Bandwidth Partitioning via Host OS Intermediary for Virtual NICs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In virtualized computer systems with multiple operating systems sharing a single network interface card (NIC), existing technologies fail to effectively enforce network bandwidth partitioning and prevent resource usage policy circumvention by guest operating systems.
Innovation Solution
A method that involves verifying the configuration of guest drivers and MAC layers to enforce resource usage policies, mapping hardware receive rings to guest operating systems, and creating a data path from the NIC to a host operating system to redirect packets if the guest OS exceeds bandwidth limits, thereby creating a virtual NIC to manage network traffic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If guest operating systems are allowed direct access to hardware receive rings for network packet reception, then network traffic handling efficiency is improved, but network bandwidth partitioning control and resource usage policy enforcement deteriorate
Solution Approach 1:
The patent introduces a host operating system as an intermediary between the guest OS and the hardware receive ring. The host OS verifies guest driver configuration, manages the mapping between guest OS and HRR, and monitors resource usage policies. This intermediary structure allows guest OS to access HRR directly for efficient packet handling while the host OS maintains control over bandwidth partitioning and policy enforcement.
2Reliability
If guest drivers are configured to enforce resource usage policies, then network bandwidth partitioning is improved, but system complexity increases due to verification and monitoring requirements
Solution Approach 1:
The patent implements self-service mechanisms where the guest driver automatically enforces resource usage policies and the host OS automatically verifies the configuration. The system uses monitoring information to automatically determine when policy violations occur and dynamically remaps the HRR mapping without manual intervention. This automation reduces the operational complexity despite the added verification and monitoring layers.
3Reliability
If dynamic remapping of hardware receive rings is implemented based on monitoring information, then resource usage policy enforcement is improved, but processing overhead increases
Solution Approach 1:
The patent implements periodic monitoring of resource usage by the host OS, which periodically checks monitoring information to determine if guest OS should continue direct HRR access. This periodic verification approach balances policy enforcement reliability with processing overhead, as the system only performs verification and potential remapping when monitoring thresholds are exceeded, rather than continuously.
Data Source
AI summary
A method for enforcing network bandwidth partitioning. The method includes verifying that a guest driver in a guest operating system (OS) is configured to enforce a resource usage policy, wherein the guest OS resides on a host, mapping a hardware receive ring (HRR) residing on a physical network interface card (NIC) operatively connected to the host to the guest OS, wherein after the mapping the guest OS is configured to receive packets directly from the HRR, determining, using monitoring information, that the guest OS should not receive packets directly from the HRR, and in response to the determination, creating a data path from the HRR to a host OS executing on the host, receiving packets for the guest OS from the HRR by the host OS over the data path, and forwarding the packets from the host OS to the guest OS.