Virtual Switch Logical Port Encapsulation for SDN Forwarding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual switch technologies face challenges in efficiently managing packet forwarding in software-defined networks (SDNs) due to difficulties in translating logical identifiers for virtual machines into IP and MAC addresses for implementing forwarding rules.
Innovation Solution
The method involves maintaining a data plane forwarding configuration based on forwarding rules and logical port status information for virtual machines in a virtual computing environment. This configuration allows for packet enforcement using logical ports, where the source logical port is identified and encapsulated in a communication protocol header for tunneling, enabling forwarding actions to be determined based on logical ports at the destination host.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If virtual switches use traditional IP and MAC address translation for packet forwarding, then forwarding rules can be implemented, but the complexity of address translation and mapping increases system complexity and reduces forwarding efficiency
Solution Approach 1:
The patent extracts the address translation function from the packet forwarding path by introducing a separate control plane component (virtual switch controller) that maintains the mapping between logical identifiers and physical addresses. This allows the data plane virtual switch to forward packets based on logical identifiers without performing complex address translations, thereby improving forwarding efficiency while reducing forwarding device complexity.
Solution Approach 2:
The patent introduces logical identifiers as an intermediary between virtual machines and the physical network infrastructure. These logical identifiers simplify the forwarding process by providing a direct mapping that eliminates the need for complex IP and MAC address translations at the virtual switch level, thus resolving the contradiction between forwarding efficiency and system complexity.
2Reliability
If virtual switches enforce forwarding rules at the data plane level, then packet security and control are improved, but the flexibility to update forwarding rules is reduced
Solution Approach 1:
The patent segments the virtual switch functionality into two independent planes: the control plane (virtual switch controller) that handles forwarding rule management and the data plane (virtual switch) that enforces forwarding rules. This segmentation allows forwarding rules to be updated dynamically at the control plane without affecting the real-time packet forwarding performance at the data plane, thus resolving the contradiction between control reliability and rule flexibility.
Solution Approach 2:
The control plane performs preliminary actions by pre-computing and distributing forwarding rules to data plane virtual switches before packet forwarding begins. This allows the data plane to enforce rules efficiently with minimal processing overhead, while the control plane retains full flexibility to update rules as network conditions change.
Data Source
AI summary
Described herein are systems, methods, and software to enhance network traffic management. In one implementation, a first host identifies a packet to be transferred from a first virtual machine on the first host to a second virtual machine on a second host. In response to identifying the packet, the first host identifies a source logical port for the first virtual machine, and transferring a communication to the second host, wherein the communication encapsulates the data packet and the source logical port. Once the packet is received by the second host, the second host may use the source logical port to determine a forwarding action for the packet.