set of one or more packet flows. The NVD stores a first VNIC-related information that includes information identifying a first set of one or more packet flows and associated state information The NVD in response to determining that the state information for the first VNIC is to be synchronized with another NVD, identifies a first backup NVD for the first VNIC, wherein the first backup NVD is a backup for the first VNIC, and communicates to the first backup NVD, a portion of the state information stored by the NVD for the first VNIC.

Example methods and systems for media access control (MAC) address assignment for virtual network interface cards (VNICs) are described. One example may involve a first computer system may determining a first MAC address portion that is uniquely associated with the first computer system. A first VNIC may be assigned with a first MAC address that includes (a) the first MAC address portion and (b) a third MAC address portion that is uniquely associated with the first VNIC on the first computer system. A second VNIC may be assigned with a second MAC address that includes (a) the first MAC address portion and (b) a fourth MAC address portion that is uniquely associated with the second VNIC on the first computer system. The first computer system may perform traffic handling by processing packets specifying the first MAC address or the second MAC address.