Virtual Service Domains for Network Traffic Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The complexity of configuring and debugging systems with multiple virtual switches in virtualized servers leads to increased resource requirements and scalability issues, particularly in managing network traffic and services within computer networks.
Innovation Solution
Assigning layer-2 ports to virtual service domains (VSDs) and using a virtual Ethernet module (VEM) to direct traffic through virtual service engines (VSEs) in a specified order, eliminating the need for numerous virtual switches and simplifying configuration and resource management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple virtual switches are used to redirect traffic flow towards virtual machines, then traffic management capability is improved, but system complexity and resource requirements increase
Solution Approach 1:
The patent merges multiple virtual switch functions into a single virtual switch, consolidating traffic management capabilities. Instead of deploying multiple separate virtual switches to handle different traffic flows, the invention combines their functionalities into one unified virtual switch that can redirect various traffic flows to appropriate virtual machines, thereby reducing system complexity while maintaining adaptability.
Solution Approach 2:
The virtual switch is designed with multi-functional capabilities to handle diverse traffic management tasks. It can redirect different types of traffic flows to multiple virtual machines simultaneously, providing universal traffic management functionality that replaces what would otherwise require multiple specialized virtual switches, thus improving adaptability without proportionally increasing complexity.
2Adaptability or versatility
If multiple virtual switches are deployed within a network device, then traffic redirection capability is improved, but internal resource requirements such as memory increase
Solution Approach 1:
The patent combines the forwarding tables and memory resources of multiple virtual switches into a single shared memory structure. By merging the operational data structures of multiple virtual switches into one, the system maintains the capability to redirect traffic to multiple virtual machines while avoiding the redundant memory allocation that would occur with separate virtual switch instances, thus reducing overall memory requirements.
Solution Approach 2:
The single virtual switch is equipped with universal forwarding capabilities that allow it to manage traffic redirection to multiple virtual machines using shared memory resources. The virtual switch can dynamically route different traffic flows to appropriate destinations using a common set of memory structures, eliminating the need for duplicate forwarding tables and reducing total memory consumption while maintaining full traffic redirection capability.
3Productivity
If a complex system of virtual switches is used, then traffic flow management is improved, but configuration and debugging difficulty increase
Solution Approach 1:
The patent merges multiple virtual switch configurations into a single unified configuration interface. Instead of requiring administrators to configure and debug multiple separate virtual switches, the invention provides a single configuration paradigm that manages all traffic flow redirection rules, making the system easier to operate and maintain while preserving efficient traffic flow management capabilities.
Solution Approach 2:
The virtual switch implements a universal configuration interface that handles diverse traffic management scenarios through a single set of configuration parameters. This multi-functional approach allows the system to manage complex traffic flows to multiple virtual machines while presenting a simplified configuration and debugging experience, as administrators deal with one unified system rather than multiple separate components.
Data Source
AI summary
In one embodiment, ports of a network device are assigned to virtual service domains (VSDs). The ports are coupled to a virtual Ethernet module (VEM) of the network device. Each VSD is associated with one or more virtual service engines (VSEs) in a particular order. Each VSE is configured to apply a particular service to traffic traversing the VSE. Traffic received at a virtual Ethernet module (VEM) of the network device that is destined for a particular VSD, and is received on a port that has not been assigned to the particular VSD, is forwarded to the particular VSD via the one or more VSEs associated with the particular VSD such that the traffic traverses the one or more VSEs in the particular order.