Virtualized ADC Hardware Resource Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional virtualization solutions are not optimized to support virtualization of Application Delivery Controllers (ADCs), resulting in limited throughput and high latency when processing data packets, as they are primarily designed for general-purpose computing devices rather than network devices.

Innovation Solution

A virtualized ADC system that includes a hardware infrastructure with multiple core processors and a network interface, allowing for the execution of multiple virtual ADC instances, each utilizing a portion of hardware resources allocated through ADC capacity units, with a management module and traffic distributor for independent execution and traffic distribution across core processors.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If conventional hypervisors are used to virtualize ADC devices, then multiple virtual ADC instances can be consolidated on a single hardware device, but the throughput is limited and latency is high because conventional hypervisors are designed for general-purpose computing rather than network devices

Engineering Contradiction:
ImprovethroughputVSAvoidlatency
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The patent changes the fundamental parameters of virtualization by transitioning from software-based conventional hypervisors to hardware-based virtualization. This involves modifying the execution environment parameters (from software emulation to hardware-assisted virtualization), resource allocation parameters (from shared to dedicated hardware resources), and scheduling parameters (from time-sliced to concurrent execution). These parameter changes enable ADC virtual machines to achieve network-device-level performance with low latency and high throughput while maintaining multiple virtual instances on single hardware.

Inventive Principle:
Principle #35Parameter changes

2Adaptability or versatility

If conventional virtualization solutions are used, then resource consolidation is achieved, but the forwarding capacity and processing speed are insufficient for network device requirements

Engineering Contradiction:
Improveresource consolidationVSAvoidforwarding capacity
Core Design Contradiction:
Adaptability or versatilityVSSpeed

Solution Approach 1:

The patent replaces the software-based virtualization mechanism (conventional hypervisor) with a hardware-based virtualization mechanism. This substitution involves using hardware virtualization features (such as hardware-assisted virtualization instructions, hardware resource isolation mechanisms) to replace the software emulation layer. This mechanics substitution enables the system to maintain resource consolidation benefits while achieving forwarding capacities and processing speeds appropriate for network devices, as hardware-based virtualization eliminates the performance overhead of software interpretation.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Quantity of substance

If multiple virtual ADC instances are run on a single hardware device using conventional methods, then cost and overhead are reduced, but only a small number of virtual machines can be executed due to resource constraints

Engineering Contradiction:
Improvenumber of virtual ADC instancesVSAvoidresource allocation complexity
Core Design Contradiction:
Quantity of substanceVSDevice complexity

Solution Approach 1:

The patent applies segmentation by dividing the hardware resources into distinct, isolated partitions that can be independently allocated to different virtual ADC instances. This involves segmenting CPU resources into dedicated time slots or core assignments, segmenting memory into isolated address spaces, and segmenting I/O resources into dedicated channels. This segmentation enables a larger number of virtual ADC instances to run concurrently on a single hardware device, as each instance receives guaranteed resource allocation without interfering with others, thereby increasing the total number of supported virtual machines while managing resource allocation complexity through structured partitioning.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS9507643B2Techniques for virtualization of application delivery controllers
Publication Date: 2016.11.29 RADWARE LTD
  • US9507643B2 patent drawing
  • US9507643B2 patent drawing
  • US9507643B2 patent drawing

AI summary

A virtualized application delivery controller (ADC) device operable in a communication network comprises a hardware infrastructure including at least a memory, a plurality of core processors, and a network interface; a plurality of instances of virtual ADCs (vADCs), the plurality of vADCs are executed over the hardware infrastructure, each of the plurality of vADCs utilizes a portion of hardware resources of the hardware infrastructure, the portion of hardware resources are determined by at least one ADC capacity unit allocated for each of the plurality of the vADCs; a management module for at least creating the plurality of instances of the vADCs; and a traffic distributor for distributing incoming traffic to one of the plurality of vADCs and scheduling execution of the plurality of vADCs on the plurality of core processors, wherein each of the plurality of vADCs is independently executed on at least one of the plurality of core processors.