Network Virtualization via Domain Segmentation and Intermediary Gateways
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network virtualization methods, such as VXLAN and NVGRE, face limitations in expandability due to the need for a full-mesh tunnel setup between Tunnel End Points (TEPs), restricting the size of the network and making it difficult to create virtual networks across multiple geographically dispersed data centers.
Innovation Solution
A network virtualization apparatus and method that utilizes a tunnel manager to collect and connect tunnel end points, performs L2 switching, and generates new tunnel packets with a tunnel header, allowing for the creation of multiple network virtualization domains connected via L3 tunnels in a full-mesh topology, reducing the number of necessary tunnels and enabling larger-scale network integration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a full-mesh tunnel is set between N number of TEPs to enable network virtualization, then virtual L2 network connectivity is achieved, but the number of tunnels required becomes N×(N−1) which restricts network expandability
Solution Approach 1:
The patent segments the network into multiple domains, each with its own boundary TEPs. Instead of creating a full-mesh tunnel among all TEPs globally, tunnels are created only within each domain. This segmentation reduces the total number of tunnels from N×(N−1) to a manageable number within each smaller domain, while still achieving virtual L2 connectivity across domains through domain border gateway functions.
Solution Approach 2:
The patent introduces domain border gateways as intermediary devices between domains. These gateways perform domain border gateway functions including routing between domains and L3 routing. The intermediary gateways enable cross-domain communication without requiring direct full-mesh tunnels between all TEPs, thus reducing tunnel complexity while maintaining connectivity.
2Area of stationary object
If the number of TEPs increases to expand network size, then network coverage is improved, but the complexity of setting and managing tunnels increases significantly
Solution Approach 1:
The patent divides the large-scale network into multiple smaller domains, each manageable independently. This segmentation allows network expansion without proportionally increasing tunnel management complexity, as each domain maintains its own manageable tunnel set rather than requiring global full-mesh configuration.
Solution Approach 2:
Domain border gateways act as intermediaries that simplify management by handling cross-domain routing automatically. When new TEPs are added to existing domains or new domains are created, the gateway mechanisms manage the complexity of inter-domain connectivity, making expansion easier without requiring manual reconfiguration of all existing tunnels.
3Ease of operation
If conventional network virtualization is restricted to one IDC to manage tunnel complexity, then tunnel management is simplified, but expandability across multiple geographically dispersed IDCs is limited
Solution Approach 1:
The patent enables each IDC to be segmented into its own domain with local TEPs and domain border gateways. This allows independent management of tunnels within each IDC while enabling inter-IDC connectivity through gateway mechanisms, thus achieving both simplified local management and multi-IDC deployability.
Solution Approach 2:
Domain border gateways at each IDC serve as intermediaries that enable multi-IDC deployment while maintaining simplified management. The gateways handle L3 routing between domains and domains in different IDCs, allowing geographic dispersion without requiring complex end-to-end tunnel management across all IDCs.
Data Source
AI summary
Provided herein a network virtualization apparatus and method, the apparatus including a tunnel manager configured to collect tunnel end points information within a network, and to connect each tunnel end point with a tunnel based on the tunnel end point information collected; a tunnel packet end point configured to receive a tunnel packet and process the packet such that an L2 switching may be performed, and to transmit the packet to a domain VSI (virtual switching instance); the domain VSI configured to perform the L2 switching on the processed packet, and to transmit the packet to a tunnel packet generator; and the tunnel packet generator configured to add a tunnel header to the packet for which the L2 switching has been performed to generate a new tunnel packet, and to transmit the new tunnel packet.