VXLAN Multicast Routing via Virtual Switch Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enabling multicast in virtualized environments introduces configuration complexities and security vulnerabilities, particularly with IGMP snooping and PIM configuration, which can lead to network partition issues and maintenance challenges.
Innovation Solution
A method for multicasting data between hypervisor networking interfaces in a distributed computer system using a Virtual Extensible LAN Network Identifier (VNI) and VXLAN Tunnel End Point (VTEP) associations, allowing data to be routed efficiently through VTEPs associated with the VNI, thereby simplifying multicast group management and reducing configuration overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IGMP snooping and PIM configuration are implemented on physical switches and routers, then multicast functionality is enabled in virtualized environments, but configuration complexity and security vulnerabilities increase
Solution Approach 1:
The patent introduces a virtual switch as an intermediary layer between virtual machines and physical network infrastructure. The virtual switch handles IGMP snooping and PIM configurations internally, shielding customers from direct exposure to complex physical switch configurations. This intermediary approach enables multicast functionality while abstracting away configuration complexity and security management from end users.
Solution Approach 2:
The virtualization platform automatically manages multicast group memberships, IGMP memberships, and PIM routing configurations without requiring manual customer intervention. The system self-configures the necessary network parameters and maintains multicast functionality dynamically as virtual machines are created, migrated, or destroyed, eliminating the need for customers to perform complex configuration tasks.
2Reliability
If IGMP snooping is configured on physical switches, then multicast traffic is controlled, but maintenance complexity increases due to network partition cases
Solution Approach 1:
The virtual switch serves as an intermediary that absorbs and manages IGMP snooping complexity internally. When network partitions or topology changes occur, the virtual switch automatically adjusts multicast traffic control without requiring manual reconfiguration or customer intervention, thereby reducing maintenance complexity while maintaining reliable multicast traffic control.
3Adaptability or versatility
If PIM configuration is implemented, then multicast routing across routers is enabled, but security vulnerabilities are introduced
Solution Approach 1:
The virtual switch acts as a secure intermediary that implements PIM routing capabilities internally while exposing a simplified, secure interface to customers. The virtual switch manages PIM configuration security centrally, preventing direct customer access to vulnerable PIM settings while maintaining multicast routing functionality across the network.
4Productivity
If multiple copies of packets are transferred over physical network, then each receiving virtual machine gets data, but network bandwidth is consumed inefficiently
Solution Approach 1:
The patent merges multiple packet copy operations into a single physical network transmission by implementing multicast at the virtual switch layer. Instead of sending separate unicast copies to each virtual machine, the system combines traffic flows and transmits a single multicast stream over the physical network, which is then distributed to multiple virtual machines efficiently, reducing network bandwidth consumption while maintaining productivity.
Data Source
AI summary
A host computer and method for multicasting data between networking interfaces of hypervisors in a distributed computer system uses a Virtual Extensible LAN Network Identifier (VNI) assigned to a multicast group and an identifier of a VXLAN Tunnel End Point (VTEP) of the host computer associated to the VNI so that data being multicast for the multicast group can be routed to the networking interfaces via VTEPs associated with the VNI.