MAC Layer Bridging for Isolated Virtual Networks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing technologies are inadequate for bridging network traffic between isolated virtual networks and external networks, as traditional bridging mechanisms rely on hardware switches or complex software-implemented protocols, which are not feasible for software-based virtual networks and incur significant processing overhead.

Innovation Solution

Implementing MAC layer bridging by duplicating the Media Access Control (MAC) address on network adapters between isolated and external networks, allowing for seamless forwarding of network frames at the layer 2 level, thereby enabling communication between isolated virtual networks and external networks without direct participation from higher-level protocols.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional hardware switches are used for bridging network traffic, then network connectivity between isolated and external networks is achieved, but device complexity and cost increase significantly

Engineering Contradiction:

Improvenetwork connectivityVSAvoidbridging mechanism complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent uses software-based virtual network adapters that copy the functionality of physical network adapters. These virtual adapters are implemented as software components that replicate the behavior of hardware network interfaces, allowing virtual networks to participate in network communication without requiring physical hardware for each virtual instance. This reduces device complexity while maintaining network connectivity.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The patent introduces a network bridge component that acts as an intermediary between isolated virtual networks and external networks. This bridge monitors network traffic and forwards frames between networks based on MAC addresses, eliminating the need for complex hardware switches while achieving reliable network connectivity between isolated and external networks.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Device complexity

If software-implemented network bridges are used, then device complexity is reduced, but processing overhead increases significantly

Engineering Contradiction:

Improvebridging mechanism complexityVSAvoidprocessing overhead

Core Design Contradiction:

Device complexityVSUse of energy by moving object

Solution Approach 1:

The patent extracts the bridging functionality from the main network stack and implements it as a dedicated software component that operates at the network driver level. This extracted bridging logic handles frame forwarding independently, reducing the processing overhead on the main system while maintaining low device complexity.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The virtual network adapters implement self-service mechanisms by maintaining their own transmission queues and handling their own frame forwarding decisions based on MAC address comparisons. This self-service approach minimizes the need for intensive software processing while achieving efficient frame forwarding with reduced processing overhead.

Inventive Principle:

Principle #25Self-service

3Use of energy by moving object

If MAC address duplication is implemented for bridging, then processing overhead is reduced, but network security and address uniqueness are compromised

Engineering Contradiction:

Improveprocessing overheadVSAvoidnetwork security

Core Design Contradiction:

Use of energy by moving objectVSReliability

Solution Approach 1:

The patent segments the network into isolated virtual networks and external networks, with the MAC address duplication occurring only at the boundary interface (the network bridge). Within each network segment, MAC addresses remain unique and secure. The duplication is confined to the bridging function itself, where the bridge uses the same MAC address to forward frames between networks, thereby reducing processing overhead while maintaining security within each segment.

Inventive Principle:

Principle #1Segmentation

4Device complexity

If virtual network adapters are used instead of physical ones, then device complexity is reduced, but adaptability to different network configurations decreases

Engineering Contradiction:

Improvenetwork adapter complexityVSAvoidnetwork configuration flexibility

Core Design Contradiction:

Device complexityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic virtual network adapters that can be configured through software to adapt to different network configurations. The virtual adapters can be programmatically configured with different MAC addresses, IP addresses, and network parameters, allowing them to adapt to various network topologies and requirements without requiring physical hardware changes. This dynamic configurability maintains adaptability while reducing device complexity.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS7324512B2MAC layer bridging of network frames between isolated and external networks

Publication Date: 2008.01.29 META PLATFORMS INC

AI summary

An apparatus, program product and method bridge an isolated network such as a virtual network to an external network such as another virtual network or physical network by utilizing a network adapter on the other network that is assigned the same Media Access Control (MAC) address as an isolated network adapter on the isolated network.