Private Ethernet Overlay Networks Over Shared Infrastructure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtualization technologies face challenges in creating and managing private networks across multiple hosts in a distributed environment, leading to issues such as broadcast message inefficiencies and the inability to move virtual machines for load balancing, due to limitations in VLANs and single-host implementations.
Innovation Solution
Implementing a method for encapsulating packets with a new header and fence identifier within a virtual infrastructure, allowing direct access only to members of a fenced group, enabling private networking across hosts while maintaining network connectivity and scalability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Area of stationary object
If VLANs are used to implement distributed networks across multiple physical networks, then network connectivity is improved, but device complexity and difficulty of centralized management increase
Solution Approach 1:
The patent introduces a centralized virtual infrastructure manager as an intermediary that automatically configures and manages virtual network switches and VLANs. This mediator handles the complexity of distributed network management by providing automated provisioning, monitoring, and reconfiguration capabilities, eliminating the need for manual VLAN management across multiple hosts.
Solution Approach 2:
The patent employs automated scripting and orchestration tools that accelerate the network configuration process. These tools rapidly provision VLANs, configure virtual switches, and manage network policies across distributed hosts, significantly reducing the time and complexity associated with manual network setup and management.
2Area of stationary object
If broadcast messages are sent in a private network across multiple hosts, then communication coverage is improved, but scalability deteriorates due to hosts receiving broadcasts without VMs in the private network
Solution Approach 1:
The patent segments the network into isolated VLANs for each private network, with virtual switches configured to forward broadcast messages only within the appropriate VLAN boundaries. This segmentation ensures that broadcast traffic is contained to only those hosts that have VMs participating in the private network, preventing unnecessary traffic propagation to hosts without relevant VMs.
Solution Approach 2:
The centralized virtual infrastructure manager implements feedback mechanisms that track VM locations and network participation. Based on this feedback, the system dynamically adjusts broadcast forwarding rules to ensure messages reach only the intended recipients, optimizing network traffic efficiency while maintaining full communication coverage for participating VMs.
3Device complexity
If virtual machines are confined to single-host implementations, then network simplicity is maintained, but adaptability and load balancing capabilities deteriorate
Solution Approach 1:
The patent implements universal virtual network switches that can operate across multiple hosts while maintaining a unified network view. These virtual switches provide multi-functionality by supporting both simple single-host configurations and complex multi-host deployments with load balancing, enabling the same network infrastructure to adapt to varying deployment requirements without sacrificing simplicity or capability.
Solution Approach 2:
The patent employs dynamic VM migration capabilities that allow virtual machines to move between hosts while maintaining network connectivity. The virtual infrastructure manager dynamically updates network configurations and forwarding rules as VMs migrate, enabling load balancing and resource optimization while preserving network simplicity through automated management.
4Reliability
If VLAN encapsulation is used for distributed networking, then network isolation is improved, but programmability by centralized manager deteriorates
Solution Approach 1:
The centralized virtual infrastructure manager acts as an intermediary that handles VLAN encapsulation and decapsulation transparently. The manager receives high-level networking requests, automatically translates them into VLAN configuration commands, and manages the encapsulation/decapsulation processes. This intermediary approach maintains strong network isolation through proper VLAN encapsulation while preserving programmability by providing a simplified abstraction layer for centralized management.
Data Source
AI summary
A system for private networking within a virtual infrastructure is presented. The system includes a virtual machine (VM) in a first host, the VM being associated with a first virtual network interface card (VNIC), a second VM in a second host, the second VM being associated with a second VNIC, the first and second VNICs being members of a fenced group of computers that have exclusive direct access to a private virtual network, wherein VNICs outside the fenced group do not have direct access to packets on the private virtual network, a filter in the first host that encapsulates a packet sent on the private virtual network from the first VNIC, the encapsulation adding to the packet a new header and a fence identifier for the fenced group, and a second filter in the second host that de-encapsulates the packet to extract the new header and the fence identifier.