VXLAN Gateway Port Range Mapping for IP Overlap Resolution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Server virtualization in data center networks leads to restricted virtual network ranges, MAC address table overflow, and limited IDs for traffic partitioning, resulting in overlapping private IP addresses among virtual machines, which causes ambiguity when communicating with external networks.
Innovation Solution
A method is implemented at a network device to translate data packets between Virtual Extensible Local Area Networks (VXLAN) and external networks by assigning unique and non-overlapping port number ranges to each virtual private network, mapping private IP addresses and port numbers to corresponding public addresses and port numbers, ensuring unique public IP and port combinations for each endpoint.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IP address translation is implemented for overlapping private IP addresses in different virtual networks, then packet forwarding accuracy is improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary translation mechanism that acts as a mediator between virtual networks with overlapping IP addresses and the external network. This translation device maps private IP addresses from different virtual networks to unique public IP addresses, ensuring accurate packet forwarding while isolating the complexity of translation from the network endpoints. The intermediary handles the complexity internally through translation tables and mapping rules, presenting a simple interface to both virtual networks and external networks.
2Adaptability or versatility
If multiple virtual private networks use overlapping private IP address ranges, then network resource utilization is improved, but address ambiguity occurs in external communication
Solution Approach 1:
The patent resolves address ambiguity by adding an additional dimension to IP address identification through port number mapping. When private IP addresses from different virtual networks overlap, the system distinguishes them by assigning unique port numbers from different port ranges to each virtual network. This dimensional extension (adding port number as a distinguishing factor) allows overlapping IP addresses to be uniquely identified in external communication without restricting IP address reuse within virtual networks.
3Reliability
If port number ranges are assigned to different virtual private networks, then IP address overlap ambiguity is resolved, but port number management complexity increases
Solution Approach 1:
The patent segments the port number space into distinct, non-overlapping ranges assigned to different virtual private networks. Each virtual network is allocated a specific port range (e.g., first virtual network gets ports 1-65535, second virtual network gets ports 1024-65535, etc.), creating clear boundaries that simplify management. This segmentation approach prevents port number conflicts between virtual networks while maintaining organized, manageable ranges that can be systematically tracked and assigned.
Data Source
AI summary
System and method embodiments are disclosed here to resolve Internet Protocol (IP) address overlap of Virtual eXtensible Local Area Network (VXLAN) endpoints in packets forwarded between the VXLAN and an external or public network. An embodiment method includes assigning different port number ranges to different virtual private networks of the VXLAN, mapping private IP addresses for endpoints at the virtual private networks to corresponding public IP addresses known to a public network, and mapping local ports of the endpoints to corresponding port numbers from the port number ranges assigned to the virtual private networks, wherein each of the endpoints at the virtual private networks is assigned to a unique combination of public IP address and port number. The mapping can be done at a VXLAN gateway or at the endpoints on physical servers of the virtual private networks.