Virtual Bridge Address Translation for Low-IP VM Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for accessing virtual machines result in excessive IP resource consumption and high access costs due to the need for direct IP connections through physical network interfaces and virtual switches.

Innovation Solution

A method and apparatus that utilize a virtual bridge interface and a virtual switch to translate destination address information, allowing access to virtual machines through a series of address translations, reducing the reliance on physical network interface cards and minimizing IP address usage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If an independent virtual IP is set in a physical network card as an entrance of DNAT and a virtual switch is used for accessing virtual machine, then virtual machine access is enabled, but IP resources are wasted and access cost increases

Engineering Contradiction:
Improvevirtual machine accessVSAvoidIP resources
Core Design Contradiction:
Ease of operationVSQuantity of substance

Solution Approach 1:

The patent introduces a virtual bridge interface as an intermediary component between the physical network card and the virtual switch. This virtual bridge interface acts as a mediator that receives access requests from the physical network card and forwards them to the virtual switch, enabling virtual machine access without requiring an independent virtual IP in the physical network card, thereby conserving IP resources

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the network access function into multiple components: the physical network card interface, the virtual bridge interface, and the virtual switch. By dividing the access path into these segments, each component can perform its specific function without requiring additional IP resources, as the virtual bridge interface handles the address translation and routing

Inventive Principle:
Principle #1Segmentation

2Ease of operation

If an independent virtual IP is set in a physical network card as an entrance of DNAT and a virtual switch is used for accessing virtual machine, then virtual machine access is enabled, but access cost increases

Engineering Contradiction:
Improvevirtual machine accessVSAvoidaccess cost
Core Design Contradiction:
Ease of operationVSEase of manufacture

Solution Approach 1:

The virtual bridge interface serves as a cost-effective intermediary that eliminates the need for expensive independent virtual IP configurations in physical network cards. By using the virtual bridge interface for address translation and request routing, the system reduces access costs while maintaining virtual machine accessibility

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The virtual bridge interface performs multiple functions including receiving access requests, translating destination addresses, and forwarding requests to the virtual switch. This multi-functionality eliminates the need for separate components, thereby reducing overall access costs while enabling virtual machine access

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Device complexity

If direct IP connection through physical network interface and virtual switch is used, then virtual machine access is straightforward, but IP resource consumption increases

Engineering Contradiction:
Improveaccess pathVSAvoidIP resources
Core Design Contradiction:
Device complexityVSQuantity of substance

Solution Approach 1:

The virtual bridge interface is introduced as a mediator in the access path between the physical network interface and the virtual switch. This intermediary component enables straightforward access by handling address translation and request routing without requiring additional IP resources, thus maintaining simplicity while conserving IP addresses

Inventive Principle:
Principle #24Intermediary (Mediator)

4Quantity of substance

If address translation through virtual bridge interface and virtual switch is implemented, then IP resource usage is reduced, but access process complexity increases

Engineering Contradiction:
ImproveIP resourcesVSAvoidaddress translation process
Core Design Contradiction:
Quantity of substanceVSDevice complexity

Solution Approach 1:

The virtual bridge interface acts as an intelligent intermediary that automates the address translation process. It receives requests with destination address information, translates the addresses according to configured rules, and forwards the translated requests to the virtual switch. This automation reduces manual configuration complexity while effectively reducing IP resource usage

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12598096B2Method and apparatus for accessing virtual machine, device and storage medium
Publication Date: 2026.04.07 GUANGZHOU DULING TECH CO LTD
  • US12598096B2 patent drawing
  • US12598096B2 patent drawing
  • US12598096B2 patent drawing

AI summary

The present disclosure provides a method for accessing a virtual machine: applying to a server, the server is deployed with a virtual switch, at least one virtual machine, a physical network interface card interface and a virtual bridge interface, receiving an initial access request through the virtual bridge interface; the initial access request includes first destination address information; translating the first destination address information to second destination address information to obtain a processed access request based on the virtual bridge interface; sending the processed access request to a port of a virtual switch according to the second destination address information based on the virtual bridge interface; translating the second destination address information to third destination address information to obtain a final access request based on the virtual switch; accessing the virtual machine indicated by the initial access request based on the third destination address information in the final access request.