Virtual VPN Adapter Bridging Host and Guest Network Resources
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Providing network resources, such as VPNs, in a manner expected by program components executing in virtualized environments is difficult, especially when there is no one-to-one mapping between network resources provided by the host and those expected by the guest OS, and the host OS exposes network resources differently than the guest OS.
Innovation Solution
A host VPN adapter is detected, and a virtual network adapter is created in the virtualized environment, with a VPN bridge inserted between the guest VPN adapter and the virtual network adapter to add or remove Ethernet frames from PPP packets, enabling program components to communicate over a VPN without modification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If network resources are provided in a virtualized environment using traditional mapping methods, then the system maintains simplicity in resource allocation, but program components cannot access VPNs in the expected manner when there is no one-to-one mapping between host and guest network resources
Solution Approach 1:
The patent introduces a virtual network adapter as an intermediary component between the host VPN adapter and the guest OS. This virtual adapter acts as a mediator that translates and forwards network traffic, enabling program components in the guest environment to access VPN resources without direct one-to-one mapping. The intermediary handles the complexity of protocol translation and resource mapping transparently.
Solution Approach 2:
The patent creates a virtual copy of the host VPN adapter within the virtualized environment. This virtual network adapter replicates the functionality and interface of the physical VPN adapter, allowing guest OS and its program components to interact with VPN resources through a familiar interface. The copy maintains the essential characteristics of the original while operating within the virtualized context.
2Ease of operation
If the host OS exposes network resources in a different manner than the guest OS, then the host can manage resources efficiently, but program components executing in the virtualized environment cannot access network resources in the expected manner
Solution Approach 1:
The virtual network adapter serves as an intermediary layer that sits between the host OS's network resource exposure mechanism and the guest OS's expected interface. It translates the host's resource exposure method into the guest's expected format, allowing applications to execute with ease while the complexity of resource exposure translation is handled transparently by the virtual adapter.
Solution Approach 2:
The patent segments the network resource exposure function into separate layers: the host OS layer, the virtual network adapter layer, and the guest OS layer. This segmentation allows each layer to operate independently with its own interface characteristics, while the virtual adapter layer handles the translation between different exposure methods, enabling applications to execute without modification.
3Adaptability or versatility
If a one-to-one mapping is enforced between host and guest network resources, then program components can access VPNs in the expected manner, but the system loses flexibility in resource allocation and virtualization efficiency
Solution Approach 1:
Instead of requiring one-to-one physical mapping, the patent creates a virtual copy of the VPN adapter functionality within the guest environment. This copy provides the same interface and access patterns as a physical adapter would, ensuring reliable VPN access functionality while allowing the host to manage physical resources flexibly without being constrained by one-to-one mapping requirements.
Data Source
AI summary
Technologies are disclosed for enabling virtual private network (VPN) support in a virtualized environment. The presence or creation of a host VPN adapter on a host processing system providing a virtualized environment is detected and, in response thereto, a virtual network adapter is created in the virtualized environment. A guest operating system (OS) creates a guest VPN adapter in the virtualized environment. A software component is inserted between the guest VPN adapter and the virtual network adapter. The software component adds Ethernet frames to point-to-point protocol (PPP) packets received from the guest VPN adapter and removes Ethernet frames from packets received from the virtual network adapter.