Container QoS Policy Enforcement in Virtualized Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In virtualized computing environments, managing network resources among multiple virtual machines and containers is challenging, particularly in differentiating and allocating network bandwidth to individual containers, leading to potential bandwidth starvation or dominance issues.

Innovation Solution

Implementing Quality of Service (QoS) policies that identify and differentiate traffic flows from specific containers by adding tag data to packets and enforcing bandwidth allocations based on configured QoS policies, ensuring fair network resource distribution among containers within and across virtual machines.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If network resources are shared among multiple virtual machines and containers, then resource utilization efficiency is improved, but network bandwidth management and differentiation become complex

Engineering Contradiction:
Improveresource utilization efficiencyVSAvoidnetwork bandwidth management complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent segments network resources by introducing hierarchical QoS policies that divide network bandwidth into different levels: virtual machine-level QoS policies and container-level QoS policies. This segmentation allows independent management of network resources at each level, resolving the complexity of managing shared resources while maintaining high utilization efficiency.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces QoS policy components as intermediaries between the physical network resources and the virtual machines/containers. These components include QoS policy information structures, QoS enforcement mechanisms, and network virtualization managers that mediate resource allocation, simplifying the management complexity while enabling efficient resource sharing.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If network bandwidth is allocated to individual containers, then fair resource distribution is improved, but system complexity increases due to traffic flow differentiation requirements

Engineering Contradiction:
Improvefair resource distributionVSAvoidsystem complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent applies local quality by assigning specific QoS characteristics to individual containers based on their traffic flow requirements. Each container can have customized QoS policies that define its specific bandwidth allocation, priority level, and traffic handling rules, enabling fair resource distribution while managing complexity through localized policy application rather than global reconfiguration.

Inventive Principle:
Principle #3Local quality

3Reliability

If QoS policies are implemented for container traffic isolation, then network performance stability is improved, but processing overhead increases due to packet tagging and policy enforcement

Engineering Contradiction:
Improvenetwork performance stabilityVSAvoidprocessing overhead
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements preliminary action by pre-configuring QoS policies and associating them with container identifiers before traffic flows are established. The system pre-establishes mapping relationships between containers and their QoS parameters, so that during actual traffic handling, the enforcement mechanism can directly apply pre-determined policies without complex real-time calculations, reducing processing overhead while maintaining performance stability.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS9722948B2Providing quality of service for containers in a virtualized computing environment
Publication Date: 2017.08.01 VMWARE INC
  • US9722948B2 patent drawing
  • US9722948B2 patent drawing
  • US9722948B2 patent drawing

AI summary

An example method is provided for a computing device to provide quality of service (QoS) for a container in a virtualized computing environment. The method may comprise receiving a traffic flow of packets from a virtual machine and identifying a container from which the traffic flow originates based on content of the received traffic flow of packets. The container may be supported by the virtual machine. The method may further comprise retrieving a QoS policy configured for the identified container. For example, the QoS policy may specify a network bandwidth allocation for the container. The method may further comprise forwarding the received traffic flow of packets according to the QoS policy.