Virtual Machine Migration Detection via MAC Address Tracking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for determining virtual machine migration in cloud computing environments are costly and require specific communications protocols, such as VEPA, which increases deployment costs and complexity.
Innovation Solution
A method and apparatus that use a client on a host machine to obtain a unique identifier of a virtual machine and its host machine address, sending this information to a server to determine migration by comparing local records, thereby eliminating the need for specific communications protocols and reducing deployment costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If a tailor-made switch supporting VEPA protocol is used to determine virtual machine migration, then migration detection capability is improved, but deployment cost and device complexity increase
Solution Approach 1:
The patent applies universality by making the migration detection mechanism protocol-agnostic and applicable to standard network switches without requiring VEPA protocol support. The solution uses common network traffic interception and MAC address comparison techniques that work with any standard switch, eliminating the need for specialized hardware while maintaining detection capability
Solution Approach 2:
The patent uses copying by creating a virtual copy of the migration detection logic in the form of monitoring software that replicates the functionality previously requiring specialized hardware switches. The system captures and analyzes network packets to reconstruct migration detection capabilities through software-based MAC address tracking, replacing expensive hardware with software processing
2Measurement precision
If traffic of virtual machine is completely imported into a switch for migration determination, then migration detection accuracy is improved, but network performance and energy consumption worsen
Solution Approach 1:
The patent extracts only the essential information needed for migration detection (MAC addresses and IP addresses from network packets) rather than processing complete network traffic. The system intercepts packets at the network layer, extracts relevant identification fields, and uses these for comparison, eliminating the need to import and process entire traffic flows through the switch
Solution Approach 2:
The patent applies partial action by performing migration detection on a sampled basis rather than continuously monitoring all traffic. The system can detect migrations by examining packets from specific sources or at intervals, rather than maintaining constant full-traffic inspection, thereby reducing energy consumption while maintaining detection accuracy
3Device complexity
If virtual machine migration is not detected, then system simplicity is maintained, but network security management capability deteriorates
Solution Approach 1:
The patent implements self-service by having the migration detection system automatically monitor its own environment and trigger security policy updates without external intervention. The monitoring component continuously compares MAC addresses of virtual machines against recorded values, and when a migration is detected, the system automatically notifies the security management module to update policies, maintaining security without adding complex manual procedures
Solution Approach 2:
The patent establishes a feedback loop where migration detection results are continuously fed back to the security management system. When MAC address changes are detected, this information is immediately communicated to update security policies, creating a closed-loop system that maintains security reliability through automatic adaptation to migration events
Data Source
Figure 1~2A
Figure 2B~2C
Figure 2D~3
AI summary
A method for determining virtual machine migration relates to the field of communications and can reduce a deployment cost. The method includes: obtaining, by a client in a host machine, a unique identifier of a virtual machine on the host machine and an address of the host machine; and if the unique identifier of the virtual machine does not exist in a local record of the client, sending, by the client, a packet to a server in a network in which the host machine is located, where the packet carries the unique identifier of the virtual machine and the address of the host machine, so that the server determines, according to the unique identifier of the virtual machine and the address of the host machine, whether the virtual machine is migrated; and adding, by the client, the unique identifier of the virtual machine to the local record to update the local record. The present invention further provides a corresponding apparatus.