Virtual Network Patch Testing via Cloned VMs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for applying patches to virtualized network functions in a virtual production environment cannot anticipate all possible failures, particularly due to incompleteness of test sets, varying system states, and unpredictability of incoming traffic, which can lead to unexpected results and anomalies.
Innovation Solution
A method involving a network hypervisor that creates a test virtual network with cloned virtual machines having identical system states to production machines, duplicates incoming packets, and applies patches to these clones, allowing for performance indicator comparison to detect any deviations and trigger alerts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional test procedures are used with isolated test environments, then test completeness can be improved, but the ability to anticipate real-world failures deteriorates due to differences in system state and traffic patterns
Solution Approach 1:
The patent creates a copy of the production virtual network environment including cloned virtual machines with identical system states (memory contents, CPU registers, network connections) to serve as a test environment. This copying approach allows testing patches in an environment that precisely mirrors production, enabling accurate failure anticipation while maintaining test completeness.
Solution Approach 2:
The patent performs preliminary testing of patches on cloned virtual machines before applying them to the production environment. By duplicating the entire virtual network state and testing beforehand, the system anticipates potential failures in advance, preventing unreliable patch applications to production systems.
2Productivity
If patches are applied directly to production virtualized network functions, then productivity is improved, but the risk of system failure increases due to unanticipated errors
Solution Approach 1:
The patent implements preliminary testing on cloned virtual machines with identical system states before deploying patches to production. This preliminary action validates patch compatibility and detects potential failures without disrupting production services, enabling fast yet safe patch deployment.
Solution Approach 2:
The patent introduces cloned virtual machines as an intermediary between patch development and production deployment. These clones serve as a buffer environment where patches can be tested with real production traffic patterns and system states, mediating the risk between rapid deployment and system stability.
3Measurement precision
If cloned virtual machines with identical system states are created for testing, then failure anticipation improves, but device complexity increases
Solution Approach 1:
The patent automates the copying process of entire virtual network environments including virtual machines, their system states (memory, CPU registers, network connections), and interconnections. This automated copying reduces the manual complexity of setting up identical test environments while maintaining high test accuracy.
Solution Approach 2:
The patent merges the test environment creation process with the production environment description using the same virtual network description data. By reusing the production virtual network description to create clones, the system reduces management complexity while ensuring test environments accurately reflect production configurations.
Data Source
Figure 1
Figure 2a~3
Figure 4~5
AI summary
The invention concerns a method for applying a patch to a virtualised network function to be updated that is included in a first virtual network, said method comprising: - identifying a set of dependent virtualised network functions included in the first virtual network, said set comprising at least the virtualised network function to be updated; - creating a second virtual network, said second network comprising clones of virtual machines implementing the dependent virtualised network functions of the set, said cloned virtual machines forming clones of the dependent virtualised network functions of the set; - interconnecting, in the second virtual network, clones of the dependent virtualised network functions of the set, said interconnection being identical to an interconnection in the first network of dependent virtualised network functions of the set; - identifying at least one input data packet of a virtualised network function of the set of dependent virtualised network functions, duplicating said packet and sending said duplicated packet to the second network; - applying a patch to the clone of the virtualised network function to be updated in the second network; - collecting and comparing values of at least a first and a second performance indicator, a first indicator measuring a performance value on a monitored virtualised network function of the set of dependent virtualised network functions of the first virtual network and a second indicator measuring the performance value on the clone of the monitored virtualised network function in the second network, an alert being triggered when the values of the first and second indicators differ.