Microsoft Technology Licensing, LLC

Anitha Adusumilli

Rishabh Tewari

Harish Kumar Chandrappa

Parag Sharma

Deepak Bansal

Albert Gordon Greenberg

Daniel Max Firestone

Tomas Talius

Abhishek Shukla

Abhishek Ellore Sreenath

Pranjal Shrivastava

Shekhar Agarwal

Nimish Aggarwal

David Michael Brumley

Qiming Chen

Sumeet Mittal

Dhruv Malik

Joemmanuel Ponce Galindo

Arjun Roy

Longzhang Fu

Techniques are described herein that are capable of monitoring connectivity and latency of network links in virtual networks. For instance, a ping agent injects first ping packets into network traffic on behalf of hosts in the virtual network. The ping agent monitors incoming packets to identify first ping response packets, which are in response to the first ping packets, among the incoming packets. A ping responder rule that is included in inbound packet filter rules for a port in a virtual switch intercepts second ping packets in the network traffic. The ping responder rule converts the second ping packets into second ping response packets and injects the second ping response packets into outbound packet filter rules to be transferred to sources from which the second ping packets are received.

Monitoring connectivity and latency of a virtual network

The techniques described herein enable a private connectivity solution between a virtual network of a service consumer and a virtual network of a service provider in a cloud-based platform. The techniques map a service (e.g., one or more workloads or containers) executing in the virtual network of the service provider into the virtual network of the service consumer. The mapping uses network address translation (NAT) that is performed by the cloud-based infrastructure. As a result of the techniques described herein, a public Internet Protocol (IP) address does not need to be used to establish a connection thereby alleviating privacy and/or security concerns for the virtual networks of the service provider and/or the service consumer that are hosted by the cloud-based platform.

Mapping a service into a virtual network using source network address translation

Techniques for allowing access to shared cloud resource using private network addresses are disclosed herein. In one embodiment, a connection packet representing a connection request to a shared cloud resource in the cloud computing system can be intercepted. In response, the connection packet can be encapsulated with data representing one or more of a VNET ID, a VNET source address, or a VNET destination address of a virtual network from which the connection packet is received. The encapsulated connection packet can then be forwarded to the shared cloud resource while retaining the data representing one or more of the VNET ID, the VNET source address, or the VNET destination address for access control at the shared cloud resource.

Accessing cloud resources using private network addresses

Growing community of inventors

Sammamish, WA, United States of America

Anitha Adusumilli