VM Network Policy Binding via UUID Feedback

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Virtual machines (VMs) often experience configuration changes or migration, leading to failures in applying appropriate network policies by network devices.

Innovation Solution

A method and system for maintaining persistent network policies for virtual machines by determining the VM's name and UUID, binding the name to a network policy, acquiring and associating the UUID with the policy, applying the policy, and updating it upon configuration changes or migration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If network devices configure policies based on virtual machine names, then network policies can be applied to virtual machines, but configuration changes or migration of virtual machines lead to policy application failures

Engineering Contradiction:
Improvenetwork policy adaptabilityVSAvoidpolicy application reliability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system establishes a feedback mechanism where the network device subscribes to configuration change notifications from the virtual machine management software. When configuration changes or migrations occur, the network device receives real-time notifications and automatically updates the bound virtual machine name in the network policy, ensuring continuous reliable policy application despite dynamic changes

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system performs preliminary binding of the virtual machine name to the network policy before configuration changes occur. By pre-establishing this binding relationship and setting up subscription mechanisms in advance, the system ensures that when changes happen, the network device can immediately respond and update the policy without interruption or failure

Inventive Principle:
Principle #10Preliminary action

2Productivity

If virtual machines migrate between computing devices, then resource utilization improves, but network policy application fails due to different network devices

Engineering Contradiction:
Improveresource utilizationVSAvoidnetwork policy consistency
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system creates a universal binding relationship between the virtual machine name and network policy that transcends specific computing devices or network devices. The policy binding is not tied to a particular host or network device but follows the virtual machine across migrations, enabling the same network policy to be universally applied regardless of where the virtual machine is running

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

Through the subscription mechanism to configuration change notifications, the system receives real-time feedback when virtual machines migrate between computing devices. This feedback enables the network device to automatically update the bound virtual machine name and maintain consistent policy application across different network devices, ensuring policy reliability during migration scenarios

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS20250168066A1Method and system for virtual machine aware policy management
Publication Date: 2025.05.22 ARISTA NETWORKS INC
  • US20250168066A1 patent drawing
  • US20250168066A1 patent drawing
  • US20250168066A1 patent drawing

AI summary

A method and system for maintaining persistent network policies for a virtual machine (VM) that includes determining a name of the VM executing on a first host connected to a first network device; binding the name of the VM to a network policy for the VM on the first network device; acquiring from VM management software, using the name of the VM, a universally unique identifier (UUID) of the VM; associating the UUID to the network policy on the first network device; applying the network policy for the VM on the first network device; subscribing to receive notifications from the VM management software of changes to the configuration of the VM corresponding to the UUID; receiving notification from the VM management software of a configuration change made to the VM corresponding to the UUID; and updating the network policy of the VM to reflect the configuration change of the VM.