Geneve Tunnel Header Embedding Tenant Path Selection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing traffic engineering techniques, such as MPLS, do not readily support encapsulating tenant identifiers, requiring additional policies and multiple encapsulations for overlay and underlay networks, which complicates path management in multi-tenant environments.

Innovation Solution

A method that embeds a specific path for a tenant's data message flow in tunnel headers, using classification operations based on layer 2-4 header values and contextual attributes to select and direct the flow, and employs the Generic Network Virtualization Encapsulation (Geneve) protocol to carry path information and tenant identifiers, allowing data messages from multiple tenants to share the same tunnel.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If MPLS techniques are used for traffic engineering, then path descriptive information can be added between layers 2 and 3 headers, but tenant identifiers cannot be encapsulated and multiple encapsulations are required for overlay and underlay

Engineering Contradiction:
Improvetenant identifier encapsulationVSAvoidmultiple encapsulations
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent merges tenant identifier encapsulation with path descriptive information into a single tunnel header structure. The Geneve header combines both functions that previously required separate encapsulations, eliminating the need for multiple nested headers while maintaining both tenant identification and traffic engineering capabilities.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The tunnel header is designed to serve multiple functions simultaneously: it encapsulates tenant identifiers for multi-tenant isolation, carries path descriptive information for traffic engineering, and provides QoS markings. This multi-functional header replaces the need for separate encapsulations for each function.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If multiple encapsulations are used for overlay and underlay, then tenant identifiers can be specified, but path management becomes complicated

Engineering Contradiction:
Improvetenant identifier specificationVSAvoidpath management
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The patent combines tenant identifier specification and path management into a unified tunnel header structure. The Geneve header integrates both the tenant identifier field and the path descriptive information (such as MPLS labels or segment routing instructions) into a single encapsulation layer, simplifying path management while maintaining tenant isolation.

Inventive Principle:
Principle #5Merging (Combining)

3Productivity

If classification operations are performed on data message flow, then specific paths can be selected from two or more viable paths, but additional processing steps are required

Engineering Contradiction:
Improvepath selection efficiencyVSAvoidclassification operation
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent performs classification operations at the ingress point of the network, before traffic enters the core switching fabric. The tunnel header is populated with path descriptive information and tenant identifiers during the encapsulation process, allowing downstream devices to simply forward traffic based on pre-computed paths without performing complex classification themselves.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10659252B2Specifying and utilizing paths through a network
Publication Date: 2020.05.19 VMWARE INC
  • US10659252B2 patent drawing
  • US10659252B2 patent drawing
  • US10659252B2 patent drawing

AI summary

For a multi-tenant environment, some embodiments of the invention provide a novel method for (1) embedding a specific path for a tenant's data message flow through a network in tunnel headers encapsulating the data message flow, and then (2) using the embedded path information to direct the data message flow through the network. In some embodiments, the method selects the specific path from two or more viable such paths through the network for the data message flow.