Kernel Bridge Interfaces for Virtual Network vNICs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Virtual network appliances (VNAs) with multiple virtual network interface cards (vNICs) face challenges in connecting each vNIC to the appropriate virtual switch or virtual-switch port, requiring different network properties like VLAN and IP Subnets, which becomes complex and error-prone, especially during reboots where MAC addresses may be inconsistently assigned.
Innovation Solution
A method using a bridge device within the kernel bridge infrastructure, modified with netfilter hooks to prevent broadcast packet forwarding and set the source MAC address of egress packets to the corresponding vNIC MAC address, creating a root interface that acts as a single access point for multiple vNICs, ensuring transparent connectivity to underlying networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If each vNIC is connected to an appropriate virtual switch or virtual-switch port with different network properties (VLAN, IP Subnets), then network connectivity and functionality are improved, but device complexity and configuration difficulty increase significantly
Solution Approach 1:
The patent merges multiple vNIC connections into a single bridge interface. Instead of configuring each vNIC separately with different network properties, all vNICs are connected to a common bridge interface that handles the complexity of multiple virtual switch connections internally. This reduces configuration complexity while maintaining network connectivity.
Solution Approach 2:
The bridge interface acts as an intermediary between the vNICs and the virtual switches. It mediates the connections by receiving packets from vNICs and intelligently forwarding them to the appropriate virtual switch ports based on network properties, thereby shielding the user from configuration complexity.
2Ease of operation
If broadcast packets are forwarded between bridge ports, then network communication is improved, but network security and broadcast control deteriorate
Solution Approach 1:
The patent applies different quality rules to different bridge ports. By default, broadcast packets are blocked between bridge ports to prevent interference. However, the system allows selective configuration where specific ports can be designated to forward broadcast packets when needed, enabling local customization of broadcast behavior based on specific network requirements.
3Adaptability or versatility
If MAC addresses are dynamically assigned during reboot, then system flexibility is improved, but network connectivity reliability deteriorates due to inconsistent MAC address assignment
Solution Approach 1:
The patent performs preliminary MAC address assignment at system initialization or boot time. Instead of assigning MAC addresses dynamically during each reboot operation, the system pre-assigns MAC addresses to vNICs and stores them persistently. This ensures that the same MAC addresses are reused across reboots, maintaining network connectivity consistency while preserving system flexibility.
Data Source
AI summary
One embodiment includes using a bridge device in support of a kernel bridge infrastructure. The kernel bridge infrastructure is modified using netfilter hooks to prevent forwarding of broadcast packets between bridge ports and to set a source media access control (MAC) address of an egress packet to a corresponding MAC address of a virtual network interface card (vNIC).