Virtualized Network Control Path for Scalable Policy Injection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing networked components are constrained by underlying hardware resources, leading to bottlenecks in communication and scalability issues, especially when trying to accommodate new networking developments or routing specifications.
Innovation Solution
The implementation of a virtualized control path between compute resources and networking components, using data processing units (DPUs) to modify communication parameters independently of the underlying hardware, allowing for programmable and flexible network connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If underlying hardware resources are used for network connections, then communication functionality is provided, but scalability and adaptability are limited by hardware constraints
Solution Approach 1:
A virtualization layer is introduced between the compute resource and the underlying network hardware. This virtualization layer includes a virtual network interface that presents an abstracted network interface to the compute resource, and a hardware abstraction layer that manages the physical network hardware. This intermediary structure allows network connections to be virtualized, enabling flexible programmable policies without direct hardware dependency.
Solution Approach 2:
The network connection system is divided into separate functional components: a virtual network interface layer, a hardware abstraction layer, and underlying physical network hardware. This segmentation allows the virtualization layer to operate independently from hardware constraints, enabling scalable and adaptable network connections while maintaining hardware functionality through abstraction.
2Adaptability or versatility
If hardware resources are upgraded to accommodate new networking developments, then communication capabilities are improved, but cost and compatibility issues arise
Solution Approach 1:
The hardware abstraction layer provides dynamic interface between the virtual network interface and physical hardware. This dynamic abstraction allows the system to adapt to different hardware configurations and networking developments without requiring compute resources to be reconfigured. The virtualization layer can dynamically manage hardware resources, making upgrades more cost-effective and maintaining compatibility.
Solution Approach 2:
The hardware abstraction layer acts as an intermediary that translates between virtual network interface requirements and physical hardware capabilities. This intermediary enables the system to accommodate new networking developments through software updates rather than hardware upgrades, reducing costs and maintaining compatibility with existing workloads.
3Ease of operation
If one-to-one correspondence between resources and links is implemented, then resource allocation is simplified, but scaling becomes difficult from operational and computational perspectives
Solution Approach 1:
The virtual network interface provides a universal interface that can represent multiple physical network links and hardware resources. This multi-functional virtual interface allows a single compute resource to have multiple network connections through one virtual interface, simplifying resource allocation while enabling advanced scaling capabilities through the hardware abstraction layer.
Solution Approach 2:
The virtualization layer adds a dimensional abstraction between the compute resource and physical network hardware. This additional dimension allows the system to scale beyond the one-to-one correspondence limitation by enabling multiple physical links to be managed through a single virtual interface, thus improving both operational simplicity and scaling capability.
Data Source
AI summary
Systems and methods are directed toward virtualizing network connections to transparently apply one or more connection policies responsive to features of a connection request. A network connection between two hosts may be established using a service associated with the respective hosts and connection information may be provided to an underlying hardware resources. When data transmission requests are received, the underlying hardware resource may determine the appropriate connection settings for data transmission without querying additional logs or hardware resources.