Virtual Switch Tunnel Header for Overlay Network Load Balancing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In overlay networks, existing methods fail to achieve effective load balancing due to encapsulated packet headers lacking information about virtual machine identification, resulting in all traffic from a source device to a destination device being routed through the same path, especially in virtualization environments where source and destination virtual machine information is hidden.
Innovation Solution
A virtual switch is implemented at a network device to encapsulate data packets with a tunnel header containing a first portion associated with the network devices and a second portion associated with the virtual resources, allowing the Internet Protocol network to load balance data packets based on the virtual resource data flow.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encapsulated packet headers include only source and destination device information, then the overlay network tunneling function is achieved, but load balancing capability deteriorates
Solution Approach 1:
The tunnel header is segmented into two distinct portions: a first portion containing source and destination device information for overlay network routing, and a second portion containing source and destination virtual machine information for load balancing decisions. This segmentation allows both tunneling functionality and load balancing capability to operate simultaneously without interference.
2Adaptability or versatility
If virtual machine identification information is hidden in virtualization environments, then security and abstraction are improved, but load balancing based on virtual machine identity becomes impossible
Solution Approach 1:
The virtual switch performs preliminary action by inserting the second portion of the tunnel header containing virtual machine identification information before the packet enters the overlay network. This allows load balancing devices to utilize virtual machine identity for routing decisions while the virtualization abstraction remains intact, as the VM information is embedded in the tunnel header rather than exposed in the original packet.
Data Source
AI summary
An apparatus includes a virtual switch hosted at a first network device. The virtual switch is configured to receive a data packet from a first virtual resource hosted at the first network device to be sent to a second virtual resource hosted at a second network device. The virtual switch is configured to encapsulate the data packet to define an encapsulated data packet using a tunnel header, which has a first portion associated with the first and second network devices, and a second portion associated with a data flow between the first and second virtual resources when the data packet is sent from the first network device to the second network device. An Internet Protocol network can use the second portion of the tunnel header to load balance the data packet with respect to other data packets sent from the first network device to the second network device.