27 results about "Virtual network interface card" patented technology

Techniques are described for enforcing the flow of traffic between VNICs using ZPR policy. A method includes accessing a ZPR policy that specifies how a flow of traffic is enforced between endpoints within the one or more networks, wherein the policy includes one or more layer 4 rules and one or more layer 7 rules; identifying from the ZPR policy, a ZPR statement that specifies a connection between a first virtual network interface card (VNIC) and an endpoint; generating, based on the ZPR statement, one or more network security group (NSG) rules; and distributing at least one of the one or more NSG rules to a first NSG associated with the first VNIC.

The invention discloses a virtual network card management method based on a KVM (Keyboard Video Mouse), which is applied to a KVM virtualization environment and comprises the following steps: a, starting a kvm-br-sync daemon process, b, acquiring an actual connection state of a virtual network bridge and a virtual network card from a virtual network bridge module; c, verifying the consistency of the mapping relation and the actual connection state; d, detecting whether the virtual machine is not operated or whether the virtual network card is invalid; e, detecting whether the connection between the virtual network bridge and the virtual network card is lost for no reason; and f, after the network is restarted or the fault of the virtual network bridge / hardware network card is repaired, reading the mapping relation in the database, and detecting whether the current state of the virtual machine is matched with the state of the virtual network card or not. Effective mapping is stored through a database, the core pain point that automatic recovery cannot be achieved after fault recovery is solved, and the reachability of a virtual machine network is guaranteed.

Techniques for managing the distribution of configuration information that supports the flow of packets in a cloud environment are described. In an example, a virtual network interface card (VNIC) hosted on a network virtualization device NVD receives a first packet from a compute instance associated with the VNIC. The VNIC determines that flow information to send the first packet on a virtual network is unavailable from a memory of the NVD. The VNIC sends, via the NVD, the first packet to a network interface service, where the network interface service maintains configuration information to send packets on the substrate network and is configured to send the first packet on the substrate network based on the configuration information. The NVD receives the flow information from the network interface service, where the flow information is a subset of the configuration information. The NVD stores the flow information in the memory.

The invention discloses a cross-protocol interaction system and a cross-protocol interaction method. The cross-protocol interaction method comprises the following steps: creating a virtual network card and a static route indicating that the next hop of a data packet to be sent to a target local IP address in a Linux host points to the virtual network card in the Linux host; hijacking all outbound DNS requests in the Linux host and forwarding the outbound DNS requests to a target local port of the Linux host; capturing a target DNS request for analyzing the target domain name into a target IP address based on a second network protocol from a target local port, and forwarding a first data packet of a target server to be originally sent to the target IP address to the target local IP address by a target application program managing and controlling the target DNS request; obtaining a first data packet arriving at the virtual network card based on the static routing and forming a target data packet; and the cloud protocol conversion module converts the first data packet into a second data packet capable of accessing the target server of the target IP address according to the target data packet to access the target server.

The invention relates to a method for realizing non-real-time instruction communication of upper and lower computer modules of CNC (Computer Numerical Control) based on a virtual network card. The method comprises the following steps of: respectively accessing the upper computer module and the lower computer module into a virtual network interface card; the upper computer module initiates non-real-time instruction communication; encapsulating the communication data; the packaged data packet is submitted to a PCIe bus through a virtual network card drive of the upper computer module, and the data is directly transmitted to the lower computer module; and the virtual network card driver of the lower computer module receives the data transmitted through the PCIe, de-encapsulates the data, and sends the original instruction data to the lower computer module. The method, the system, the device, the processor and the computer readable storage medium for realizing the non-real-time instruction communication of the CNC upper and lower computer modules based on the virtual network card have the advantages of high performance, low delay, high reliability, strong isolation and more stable and reliable communication; development is convenient, compatibility is high, the resource utilization rate is high, physical network cards and external network ports do not need to be occupied, and hardware resources are saved.

A system can, for a cluster that comprises a group of nodes and that hosts a group of virtual machines, create and attach respective new virtual network interface cards to respective virtual machines of the group of virtual machines, wherein the respective new virtual network interface cards are assigned to the new external subnet. The system can create the new external subnet. The system can delete respective current virtual network interface cards from the respective virtual machines, wherein the respective current virtual network interface cards are assigned to the current external subnet. The system can acquire respective dynamic host control protocol leases for the respective virtual machines, wherein the respective dynamic host control protocol leases correspond to the new external subnet. The system can halt a connection from a computer on the new external subnet via the respective new virtual network interface cards.

Provided in the embodiments of the present disclosure are a virtual-network-interface-card detection method, an electronic device, a storage medium, and a computer program product. In the embodiments of the present disclosure, by means of information interaction between a detection tool and a virtual switch, a virtual-network-interface-card detection mechanism at a queue granularity is provided, such that whether a receive queue of a virtual network interface card is abnormal can be accurately and efficiently detected, thereby ensuring the stability of a virtual machine, enhancing the stability and operation and maintenance capability of a cloud service, and thus improving the user experience of the cloud service.

Techniques for utilizing multiple network interfaces for a cloud shell are provided. The techniques include receiving, by a computer system, a request including a command to execute an operation on a cloud resource of the first virtual cloud network, the request being received from a network external to the first virtual cloud network via a secondary virtual network interface card, the secondary virtual network interface card being configured to permit outgoing traffic from the virtual machine instance. The techniques further include rejecting, by the computer system, the request. The techniques further include transmitting, by the computer system, an error message to a router via a primary virtual network interface card configured to permit incoming traffic to the virtual machine instance.

This application provides a container network communication method, a cloud computing platform, an electronic device, a storage medium, and a computer program product. In this application, it is not necessary to create a virtual network interface card (NIC) for each container. After creating a virtual NIC for a virtual machine, by enabling multiple virtual functions of the virtual NIC (i.e., enabling the virtual NIC to support SR-IOV capabilities), a single virtual NIC can meet the network communication needs of multiple containers, greatly shortening the virtual NIC creation time, improving container startup speed, and meeting the requirements of high-density deployment. Furthermore, the virtual functions allocated to each container enable each container to have an independent and high-performance network interface, resulting in good network performance for each container.

This invention provides a network system, a network worker node, network management and control, and a network isolation method. The network system includes: a container network server interface deployed within the network worker node; the container network server interface is used to: create a corresponding identifier for the container when a container is created within the network worker node, request network management to create a virtual network interface card (NIC) corresponding to the container, and send a virtual port creation request generated based on the virtual NIC and identifier to network management; the first communication port of the virtual NIC is associated with the main namespace of the network system's operating system, and the second communication port of the virtual NIC is associated with the container's namespace; network management is used to create virtual ports according to the virtual port creation request, assign IP addresses to the virtual ports, and feed back the IP addresses to the container network server interface; and a virtual infrastructure network is used to process network data based on the identifier information and IP address of the virtual NIC. This invention can achieve network security isolation.

Techniques are described for implementing a container environment where each pod within the container environment is provided with a unique IP address and a virtual communication device such as an IPvlan device. Communications from source pods are directly routed to destination pods within the container environment by one or more virtualized network interface cards (VNICs) utilizing the unique IP addresses of the destination pods, without the need for bridging and encapsulation. This reduces a size of data being transmitted and also eliminates a compute cost necessary to perform encapsulation of data during transmission.

This application discloses a traffic processing method, device, and storage medium based on a virtual network interface card (NIC), relating to the field of network traffic processing technology. The method includes: capturing raw data packets from a traffic source device and transmitting the raw data packets to a traffic processing node via a preset transmission protocol; performing at least one processing operation on the raw data packets at the traffic processing node to obtain processed standardized Layer 2 data packets, including protocol adaptation, data packet decryption, data packet modification, and traffic filtering; determining the target virtual NIC corresponding to the standardized Layer 2 data packets and writing the standardized Layer 2 data packets to the target virtual NIC; connecting the acquisition interface of a preset analysis tool to the target virtual NIC, and performing analysis operations on the standardized Layer 2 data packets through the preset analysis tool to obtain corresponding data analysis results. This solves the technical problem of poor compatibility in existing traffic analysis and processing methods, and improves the flexibility of traffic processing.

To evaluate an interface-based access control list (ACL) in a virtual Layer 2 network.SOLUTION: The method transmits a packet from a source compute instance in the virtual network to a destination compute instance via a destination virtual network interface card (destination VNIC) in the first virtual Layer 2 network, evaluates access control lists (ACLs) of the packet using a source virtual network interface card (source VNIC), and embeds ACL information associated with the packet in the packet. A virtual switching and routing service (VSRS) receives the packet, identifies a destination VNIC in the first virtual Layer 2 network for delivering the packet based on information received with the packet and mapping information included in a mapping table, obtains ACL information from the packet, and applies the ACL information to the packet.SELECTED DRAWING: Figure 21

Techniques for utilizing multiple network interfaces for a cloud shell are provided. The techniques include receiving, by a computer system, a command to execute an operation by the computer system, the command being received from a router via a primary virtual network interface card (vNIC), the primary vNIC being configured to permit incoming traffic. The computer system may execute the operation, generating an output of the operation. The techniques also include transmitting, by the computer system, a message comprising the output of the operation to a shell subnet via a secondary vNIC, the secondary vNIC being configured to permit outgoing traffic from the computer system to the shell subnet.

The invention discloses a vehicle-mounted communication method and system, and relates to the technical field of vehicle-mounted communication, and the method comprises the step of connecting a plurality of slave computing units through a PCIe bus. And setting a corresponding first virtual internet protocol address for the first virtual network card created by each slave computing unit. And associating a plurality of second virtual network cards created by the main computing unit with the virtual network bridge. Taking the plurality of first virtual network cards and the plurality of second virtual network cards as network interfaces for bidirectional communication between the plurality of slave computing units and the master computing unit respectively, and according to first virtual internet protocol addresses corresponding to the plurality of first virtual network cards and an association relationship between the plurality of second virtual network cards and the virtual network bridge, establishing a virtual network bridge between the plurality of slave computing units and the master computing unit; and performing Ethernet communication with the plurality of slave computing units. The main computing unit and the slave computing units are connected through the PCIe bus, the requirement of vehicle-mounted computing power can be met, and the Ethernet communication requirement of an upper-layer application algorithm can be considered under the condition that physical hardware is not changed through a virtual network card and a virtual network bridge.

This application relates to a gateway determination method, apparatus, computer device, and storage medium. The method includes: determining whether a target association entry containing the protocol address exists in a preset association flow table based on the protocol address of the target virtual network interface card (NIC) to which the data to be transmitted belongs; the preset association flow table is used to indicate whether the target virtual NIC is associated with a flexible network address; if it exists, determining the target gateway for the data to be transmitted based on the target association entry and the routing address corresponding to the target virtual NIC; if it does not exist, determining the target gateway for the data to be transmitted based on the protocol address and routing address of the target virtual NIC. This method can accurately determine whether a target virtual NIC is associated with a flexible network address by setting a preset association flow table, and accurately determine the target gateway for the data to be transmitted, avoiding gateway selection confusion caused by identical routing configurations of target gateways, and further improving the accuracy of gateway selection.

A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.

Systems and methods for interface-based ACLs in virtual layer 2 networks. The method can include sending a packet from a source compute instance in a virtual network to a destination compute instance via a destination virtual network interface card (destination VNIC) within a first virtual layer 2 network and evaluating an access control list (ACL) for the packet with a source virtual network interface card (source VNIC). The ACL information related to the packet can be embedded in the packet. A VSRS can receive the packet and can identify the destination VNIC within the first virtual layer 2 network to deliver the packet based on information received with the packet and mapping information contained in a mapping table. The VSRS can access the ACL information from the packet and can apply the ACL information to the packet.

A data configuration method includes monitoring a target segment of a virtual network interface card (VF) capable of implementing a remote direct memory access (RDMA) communication mode, and in response to detecting a change event in the target segment of the VF, synchronizing configuration data of a namespace represented by the target segment to configuration information of a container resource in a first communication mode and a second communication mode. The target segment is set in a configuration space of the VF and is used to represent identification information of an independent namespace assigned to the VF in a container.

A Network Virtualization Device (NVD) executes a set of Virtual Network Interface Cards (VNICs). The set of VNICs includes a first VNIC that forwards packets for a set of one or more packet flows. The NVD stores a first VNIC-related information that includes information identifying a first set of one or more packet flows and associated state information The NVD in response to determining that the state information for the first VNIC is to be synchronized with another NVD, identifies a first backup NVD for the first VNIC, wherein the first backup NVD is a backup for the first VNIC, and communicates to the first backup NVD, a portion of the state information stored by the NVD for the first VNIC.

Disclosed are a network management method and system for a container, and an electronic device and a storage medium. The network management method for a container comprises: creating a network bridge on a host machine, and carrying out network configuration on the network bridge; starting target containers on the host machine, wherein the target containers comprise a first container configured to realize mobile network-based dialing, a second container configured to realize interface interaction of Android applications, and a third container configured to realize interface interaction of instrument applications; respectively generating a corresponding container end virtual network interface card in each target container, and generating a corresponding network bridge end virtual network interface card for each container end virtual network interface card in the network bridge; using the first container to perform dialing to create a plurality of mobile network interface cards, and generating a strategy routing table, wherein the strategy routing table is used for describing a mapping relationship between a container and a mobile network interface card; and on the basis of the strategy routing table, routing to the respective mobile network interface cards data packets transmitted by the target containers via the network bridge.

The present application relates to a network interface card configuration method and apparatus, an electronic device, and a storage medium. The method includes: associating a target pod group with a target network interface card identifier during generation of the target pod group; obtaining a first required acceleration card resource corresponding to the target pod group in response to the fact that the target network interface card corresponding to the target network interface card identifier is the target virtual network interface card; and according to the first required acceleration card resource, configuring the target virtual network interface card for the target pod group, or mapping the target virtual network interface card to the target physical network interface card corresponding to the target virtual network interface card, and configuring the target physical network interface card corresponding to the target virtual network interface card for the target pod group.

This provides a method for scaling IP addresses in an overlay network without using a load balancer. [Solution] An overlay IP address is attached to multiple compute instances via a virtual network interface card (VNIC) associated with multiple compute instances. Traffic directed to the multi-attached IP address is distributed across the multiple compute instances. The overlay IP address is scaled using ECMP technology in the overlay network. In the forwarding table, the scaled IP address is associated with multiple next-hop paths to multiple network virtualization devices (NVDs) associated with multiple compute instances. One of the multiple next-hop paths is selected to route a specific packet directed to the overlay IP address.

Techniques for managing the distribution of configuration information that supports the flow of packets in a cloud environment are described. In an example, a virtual network interface card (VNIC) hosted on a network virtualization device NVD receives a first packet from a compute instance associated with the VNIC. The VNIC determines that flow information to send the first packet on a virtual network is unavailable from a memory of the NVD. The VNIC sends, via the NVD, the first packet to a network interface service, where the network interface service maintains configuration information to send packets on the substrate network and is configured to send the first packet on the substrate network based on the configuration information. The NVD receives the flow information from the network interface service, where the flow information is a subset of the configuration information. The NVD stores the flow information in the memory.

Techniques are described for enforcing the flow of traffic between VNICs using ZPR policy. A method includes accessing a ZPR policy that specifies how a flow of traffic is enforced between endpoints within the one or more networks, wherein the policy includes one or more layer 4 rules and one or more layer 7 rules; identifying from the ZPR policy, a ZPR statement that specifies a connection between a first virtual network interface card (VNIC) and an endpoint; generating, based on the ZPR statement, one or more network security group (NSG) rules; and distributing at least one of the one or more NSG rules to a first NSG associated with the first VNIC.

A networking device in a high availability (HA) configuration processes network flows for a virtual network interface card (VNIC). Network configurations include networking policies governing network packet processing by the networking device. Global epoch values are associated with each network configuration version. The networking device has a control plane, a data plane, and a flow table. The control plane uses the most recent network configuration to produce flow table entries for storage in the flow table. The data plane uses the flow table entries to process network packets. Flow table entries include flow epoch values matching the global epoch value associated with the network configurations used to create the flow entries. Datapath epoch values, VNIC peer epoch values, and VNIC local epoch values are associated with the VNICs and used to ensure consistent flow table entries among the peers in the HA configuration.

A gateway determination method, comprising: on the basis of a protocol address of a target virtual network interface card to which data to be transmitted belongs, determining whether there is a target association table entry including the protocol address in a preset association flow table (202), wherein the preset association flow table is used for indicating whether the target virtual network interface card is associated with an elastic network address; if there is a target association table entry including the protocol address in the preset association flow table, on the basis of the target association table entry and a routing address corresponding to the target virtual network interface card, determining a target gateway of said data (203); and if there is no target association table entry including the protocol address in the preset association flow table, on the basis of the protocol address of the target virtual network interface card and the routing address of the target virtual network interface card, determining the target gateway of said data (204).