Vmware, Inc.

Amarnath Palavalli

Kumar Gaurav

Ganesan Chandrashekhar

Pavlush Margarian

Josh Dorr

Suresh Babu Muppala

Sachin Mohan Vaidya

Hemanth Kumar Pannem

Dattathreya Sathyamurthy

Rajiv Mordani

Medhavi Dhawan

Akhil Sadashiv Hingane

Piyush Bharat Masrani

Vishal Jain

Alexander Rogozinsky

Pankaj Thakkar

Abhishek Goliya

Rajiv Krishnamurthy

Servesh Pratap Singh

Farzad Ghannadian

Ramsés V Morales

Sai Samrat Karlapudi

Arun Narayanaswamy

Joshua Lee Dorr

Mohammed Muneebuddin

Hamza Aharchaou

Saket Kumar

Bhagyashree Gujar

Ujwala Kawalay

Shashank Pedamallu

Mrityunjoy Saha

Sukhdev Singh

Ankit Shrivastava

T N Ravi Kumar

Mohsin Beg

Manjunath Shankar

Nikhil Dhankani

Some embodiments provide a method for distributing a service rule that is to be enforced across a first set of sites and that is defined by reference to a group identifier that identifies a group of machines. The method distributes the service rule to each site in the first set of sites. The method identifies at least one site in the first set of sites that is not in a second set of sites that has already received a definition of the group. The method distributes the group definition to each identified site in the first set of sites that has not already received the definition of the group.

Multi-site security groups

Some embodiments of the invention provide a method for processing requests for performing operations on resources in a software defined datacenter (SDDC). The resources are software-defined (SD) resources in some embodiments. The method initially receives a request to perform an operation with respect to a first resource in the SDDC. The method identifies a policy that matches (i.e., is applicable to) the received request for the first resource by comparing a set of attributes of the request with sets of attributes of a set of policies that place constraints on operations specified for resources. In some embodiments, several sets of attributes for several policies can be expressed for resources at different hierarchal resource levels of the SDDC. The method rejects the received request when the identified policy specifies that the requested operation violates a constraint on operations specified for the first resource.

Policy constraint framework for an SDDC

Some embodiments provide a method for a computing device that implements a first logical network gateway in a first datacenter to process data messages between data compute nodes (DCNs) belonging to the logical network and operating in the first datacenter and DCNs belonging to the logical network and operating in a second datacenter. From a host computer in the first datacenter, the method receives a logical network data message encapsulated with a first tunnel header including a first virtual network identifier corresponding to a logical forwarding element of the logical network. The method removes the first tunnel header and encapsulates the logical network data message with a second tunnel header include a second virtual network identifier corresponding to the logical forwarding element. The method transmits the logical network data message encapsulated with the second tunnel header to a second logical network gateway in the second datacenter.

Logical forwarding element identifier translation between datacenters

Certain embodiments described herein are directed to a method of receiving information associated with a service provided by a management plane for managing a remote network. The method, in one example, includes registering, at an adapter container, with a data store or an entity within a service instance of a service deployment associated with a service within a software-defined networking environment associated with the remote network, wherein the service is provided for managing a remote network, and wherein registering with the data store or the entity causes the data store or the entity to send information associated with the service instance to the adapter when information is available. The method also includes receiving, at the adapter container, information from the data store or the entity. The method also includes transforming the information from a first format to a second format. The method also includes transmitting the information to an endpoint.

Enabling integration of solutions with software-defined networking platform

Some embodiments provide a method for a global manager that manages a logical network configuration for multiple datacenters that each have a local manager for managing the logical network configuration within the datacenter. Based on detecting that a connection to a particular local manager of a particular datacenter has been restored after a period of unavailability, the method identifies a portion of the logical network configuration that is relevant to the particular datacenter. In a series of transactions, the method transfers the identified portion of the logical network configuration to the particular local manager. During the series of transactions, the method identifies modifications to the identified portion of the logical network configuration to be included in the series of transactions. Upon completion of the series of transactions, the method transfers a notification to the particular local manager indicating completion of the series of transactions.

Synchronization of logical network state between global and local managers

Some embodiments provide a method for distributing rules associated with a particular logical network element that is implemented across one or more physical sites. The method uses a set of attributes of a set of elements associated with the particular logical network element to identify a particular set of physical sites spanned by the particular logical network element. The method identifies a set of rules associated with the particular logical network element. The method distributes the identified set of rules to each site of the identified set of physical sites.

Determining span of logical network element

The current document is directed to automated application-release-management facilities that, in a described implementation, coordinate continuous development and release of cloud-computing applications. The application-release-management process is specified, in the described implementation, by application-release-management pipelines, each pipeline comprising one or more stages, with each stage comprising one or more tasks. The currently described methods and systems employ configuration files to specify configuration of the execution environment for application-release-management pipelines, application-release-management-pipeline stages, and application-release-management-pipeline-stage tasks and apply policies to configuration files to further specify the execution environments for application-release-management pipelines.

Policy enabled application-release-management subsystem

Methods and systems assist data center customer to plan virtual data center ('VDC') configurations, create purchase recommendations to achieve either an expansion or contraction of a VDC, and optimize the data center cost. Methods generate recommendations on lower cost combinations of virtual machine ('VM') guest OS licenses, server computer hardware and VM software to optimize the costs are generated, generate data center customer plans for additional VMs with Quest OS for a projected period of time, provide recommendations on lower cost combination of guest OS licenses, server hardware, and VM software to optimize the cost. Methods also report any underutilized licensed servers and provide recommendations for cost savings when volume licenses can be replaced by instance based software licenses. Methods may generate VM placement recommendations to data center customers while the customers attempt to manually migrate VMs to different server computers.

Methods and systems to optimize server utilization for a virtual data center

Methods and systems to optimize operating system license costs in a virtual data center

Methods and systems assist data center customer to plan virtual data center ('VDC') configurations, create purchase recommendations to achieve either an expansion or contraction of a VDC, and optimize the data center cost. Methods generate recommendations on lower cost combinations of virtual machine ('VM') guest OS licenses, server computer hardware and VM software to optimize the costs are generated, generate data center customer plans for additional VMs with guest OS for a projected period of time, provide recommendations on lower cost combination of guest OS licenses, server hardware, and VM software to optimize the cost. Methods also report any underutilized licensed servers and provide recommendations for cost savings when volume licenses can be replaced by instance based software licenses. Methods may generate VM placement recommendations to data center customers while the customers attempt to manually migrate VMs to different server computers.

Embodiments of the present disclosure relate to enforcing universal security policies across data centers. Embodiments include receiving, from a user, a first universal security policy (USP) related to a first universal policy group. Embodiments include identifying a first data center as an enforcement point for the first USP. Embodiments include automatically generating, at the first data center, a first local security policy based on the first USP. Embodiments include deploying a workload associated with the first universal policy group to the first data center. The first USP is enforced for the workload via the first local security policy.

Enforcing universal security policies across data centers

Some embodiments provide a method for collecting data regarding realized state associated with a logical network spanning multiple physical sites. At a global manager that manages a logical network, the method receives a request to collect realized state for a set of one or more logical network elements, each of which spans a set of two or more physical sites. Each physical site is managed by a local manager. For each of the logical network elements, the method identifies the set of physical sites spanned by the logical network element. For each of the logical network elements, the method sends requests for realized state of the logical network element to the local manager of each identified physical site spanned by the logical network element. The method generates a report for presentation from the realized states received from the local managers.

Presenting realized state of multi-site logical network

Some embodiments provide a method for defining a logical network (LN) that spans multiple sites and is managed at each site by a local manager. At a global manager that manages the logical network, the method creates a tree from a definition of the LN that spans the sites. The tree includes nodes representing elements in the LN and connections between the nodes to express relationships between the elements. Each of at least a subset of nodes has a span attribute identifying sites spanned by an LN element corresponding to the node. The method uses the span attributes to create a parsed tree for each site. Based on the parsed tree of each site, the method identifies a portion of the LN definition that is relevant for the site. The method provides, to the local manager of each site, the portion of the LN definition identified for the site.

Parsing logical network definition for different sites

Growing community of inventors

Bengaluru, India

Amarnath Palavalli