Virtual Switch Congestion Control in Virtualized Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current congestion control protocols in virtualized networks face challenges such as unfair resource allocation, slow convergence time, and instability, especially in cloud environments where tenants may misbehave and prevent hypervisors from controlling traffic effectively, leading to performance degradation and bandwidth abuse.
Innovation Solution
Implementing a mechanism where trusted components like the hypervisor and network interface hardware independently enforce congestion control by signaling and charging offenders, improving fairness, convergence time, and stability through congestion-notification messages and rate limitations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If congestion control is implemented using traditional protocols in virtualized networks, then congestion mitigation is achieved, but fairness and stability deteriorate due to tenant misbehavior and inability to enforce control effectively
Solution Approach 1:
The patent introduces an intermediary mechanism where the virtual switch acts as a mediator between tenants and the physical network. The virtual switch monitors traffic from multiple virtual machines, detects congestion conditions, and enforces rate limitations on individual flows. This intermediary position allows the system to maintain congestion control effectiveness while ensuring fairness, as the virtual switch can independently police tenant traffic without requiring tenant cooperation or modification of tenant protocols.
2Productivity
If rate limitation is applied to individual packet flows, then bandwidth abuse is prevented, but network complexity increases due to flow recognition and policy enforcement requirements
Solution Approach 1:
The patent implements a universal congestion control mechanism in the virtual switch that handles multiple functions: flow identification, congestion detection, rate limitation enforcement, and congestion notification. Rather than requiring separate specialized components for each function, the virtual switch integrates all these capabilities into a single multi-functional entity. This approach reduces overall system complexity while maintaining the ability to enforce rate limitations on individual flows, as the virtual switch already exists as a central component in the network architecture.
Data Source
AI summary
In a data network congestion control in a virtualized environment is enforced in packet flows to and from virtual machines in a host. A hypervisor and network interface hardware in the host are trusted components. Enforcement comprises estimating congestion states in the data network attributable to respective packet flows, recognizing a new packet that belongs to one of the data packet flows, and using one or more of the trusted components and to make a determination based on the congestion states that the new packet belongs to a congestion-producing packet flow. A congestion-control policy is applied by one or more of the trusted components to the new packet responsively to the determination.