Network Interface Device Port Bonding in Virtualization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network traffic management systems face challenges in implementing high-performance, highly available, and secure client-server architectures, especially in virtualization environments, due to compatibility issues with certain hardware, operating systems, and virtualization configurations.
Innovation Solution
The system bonds multiple physical network ports into a link aggregation group accessible from a network interface without using operating system control, and assigns a device function to a virtual machine for communicating between the network interface and the virtual machine, thereby forwarding network traffic across the link aggregation group.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If operating system control is used to bond network ports, then ease of operation is improved, but compatibility issues arise with certain hardware and virtualization configurations
Solution Approach 1:
The patent introduces a network interface device as an intermediary component that sits between the operating system and the network ports. This device implements port bonding functionality independently of the operating system, using device functions that can be directly assigned to virtual machines. The intermediary handles the complexity of port bonding while presenting a simplified interface to both the operating system and virtualization environment, thereby resolving compatibility issues across different hardware and software configurations.
2Device complexity
If port bundling is integrated with virtualization environment, then device complexity is reduced, but security and isolation are compromised
Solution Approach 1:
The patent segments the port bonding functionality from the virtualization environment by implementing it in a separate network interface device. This segmentation creates distinct functional boundaries where port bonding operations are isolated from virtual machine operations. The device function assignment mechanism further segments access control, allowing individual virtual machines to be assigned specific device functions while maintaining isolation. This architectural segmentation reduces device complexity by separating concerns while simultaneously improving security through enforced isolation boundaries.
Data Source
AI summary
Technology related managing network ports in a virtualization environment is disclosed. In one example, a method includes, without using operating system control, bonding a plurality of physical ports into a link aggregation group accessible from a network interface. A device function can be assigned to a virtual machine. The device function can be used for communicating between the network interface and the virtual machine via an interconnect. The device function can be used to forward network traffic between the virtual machine and the network interface, and across the link aggregation group.