Nicira, Inc.

Vmware, Inc.

Benjamin C Basler

Ronghua Zhang

Serge Maskalik

Kai-Wei Fan

Rajiv Ramanathan

Srinivas Neginhal

David J Leroy

Ariel Tubaltsev

Ansis Atteka

Pankaj Thakkar

Ethan J Jackson

Sami Boutros

Akshay Kumar Sreeramoju

Jerome Catrouillet

Madhusudhan Ravi

Srikanth Hariharan

Joseph A Garcia

Rohan Agarwal

Siddhant Deshmukh

Akash Gangil

Some embodiments provide a network system. The network system includes a first set of host machines for hosting virtual machines that connect to each other through a logical network. The first set of host machines includes managed forwarding elements for forwarding data between the host machines. The network system includes a second set of host machines for hosting virtualized containers that operate as gateways for forwarding data between the virtual machines and an external network. At least one of the virtualized containers peers with at least one physical router in the external network in order to advertise addresses of the virtual machines to the physical router.

Route advertisement by managed gateways

Some embodiments of the invention provide a method of reporting telemetry data in a telecommunication network. The telemetry data is collected from a set of one or more telemetry-producing (TP) network elements and is distributed to a set of one or more telemetry-consuming (TC) network elements registered to receive the telemetry data. The method receives a telemetry packet produced by a TP network element and performs a filtering operation to determine whether the telemetry packet should be reported to at least a subset of one or more TC network elements. When the filtering operations result in a determination that the telemetry packet should be reported, the method forwards the telemetry packet to the subset of TC network elements.

Collecting, processing, and distributing telemetry data

Some embodiments provide a method for providing redundancy and fast convergence for modules operating in a network. The method configures modules to use a same anycast inner IP address, anycast MAC address, and to associate with a same anycast VTEP IP address. In some embodiments, the modules are operating in an active-active mode and all nodes running modules advertise the anycast VTEP IP addresses with equal local preference. In some embodiments, modules are operating in active-standby mode and the node running the active module advertises the anycast VTEP IP address with higher local preference.

Edge node cluster network redundancy and fast convergence using an underlay anycast VTEP IP

Some embodiments provide a method for applying a security policy defined for a logical network to an MHFE that integrates physical workloads (e.g., physical machines connected to the MHFE) with the logical network. The method applies the security policy to the MHFE by generating a set of ACL rules based on the security policy's definition and configuring the MHFE to apply the ACL rules on the network traffic that is forwarded to and/or from the physical machines. In order to configure an MHFE to implement the different LFEs of a logical network, some embodiments propagate an open source database stored on the MHFE, using an open source protocol. Some embodiments propagate a particular table of the database such that each record of the table creates an association between a port of an LFE stored in a logical forwarding table and one or more ACL rules stored in an ACL table.

Implementing logical network security on a hardware switch

Some embodiments provide a method for a network controller in a network control system that manages a plurality of logical networks. The method receives a specification of a logical network that comprises a logical router with a logical port that connects to an external network. The method selects several host machines to host a L3 gateway that implements the connection to the external network for the logical router from a set of host machines designated for hosting logical routers. The method generates data tuples for provisioning a set of managed forwarding elements that implement the logical network to send data packets that require processing by the L3 gateway to the selected host machines. The data tuples specify for the managed forwarding elements to distribute the data packets across the selected host machines.

Multiple active L3 gateways for logical networks

Example methods are provided to influence path selection during a multipath connection between a first endpoint and a second endpoint. The method may comprise configuring, for a first subflow of a multipath connection, a first set of tuples and establishing, over a network interface of the first endpoint, the first subflow with the second endpoint. The method may further comprise configuring, for a second subflow of the multipath connection, a second set of tuples based a path selection algorithm learned by the first endpoint; and establishing the second subflow with the second endpoint. The method may further comprise sending first packets having the first set of tuples on the first subflow and second packets having the second set of tuples on the second subflow to the second endpoint via an intermediate device that uses the path selection algorithm.

Influencing path selection during a multipath connection

Example methods are provided to perform data transfer between a first endpoint and a second endpoint. The method may comprise detecting an elephant flow of data from an application executing on the first endpoint for transfer to the second endpoint; and splitting the elephant flow to obtain first packets and second packets. The first endpoint may have cognizance of a first path and a second path between a first network interface of the first endpoint and a second network interface of the second endpoint. The method may comprise establishing a first subflow and a second subflow of a multipath connection with the second endpoint; and sending, over the first network interface, the first packets on the first subflow and the second packets on the second subflow to the second network interface.

Data transfer between endpoints using a multipath connection

Growing community of inventors

Mountain View, CA, United States of America

Benjamin C Basler