VXLAN Gateway for Physical Host Virtual Machine Integration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional layer-2 network architectures are rigid and cannot easily accommodate a mixture of physical hosts and virtual machines in the same logical layer-2 broadcast domain, as there is no mechanism for physical hosts to encapsulate Ethernet packets with VXLAN headers, preventing them from communicating with VXLAN-capable virtual machines.

Innovation Solution

A VXLAN gateway is introduced to perform VXLAN encapsulation and decapsulation on behalf of physical hosts, allowing Ethernet packets to be transported across IP networks and enabling communication between physical hosts and virtual machines by mapping VXLAN network identifiers to IP multicast groups and maintaining data structures for MAC addresses and VLAN tags.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a conventional layer-2 network architecture is used, then physical hosts can communicate within the same broadcast domain, but they cannot communicate with VXLAN-capable virtual machines in remote broadcast domains

Engineering Contradiction:
Improvecommunication capabilityVSAvoidnetwork architecture complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a VXLAN gateway as an intermediary device that physical hosts use to communicate with VXLAN-capable virtual machines. The gateway performs VXLAN encapsulation and decapsulation, enabling physical hosts to send packets to remote virtual machines without requiring the hosts themselves to understand VXLAN protocols. This mediator resolves the contradiction by adding communication capability while managing complexity centrally rather than distributing it to all hosts.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the network functionality by separating VXLAN encapsulation/decapsulation operations from physical hosts and concentrating them in dedicated VXLAN gateways. This segmentation allows physical hosts to remain simple layer-2 devices while the gateway handles the complex VXLAN protocol operations, enabling communication with virtual machines without increasing host complexity.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If VXLAN encapsulation is implemented only in hypervisors, then virtual machines can communicate across data centers, but physical hosts cannot participate in the same logical layer-2 broadcast domain

Engineering Contradiction:
Improvebroadcast domain inclusivityVSAvoidhost system complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The VXLAN gateway provides universal functionality by serving both virtual machines (through integration with hypervisors) and physical hosts (through standalone operation). It acts as a multi-functional device that can encapsulate packets from virtual machines and also encapsulate packets from physical hosts, allowing both types of devices to participate in the same logical layer-2 broadcast domain without requiring each to implement full VXLAN capability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The gateway serves as an intermediary that enables physical hosts to join VXLAN broadcast domains without requiring the hosts to implement VXLAN encapsulation themselves. The gateway mediates between the simple physical hosts and the complex VXLAN protocol requirements, allowing hosts to participate in remote broadcast domains while maintaining their simplicity.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If layer-3 networking is used to connect different data centers, then communication between remote virtual machines is enabled, but flat layer-2 processing advantages are lost

Engineering Contradiction:
Improveremote communication capabilityVSAvoidnetwork processing efficiency
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent implements VXLAN by nesting a layer-2 Ethernet frame inside a layer-3 IP packet, which is then transmitted over the network. This nested structure allows layer-2 processing to occur at the source and destination (maintaining flat layer-2 processing advantages where applicable) while using layer-3 routing for actual network transport. The encapsulation enables remote communication while preserving layer-2 processing efficiency at the edges of the network.

Inventive Principle:
Principle #7Nested doll (Nesting)

Solution Approach 2:

The patent adds a new dimension to network communication by creating an overlay network that operates above the existing layer-3 infrastructure. Instead of replacing layer-3 routing with pure layer-2 switching, it superimposes a virtual layer-2 network on top of layer-3, allowing simultaneous use of both paradigms: layer-3 for transport and layer-2 for logical network organization and processing.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS11765000B2Method and system for virtual and physical network integration
Publication Date: 2023.09.19 VMWARE INC
  • US11765000B2 patent drawing
  • US11765000B2 patent drawing
  • US11765000B2 patent drawing

AI summary

The disclosure herein describes a virtual extensible local area network (VXLAN) gateway. During operation, the VXLAN gateway receives, from a physical host, an Ethernet packet destined for a virtual machine residing in a remote layer-2 network broadcast domain that is different from a local layer-2 network broadcast domain where the physical host resides. The VXLAN gateway then determines a VXLAN identifier for the received Ethernet packet. The VXLAN gateway further encapsulates the Ethernet packet with the virtual extensible local area network identifier and an Internet Protocol (IP) header, and forwards the encapsulated packet to an IP network, thereby allowing the packet to be transported to the virtual machine via the IP network and allowing the remote layer-2 network broadcast domain and the local layer-2 network broadcast domain to be part of a common layer-2 broadcast domain.