Distributed Virtual Switch Port Mirroring via Controller Encapsulation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing server virtualization systems face challenges in providing effective location-independent dynamic port mirroring across distributed virtual switches, as they struggle to efficiently replicate data packets between virtual machines located on different physical machines.
Innovation Solution
A controller is introduced to configure distributed virtual switches, encapsulating data packets with source and monitor port IDs to facilitate packet replication across physical machines, ensuring seamless communication and mirroring regardless of the monitor port's location.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If port mirroring is implemented in traditional virtualization systems, then port mirroring functionality is provided, but it is restricted to within a single physical machine and cannot span distributed virtual switches
Solution Approach 1:
The system segments the distributed virtual switch into multiple distributed virtual switch components distributed across different physical machines. Each component can independently handle port mirroring for its local virtual ports, while the segmentation allows the overall system to provide cross-machine port mirroring capability that a single physical machine cannot achieve alone.
Solution Approach 2:
The patent introduces intermediary mechanisms including encapsulation protocols and controller components that mediate between virtual ports on different physical machines. The encapsulation format includes source virtual port identifiers and destination virtual port identifiers, allowing the intermediary controller to route mirrored traffic across the distributed system boundary.
2Ease of operation
If dynamic port mirroring is implemented across distributed virtual switches, then location independence is achieved, but packet routing and forwarding complexity increases
Solution Approach 1:
The system implements self-service mechanisms where the encapsulated packet format automatically includes all necessary routing information (source virtual port ID, destination virtual port ID, physical machine identifiers). This self-contained information structure allows distributed virtual switch components to autonomously route mirrored packets without requiring complex external routing tables or manual configuration.
Solution Approach 2:
The patent transforms the port mirroring function by changing the packet representation parameters - introducing an encapsulation format that wraps the original packet with additional metadata parameters including source and destination virtual port identifiers. This parameter transformation simplifies the routing logic by making all necessary routing information explicitly available in the packet structure itself.
3Adaptability or versatility
If monitor ports are located on different physical machines, then location independence is provided, but packet replication and delivery efficiency decreases
Solution Approach 1:
The patent merges the distributed virtual switch components into a unified logical switching fabric. By treating multiple physical machines as a single distributed switching entity and using a unified encapsulation format, the system allows monitor ports to be located anywhere in the distributed system while maintaining efficient packet delivery through the merged logical architecture.
Solution Approach 2:
The encapsulation mechanism is designed with universal applicability - the same encapsulation format and routing logic handles both local and cross-machine port mirroring scenarios. This multi-functional design allows the system to efficiently route mirrored packets whether the monitor port is on the same physical machine or a different one, without requiring separate processing paths.
Data Source
AI summary
A method for providing location independent dynamic port mirroring on distributed virtual switches is disclosed. A controller is provided to configure one or more virtual switches within a group of physical machines to appear as a set of distributed virtual switches. In response to the receipt of a data packet at a port of a physical machine, a determination is made whether or not the port has a monitor port located on the physical machine. If the port has a monitor port located on the same physical machine, a copy of the data packet is sent to the monitor port of the physical machine. If the port has a monitor port located on a different physical machine, a copy of the data packet along with an identification (ID) of the port and an ID of the monitor port are encapsulated, and the encapsulated information are sent to a controller.


