VM Migration DHCP Binding Update for Switch Port Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

After virtual machine migration, the binding relationship between the virtual machine's IP and MAC addresses and the switch is not updated, leading to invalid message processing and network access issues, as the switch discards messages from the migrated virtual machine.

Innovation Solution

Constructing and sending a Dynamic Host Configuration Protocol (DHCP) request message with the virtual machine's updated address information to the switch, establishing a new binding relationship between the IP and MAC addresses and the accessed port, ensuring valid message processing post-migration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a binding relationship between IP address and MAC address is stored in the switch to ensure network security, then network security is improved, but after virtual machine migration the switch discards messages from the migrated virtual machine causing network access failure

Engineering Contradiction:
Improvenetwork securityVSAvoidnetwork access after migration
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent applies dynamics by making the binding relationship updateable and dynamic rather than static. When a virtual machine migrates, the switch receives a DHCP request message containing the updated MAC address and port information, automatically updates the binding relationship in its memory, and continues to forward messages correctly. This dynamic update mechanism allows the system to maintain security while adapting to migration events.

Inventive Principle:
Principle #15Dynamics

2Device complexity

If the switch maintains a static binding relationship to simplify network management, then device complexity is reduced, but it cannot handle virtual machine migration scenarios

Engineering Contradiction:
Improveswitch configuration complexityVSAvoidmigration support capability
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The patent applies self-service by enabling the switch to automatically update its own binding relationship without external intervention. When the switch receives a DHCP request message from a migrated virtual machine, it extracts the MAC address and port information, automatically updates the binding relationship in its memory, and resumes normal message forwarding. This self-updating mechanism reduces the need for manual configuration while maintaining adaptability to migration events.

Inventive Principle:
Principle #25Self-service

3Adaptability or versatility

If the switch updates the binding relationship after virtual machine migration, then network access is restored, but additional message processing steps are required

Engineering Contradiction:
Improvepost-migration network accessVSAvoidmessage processing complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent applies universality by making the DHCP request message serve multiple functions: it acts as both a standard address configuration message and a migration notification message. The switch processes this single message type to achieve both address assignment and binding relationship updates, eliminating the need for separate migration notification protocols and reducing overall processing complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9479611B2Method, device, and system for implementing communication after virtual machine migration
Publication Date: 2016.10.25 HUAWEI TECH CO LTD
  • US9479611B2 patent drawing
  • US9479611B2 patent drawing
  • US9479611B2 patent drawing

AI summary

The present disclosure provides a method, a device, and a system for implementing communication after virtual machine migration. The method includes: constructing, after migration of a virtual machine, a dynamic host configuration protocol request message carrying address information of the virtual machine after the migration; and sending the dynamic host configuration protocol request message to a switch, so that the switch establishes a binding relationship between the address information of the virtual machine after the migration and a port accessed by the virtual machine.