Shared MAC Address Table Protection in Virtualized Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In virtualized computing environments, the Media Access Control (MAC) address table at network switches can overflow due to the large number of virtual machines, leading to network performance degradation and flooding issues, as existing solutions are inefficient in managing a large number of MAC addresses.

Innovation Solution

The proposed solution involves modifying the source MAC address in request messages from virtual machines to a shared MAC address, which is usable by multiple virtual machines, thereby reducing the number of MAC addresses that need to be learned by network switches, thus protecting the MAC address table and preventing overflow.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the network switch learns MAC addresses from all virtual machines, then communication among network devices is facilitated, but the MAC address table overflows due to the large number of virtual machines

Engineering Contradiction:
Improvecommunication reliabilityVSAvoidnumber of MAC addresses
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

Multiple virtual machines share a common MAC address (shared MAC address mechanism), consolidating what would traditionally be multiple unique MAC addresses into a single entry in the network switch's MAC address table, thereby reducing the total number of MAC addresses learned while maintaining communication functionality

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The shared MAC address serves multiple virtual machines simultaneously, making a single MAC address entry perform the function of multiple individual MAC addresses, thus reducing the quantity of MAC address entries needed in the table

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If the MAC address table size is increased to accommodate more virtual machines, then more MAC addresses can be learned, but the network switch performance degrades and flooding issues occur

Engineering Contradiction:
Improvecapacity to learn MAC addressesVSAvoidnetwork switch performance
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

By merging multiple virtual machine MAC addresses into a single shared MAC address entry, the system achieves high adaptability to support many virtual machines without proportionally increasing the MAC address table size, thereby maintaining network switch performance

Inventive Principle:
Principle #5Merging (Combining)

3Adaptability or versatility

If unique MAC addresses are assigned to each virtual machine, then each virtual machine can be identified individually, but the number of MAC addresses learned increases excessively

Engineering Contradiction:
Improvevirtual machine identificationVSAvoidnumber of MAC addresses
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

Multiple virtual machines that do not require individual MAC address identification are merged into a single shared MAC address entry, reducing the total quantity of MAC addresses while maintaining the ability to identify and communicate with virtual machines at the necessary level of granularity

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS9621461B2Media access control (MAC) address table protection in a virtualized computing environment
Publication Date: 2017.04.11 VMWARE INC
  • US9621461B2 patent drawing
  • US9621461B2 patent drawing
  • US9621461B2 patent drawing

AI summary

An example method is provided for a network device to protect a Media Access Control (MAC) address table of a network switch in a virtualized computing environment. The method may comprise, in response to receiving a request message from a virtual machine, determining a shared MAC address that is usable for the virtual machine and at least one other virtual machine, modifying a source MAC address of the request message from a MAC address associated with the virtual machine to the shared MAC address; and sending, to the network switch, the request message having the shared MAC address as the modified source MAC address. The method may comprise, in response to receiving a reply message from the network switch, the reply message having the shared MAC address as a destination MAC address, sending, to the virtual machine, the reply message in reply to the request message.