Overlay Network Extension via Virtual Forwarders and Address Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The management of large-scale computer networks, including data centers and virtualization technologies, has become complex due to the increased scale and scope of provisioning, administering, and managing physical and virtual computing resources, particularly in environments where multiple customers share resources and require secure application isolation and network extensions.
Innovation Solution
The Overlay Network Manager (ONM) system facilitates the extension of network capabilities by configuring computing nodes to act as virtual forwarders, managing communications between internal and external nodes, and using intermediate physical networks as substrates, while maintaining network isolation and security through address mapping and authorization mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If virtualization technologies are used to share physical computing resources among multiple customers, then resource utilization efficiency is improved, but network management complexity increases
Solution Approach 1:
The patent segments the physical network into multiple virtual networks using virtualization technologies. Each virtual network is isolated and managed independently, allowing multiple customers to share physical resources while maintaining separate management domains. This reduces overall management complexity by dividing the large-scale network into smaller, manageable segments.
Solution Approach 2:
The patent introduces overlay networks as an intermediary layer between physical network infrastructure and customer applications. The overlay network virtualizes physical resources and provides abstraction, enabling efficient resource sharing while simplifying management through a standardized interface that hides underlying physical network complexity.
2Adaptability or versatility
If computing nodes are configured to extend network capabilities to external nodes, then network versatility is improved, but security and isolation are compromised
Solution Approach 1:
The patent implements nested virtualization where virtual networks are embedded within the physical network infrastructure. Computing nodes can extend capabilities to external nodes through controlled interfaces while remaining nested within the secured virtual network boundary. This maintains security isolation while enabling versatile network extensions through the nested architecture.
Solution Approach 2:
The overlay network acts as an intermediary that mediates between internal virtual network nodes and external networks. It provides controlled access and capability extension while maintaining security boundaries, allowing versatile network functionality without compromising the isolation and security of the core virtual network.
3Reliability
If address mapping and authorization mechanisms are implemented, then network security is improved, but communication overhead increases
Solution Approach 1:
The patent implements preliminary authorization mechanisms where access rights and address mappings are established in advance during network configuration. This pre-authentication approach reduces real-time communication overhead by eliminating the need for frequent authorization checks during data transmission, while maintaining strong security through pre-configured access controls.
Data Source
AI summary
Techniques are described for managing communications between multiple computing nodes, such as for computing nodes that are part of managed virtual computer networks provided on behalf of users or other entities. In some situations, one or more of the computing nodes of a managed virtual computer network is configured to perform actions to extend capabilities of the managed virtual computer network to other computing nodes that are not part of the managed virtual computer network, such as by forwarding communications between computing nodes of the managed virtual computer network and the other external computing nodes so as to enable the other external computing nodes to participate in the managed virtual computer network. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.