Asymmetric Proxy for Container Networking

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional systems face challenges in facilitating userspace networking in cloud computing environments, particularly in containerized virtual machines, due to opacity of networking traffic, security concerns, and inflexibility of existing solutions that require unnecessary protocol layer translations or are tied to specific virtual machines.

Innovation Solution

An asymmetric proxy is implemented to translate network communications between entities operating at different networking layers (L2 and L4), allowing for generic connectivity and operation across multiple machines, thereby eliminating redundant networking efforts and enhancing performance by bypassing the operating system's networking stack.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional symmetric networking solutions are used in containerized VMs, then networking traffic can be monitored and secured through the operating system, but the system suffers from reduced performance due to multiple packet copies between operating system levels and application levels

Engineering Contradiction:

Improvenetworking traffic monitoring and securityVSAvoidnetworking performance

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent introduces an asymmetric proxy as an intermediary component that sits between the containerized VM and the external network. This proxy handles networking operations at the application level, eliminating the need for packets to traverse the operating system networking stack multiple times. The proxy maintains security and monitoring capabilities while directly managing network traffic flow, thus resolving the contradiction between reliability and productivity.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the networking functionality by separating it from the traditional operating system networking stack and relocating it to the application level within the containerized VM. This segmentation allows the networking operations to be handled independently by the asymmetric proxy, reducing unnecessary packet copies and improving performance while maintaining the security and monitoring functions through the proxy's design.

Inventive Principle:

Principle #1Segmentation

2Adaptability or versatility

If traditional networking stacks are used in containerized virtual machines, then standard network protocols are supported, but the system experiences increased complexity and reduced scalability due to protocol layer translations and OS-level dependencies

Engineering Contradiction:

Improvenetworking protocol supportVSAvoidnetworking architecture complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The asymmetric proxy is designed with multi-functionality, handling multiple networking operations (packet forwarding, address translation, protocol conversion) within a single unified component. This universal design reduces the need for separate translation layers and OS-level interventions, simplifying the overall networking architecture while maintaining broad protocol support and improving scalability across different containerized VM environments.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Stability of the object's composition

If symmetric networking solutions are implemented, then consistent networking layers are maintained at both ends, but the system loses flexibility and requires unnecessary translations when communicating between different networking layers (L2 and L4)

Engineering Contradiction:

Improvenetworking layer consistencyVSAvoidnetworking layer flexibility

Core Design Contradiction:

Stability of the object's compositionVSAdaptability or versatility

Solution Approach 1:

The patent implements asymmetric networking where the proxy can operate at different networking layers (L2 data link layer and L4 transport layer) depending on the communication requirements. This asymmetric design allows the system to maintain consistency when needed while providing flexibility to adapt to different networking layer requirements without unnecessary translations, directly resolving the contradiction between stability and adaptability.

Inventive Principle:

Principle #4Asymmetry

Data Source

PatentUS11218559B2Asymmetric networking proxy

Publication Date: 2022.01.04 RED HAT INC

AI summary

An asymmetric proxy receives a request from a source network, where the source network sends the request at a first networking layer, and determines a destination network associated with the request, where the destination network communicates at a second networking layer, and where the second networking layer is different than the first networking layer. The asymmetric proxy removes information associated with the source network from one or more networking layers of the request, stores the information associated with the source network in a memory space, translates the one or more networking layers of the request to include information associated with the destination network, and provides the request to the destination network at the second networking layer.