Dynamically Extensible Virtual Switch for Runtime Network Reconfiguration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual network systems are limited in their ability to dynamically reconfigure virtual networks at runtime without restarting virtual machines (VMs) or virtual machine monitors (VMMs), and they lack flexibility in managing the number of VMs per virtual network, which can lead to integrity issues due to MAC address spoofing by malicious software.
Innovation Solution
A dynamically extensible virtual switch that allows for the creation, deletion, and reconfiguration of virtual networks without restarting VMs or VMMs, with no fixed limits on the number of VMs per network, and uses unique VNIC IDs to prevent MAC address spoofing, ensuring network integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If virtual networks are reconfigured at runtime by moving VMs between networks, then network reconfiguration capability is improved, but system availability deteriorates due to required restarts of VMs and VMM
Solution Approach 1:
The patent segments the virtual network configuration into two independent parts: the VMM layer that manages VMs, and the virtual switch layer that manages network connectivity. By allowing the virtual switch to be reconfigured independently without affecting the VMM or VMs, the system enables network reconfiguration without requiring restarts, thus resolving the contradiction between adaptability and availability
Solution Approach 2:
The virtual switch acts as an intermediary between the physical network infrastructure and the virtual machines. It provides a decoupled architecture where network configuration changes can be made at the switch level without propagating restart requirements to the VMs or VMM, enabling runtime reconfiguration while maintaining system availability
2Ease of operation
If MAC address identification is used for data frame routing, then routing simplicity is improved, but network security deteriorates due to MAC address spoofing by malicious software
Solution Approach 1:
The virtual switch introduces an intermediary identification layer that sits between the physical MAC addresses and the routing logic. By using virtual switch port identifiers (VSI) as the primary identification mechanism and maintaining a mapping layer to physical MAC addresses, the system preserves routing simplicity while preventing MAC address spoofing, as the virtual switch can validate and control the mapping between VSIs and physical addresses
Solution Approach 2:
The patent changes the identification parameter from physical MAC addresses to virtual switch port identifiers (VSI). This parameter change allows the system to maintain routing simplicity through the use of stable VSI identifiers while enhancing security by controlling the mapping between VSIs and physical MAC addresses at the virtual switch layer, preventing malicious software from compromising network integrity through spoofing
3Ease of manufacture
If fixed limits are imposed on the number of VMs per virtual network, then system management simplicity is improved, but system flexibility deteriorates
Solution Approach 1:
The patent implements dynamic resource allocation in the virtual switch that automatically adapts to changing network requirements. The virtual switch uses dynamic data structures and allocation algorithms that can accommodate any number of VMs per virtual network without requiring predefined limits, enabling the system to scale flexibly while maintaining simple management through automated resource tracking and allocation
Data Source
AI summary
An apparatus and method for a dynamically extensible virtual switch. An apparatus or virtual switch includes at least one router and a data structure. The router utilizes the data structure to organize a connection between one or more virtual network interface cards (VNICs) to form a virtual network. The virtual switch also identifies a VNIC node of a data frame by its unique identifier, utilizes the unique identifier to index a collection of elements to retrieve a pointer to a virtual network head, and forwards the data frame to all VNIC nodes in a VNIC node listing associated with the virtual network head except for a VNIC node that relates to the unique identifier.