Virtual Switch Emulation for VXLAN Spine Identification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cloud services using VXLAN and ECMP, identifying the next hop spine switch for investigating network failures is challenging when the hash table of leaf switches is not publicly accessible, leading to difficulties in tracing the path of VXLAN packets and determining the failure site within the network.
Innovation Solution
A switch identification method involving a computer that sends a first packet to a virtual switch, identifies the allocation destination, and refers to a storage unit with switch correspondence information to determine the allocation destination of a second packet, allowing for the identification of physical spine switches through an emulation environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the hash table of leaf switches is kept private for security reasons, then switch security is improved, but the ability to identify next hop spine switches for failure investigation deteriorates
Solution Approach 1:
The patent creates a virtual copy of the physical network topology using virtual switches that replicate the forwarding behavior of physical leaf switches. This virtual model allows investigators to trace packet paths and identify spine switches without accessing the actual hash tables of physical switches, thus maintaining security while enabling failure investigation.
Solution Approach 2:
The virtual switch acts as an intermediary between the investigator and the physical network. By sending probe packets through the virtual switch model, the system can determine next hop spine switches without directly accessing private hash table data, serving as a secure mediator that provides necessary information without exposing sensitive internal structures.
2Difficulty of detecting and measuring
If packet capture devices are deployed extensively to trace VXLAN packet paths, then failure identification capability is improved, but device complexity and cost increase
Solution Approach 1:
Instead of deploying multiple physical packet capture devices throughout the network, the patent creates a virtual copy of the network topology in software. This virtual model replicates the forwarding decisions of physical switches, allowing path tracing to be performed computationally rather than through extensive physical instrumentation.
Solution Approach 2:
The patent replaces the mechanical approach of deploying physical packet capture devices with a software-based virtual switching model. The virtual switch uses computational methods to simulate packet forwarding and identify paths, substituting physical measurement infrastructure with information processing.
3Ease of operation
If the network topology is simplified to reduce complexity, then ease of operation is improved, but the ability to handle large-scale virtual machines with 24-bit VXLAN IDs deteriorates
Solution Approach 1:
The patent introduces a virtual dimension overlaying the physical network. The virtual switch model operates in this additional logical layer, allowing complex 24-bit VXLAN network topologies to be managed through simplified virtual representations. This dimensional overlay enables large-scale network support while maintaining operational simplicity through the abstracted virtual model.
Data Source
AI summary
A switch identification method in by a computer includes sending a first packet to a first virtual switch emulating a first physical switch, and identifying a second virtual switch that is an allocation destination to which the first virtual switch allocates the first packet, and referring, to a storage unit that stores a switch correspondence information that associates a second physical switch that is an allocation destination of the first physical switch with the second virtual switch, and identifying the second physical switch that is the allocation destination to which the first physical switch allocates a second packet emulated by the first packet.