NFV Zero-Copy Forwarding Through vNIC Packet Filters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data forwarding schemes in network function virtualization (NFV) involve multiple data copies, leading to packet boundary loss and inefficiencies in bandwidth utilization, particularly in multi-tenant environments.
Innovation Solution
Implementing packet filters at the virtual execution environment level, such as Berkeley Packet Filters (BPF), which are associated with virtual network interface controllers (vNICs) to directly forward network packets to identified connections, bypassing proxy applications and minimizing data copies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing data forwarding schemes are used in NFV, then packet forwarding can be achieved, but multiple data copies are created leading to packet boundary loss and bandwidth inefficiency
Solution Approach 1:
The patent extracts the packet filtering functionality from the proxy application and implements it directly at the vNIC level using packet filters. This removes the intermediate copying step where packet boundaries are lost, allowing packets to be forwarded directly from the vNIC to the network connection without being duplicated through the proxy application, thereby maintaining packet integrity while improving bandwidth efficiency
Solution Approach 2:
The patent introduces packet filters as an intermediary mechanism between the vNIC and network connections. These filters operate at the kernel level to directly match incoming packets with established network connections, eliminating the need for proxy applications to intercept and recopy packets. This intermediary filtering layer preserves packet boundaries while enabling efficient direct forwarding
2Ease of operation
If proxy applications are used for data forwarding, then network communication can be managed, but inefficiencies in bandwidth utilization occur due to multiple data copies
Solution Approach 1:
The patent replaces the mechanical proxy application copying mechanism with a more efficient packet filter-based system. Instead of using proxy applications that intercept, copy, and forward packets through socket interfaces, the system uses kernel-level packet filters that directly match packets with network connections and forward them without copying. This substitution maintains ease of operation through centralized filter management while dramatically improving bandwidth utilization by eliminating redundant data copies
3Adaptability or versatility
If multiple data copies are created in forwarding schemes, then packet routing can be achieved, but packet boundary loss occurs reducing packet integrity
Solution Approach 1:
The patent segments the packet forwarding process into distinct stages: packet capture at vNIC, filtering and matching against network connections, and direct forwarding. By segmenting the process and implementing filters at the kernel level, each packet is processed independently without being merged with other data, preserving packet boundaries throughout the routing process while maintaining routing capability
Data Source
AI summary
Systems and methods for zero-copy forwarding for network function virtualization (NFV). An example method comprises: receiving, by a supervisor of a host computer system, a definition of a packet filter originated by a virtual execution environment running on the host computer system; responsive to validating the packet filter, associating the packet filter with a vNIC of the virtual execution environment; receiving, by the supervisor, a network packet originated by the vNIC; and responsive to matching the network packet to a network connection specified by the packet filter, causing the packet filter to forward the network packet via the network connection.