Virtual Switch Dynamic Queue Allocation for Tenant Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current virtual machine queue technologies, such as VMQ and DVMQ, face limitations in providing good Quality of Service (QOS) due to static allocation of processors, which can lead to inefficient processing of bursty network traffic and reordering of data, especially when traffic classification is based solely on Layer 2 (L2) MAC addresses, affecting different tenants in a virtualized environment.
Innovation Solution
An apparatus and method for virtual switching that classifies traffic based on Layer 3 or above, using a mapper to store data flows and pointers in queues, with a flow table to manage queue allocation dynamically, ensuring that bursty traffic from one tenant does not affect other tenants and maintaining data order, by dynamically assigning virtual switches and processors based on traffic thresholds and mapping modes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If virtual machine queues are allocated statically, then the system structure is simple, but bursty network traffic cannot be processed efficiently and processors are wasted when traffic is low
Solution Approach 1:
The patent implements dynamic virtual machine queue allocation where processors are assigned to queues based on actual network traffic conditions rather than fixed static allocation. The system monitors traffic patterns and dynamically adjusts processor-queue mappings to match actual demand, resolving the contradiction between processing efficiency and allocation simplicity.
2Adaptability or versatility
If processors are dynamically allocated based on L2 queue assignment, then processor utilization improves, but traffic classification is limited to L2 and tenant isolation is insufficient
Solution Approach 1:
The patent extends traffic classification from Layer 2 (MAC address) to Layer 3 and above (IP address, protocol, port numbers). This dimensional expansion enables more granular traffic differentiation and improves tenant isolation by classifying traffic based on higher-layer characteristics that provide better tenant boundary definition and isolation.
3Reliability
If multiple processors share L2 queues, then processor utilization increases, but data reordering occurs and QOS cannot be guaranteed
Solution Approach 1:
The patent segments the processing queue into multiple sub-queues at the processor level, where each processor handles specific sub-queues assigned to particular virtual machines. This segmentation prevents data reordering by ensuring that packets for the same virtual machine are processed by the same processor, while still allowing multiple processors to work on different virtual machines simultaneously.
4Object-affected harmful factors
If L2-based queue assignment is used, then the mapping is simple, but bursty traffic from one tenant affects other tenants
Solution Approach 1:
The patent changes the classification parameters from L2 MAC addresses to L3 and higher layer parameters (IP addresses, protocols, port numbers). This parameter change enables better tenant isolation by using more distinctive identifiers that provide clearer tenant boundaries, preventing bursty traffic from one tenant from interfering with others while maintaining manageable complexity through standardized classification protocols.
Data Source
AI summary
An apparatus for virtual switching includes a queue memory configured to store at least one queue; a data memory configured to store data; a mapper configured to classify the data into flows and store a point of the data in a queue mapped with the flows; a plurality of virtual machines configured to perform a process based on the data; and a virtual switch configured to extract the data from the data memory by referring to the point stored in the queue and transfer the data to the virtual machine, wherein the virtual switch transfers the data corresponding to a single queue to a single virtual machine.