Virtual Port Tagging for Edge Switch Traffic Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual machine communication systems face challenges in efficiently managing and routing traffic between virtual machines and external network entities, leading to complexities in network management and security policy application.
Innovation Solution
The implementation of virtual port communications, where a data frame is modified by inserting a virtual machine tag containing a virtual port identifier, allowing edge switches to route traffic effectively between virtual machines and network entities, eliminating the need for virtualized switching and enabling consistent network and security policy application.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If virtual machine communication systems use traditional virtualized switching, then traffic routing between virtual machines and external network entities is achieved, but network management complexity increases and maintenance costs increase
Solution Approach 1:
The patent extracts the virtual machine identification function from the virtualized switching layer and places it directly at the edge switch. By inserting VM tags into data frames and having edge switches recognize these tags natively, the system removes the need for complex virtualized switching infrastructure while maintaining traffic routing capabilities.
Solution Approach 2:
The VM tag acts as an intermediary element that bridges virtual machine identification and edge switch routing. The tag contains VM identifiers that enable edge switches to perform virtual machine-aware routing without requiring full virtualized switching, thereby simplifying the overall system architecture.
2Productivity
If virtual machine tags are inserted into data frames for edge switch routing, then traffic routing efficiency improves and virtualized switching is eliminated, but data frame structure complexity increases
Solution Approach 1:
The VM tag is nested within the existing data frame structure as a supplementary field. This nesting approach allows the data frame to carry both traditional networking information and VM-specific identification without fundamentally altering the core frame structure, thereby minimizing complexity increases while enabling efficient routing.
3Reliability
If edge switches are brought awareness of virtual machine infrastructure, then consistent network and security policy application is achieved, but switch complexity and configuration difficulty increase
Solution Approach 1:
The patent changes the parameter being recognized by edge switches from traditional MAC addresses alone to include VM tags with VM identifiers. This parameter change enables switches to apply network and security policies consistently based on VM identity while using standardized tagging mechanisms that do not require complex custom configurations.
Data Source
AI summary
A method and system may provide virtual port communications. A data frame, containing a destination identifier in a destination field and payload, may be modified by inserting a first virtual machine tag therein. The first virtual machine tag may include a first virtual port identifier for identifying a first logical interface of a first virtual machine on a virtual machine host