Virtual IP Switching via VXLAN Encapsulation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In the context of high-availability virtual IP (HaVip) migration to an Overlay network, existing technologies face challenges in quickly synchronizing the forwarding entry after an ARP switch, leading to long switching times due to the need for north/southbound interface invocation.

Innovation Solution

A method and apparatus for switching a virtual IP that involves receiving a free ARP packet, generating a forwarding table, encapsulating it in a UDP packet using VXLAN, and synchronizing it to another virtual router, enabling millisecond-level switching speed by bypassing the need for north/southbound interface invocation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the north/southbound interface channel is invoked during active/standby switching, then the switching process is completed with proper protocol handling, but the switching time becomes long

Engineering Contradiction:
Improveswitching process completenessVSAvoidswitching time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent extracts the essential switching information (ARP packet and forwarding table) from the complex north/southbound interface protocol sequence, and synchronizes only this critical data directly between virtual routers via VXLAN, eliminating the time-consuming intermediate protocol steps while preserving the essential switching function

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent performs preliminary action by pre-generating and caching the forwarding table before switching is needed, and by pre-establishing the VXLAN synchronization channel between virtual routers, so that when switching is required, the data is already prepared and can be synchronized immediately without protocol overhead

Inventive Principle:
Principle #10Preliminary action

2Reliability

If the forwarding entry synchronization is performed through traditional interfaces, then the switching is completed with proper protocol handling, but the synchronization speed is slow

Engineering Contradiction:
Improveprotocol handling correctnessVSAvoidsynchronization speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The patent replaces the mechanical protocol-handling system (north/southbound interface invocations with multiple message exchanges) with a streamlined data synchronization mechanism using VXLAN encapsulation, where the forwarding table is packaged in a single UDP packet and transmitted directly, achieving both speed and reliability

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Speed

If ARP packets are released quickly after switching, then the forwarding entry is updated rapidly, but ARP attacks may occur due to uncontrolled packet release

Engineering Contradiction:
Improveforwarding entry update speedVSAvoidARP attack vulnerability
Core Design Contradiction:
SpeedVSObject-affected harmful factors

Solution Approach 1:

The patent implements feedback control by monitoring the release of ARP packets and adjusting the synchronization rate accordingly. The system detects when switching occurs and triggers controlled ARP packet release, ensuring rapid updates while preventing the uncontrolled flooding that characterizes ARP attacks, thus achieving both speed and security

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11831598B2Method, apparatus and system for switching virtual IP
Publication Date: 2023.11.28 BEIJING BAIDU NETCOM SCI & TECH CO LTD
  • US11831598B2 patent drawing
  • US11831598B2 patent drawing
  • US11831598B2 patent drawing

AI summary

The present disclosure provides a method, apparatus and system for switching a virtual IP, relates to the field of artificial intelligence and particularly to cloud computing and cloud network technologies, and can be applied to intelligent cloud scenarios. A detailed implementation comprises: receiving a free ARP packet sent by a virtual machine to which a high-availability virtual IP is successfully switched; generating a first forwarding table of the high-availability virtual IP according to the free ARP packet; encapsulating the first forwarding table in a first UDP packet by VXLAN; and synchronizing the first UDP packet to another virtual router.