Network Processing Device for Unified VPC Feature Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The complexity of managing virtual private cloud (VPC) network features across different cloud resource pools, which use various virtualization technologies, leads to increased costs and deployment challenges due to the need for dedicated network components and varying network features.
Innovation Solution
A data packet processing method and system that transfers VPC network feature processing to a network processing device, allowing for dynamic management of VPC network features and reducing complexity by using a cloud management platform to send VPC network information to the network processing device, which performs necessary processing on data packets, enabling complete VPC network feature implementation regardless of the resource pool type.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If different types of cloud resource pools with various virtualization technologies are used, then computing capabilities and network features can be provided, but management complexity and deployment complexity increase due to varying network features and need for dedicated network components
Solution Approach 1:
The patent introduces a network processing device as an intermediary component between the virtualization layer and the physical network. This device receives data packets from virtual switches of different virtualization technologies, performs unified VPC network feature processing (including L2 forwarding, L3 routing, DHCP, and security group functions), and forwards processed packets to the physical network. This intermediary approach allows diverse virtualization platforms to use a standardized network processing mechanism, reducing deployment complexity while maintaining adaptability across different cloud resource pool types
Solution Approach 2:
The network processing device is designed with multi-functional capabilities to handle various VPC network features within a single unified component. It can perform layer 2 forwarding, layer 3 routing, DHCP service, security group enforcement, and other network functions simultaneously. This universal design eliminates the need for separate dedicated network components for each virtualization platform, allowing the same network processing device to serve multiple virtualization technologies (VMware, Hyper-V, KVM, XEN) and reduce overall system complexity
2Reliability
If dedicated network components are purchased for each virtualization platform to implement advanced network features, then complete VPC network features can be provided, but costs increase
Solution Approach 1:
The patent merges multiple previously separate network components and functions into a single network processing device. Instead of requiring separate hardware or software components for L2 forwarding, L3 routing, DHCP, and security groups for each virtualization platform, the solution combines all these functions into one unified network processing device that serves multiple virtualization platforms. This consolidation reduces the total quantity of network components needed while maintaining complete VPC network feature functionality across different cloud resource pools
Data Source
AI summary
A data packet processing method includes cloud management platform sends virtual private cloud (VPC) network information of a computing instance running on a host to a network processing device, a virtual switch receives a data packet from the computing instance using a virtual port of the computing instance, and the data packet carries a network address of the computing instance and a virtual local area network (VLAN) identifier of the virtual port sending the data packet, the virtual switch sends the data packet according to the VLAN identifier, and routes the data packet to the network processing device, the network processing device determines the VPC network information of the computing instance according to the network address of the computing instance, and performs network function processing on the data packet. Therefore, a VPC network feature of a computing instance can be adjusted according to a requirement, thereby improving management efficiency.