Microsoft Technology Licensing, LLC

Motorola Corporation

Motorola Solutions, Inc.

Deepak Bansal

Rishabh Tewari

Parveen Kumar Patel

Murari Sridharan

Albert Gordon Greenberg

Michal Czeslaw Zygmunt

Gerald Roy Degrace

Avijit Gupta

Sanjay N Kaniyar

Narasimhan Agrahara Venkataramaiah

Changhoon Kim

Srikanth Kandula

Geoffrey Hugh Outhred

Abolade Gbadegesin

David G Thaler

Alireza Dabagh

Yousef A Khalidi

Xinyan Zan

Harish Kumar Chandrappa

Hasan Alkhatib

Nisheeth Srivastava

Benjamin M Schultz

Daniel Max Firestone

Dmitry A Anipko

Abhishek Shukla

Parag Sharma

Rajesh Sundaram

David A Maltz

Eran Yariv

Lihua Yuan

Luyuan Fang

Maxim V Stepin

Madhan Sivakumar

Anatoliy Panasyuk

Whay Chiou Lee

Khawar Zuberi

Praveen Balasubramanian

Dharshan Rangegowda

Sameer Arun Verkhedkar

Qi Zhang

Anthony R Metke

Abhishek Abhishek

Tomas Talius

Vivek Bhanu

Jun Tse Chen

Wei Zhao

Sumit Garg

Murali Krishna Sangubhatla

Priyank Ramesh Warkhede

Deven Jagasia

Pranjal Shrivastava

Kevin T Weston

Vaibhav Kumar

Ashwin Narasimha Murthy

Marios Zikos

Shekhar Agarwal

Neeraj Motwani

David Michael Brumley

Fabio Chiussi

Milan Dasgupta

James Wesley Boerner

Sushant Sharma

Vijay Gill

Abhijeet Kumar

Ronen Barenboim

Jayesh Kumaran

Abhishek Ellore Sreenath

Xin Yan

Vinayak Uppunda Padiyar

Thiruvengadam Venketesan

Rangaprasad Narasimhan

Hemant Kumar

Sumit Sharad Dhoble

Young Lee

Aanand Ramachandran

Eric Lawrence Albert Lantz

Adarsh Kirnelli Rangaiah

Gerald Roy De Grace

Manasi Deval

Anitha Adusumilli

Alexander Malvsh

Alexander Malysh

Francis Duong

Gary Randall Ratterree

Ankur Agiwal

Tarek Z Elabbady

Geoff Outhred

Guohan Lu

Jeff Cox

Anthony S Chavez

Nasser Elaawar

Hang Kwong Lee

Liang Guo

Nimish Aggarwal

Vishal Taneja

Eric B Stenson

Dave Maltz

Sheng Lu

Gareth Bradshaw

Cristian Costache

Transmission Control Protocol (TCP) states of an active device are replicated at a backup device configured to track connections in a software defined network (SDN). The backup device receives, from the active device, a TCP packet with a TCP flag including one or more of SYN, SYN-ACK, ACK, FIN, FIN-ACK, ACK, or RESET. When the TCP packet has a SYN flag, the backup device adds a connection record to a connection table. Otherwise, the backup device derives an updated connection state for the connection record using a TCP state machine. The connection state is updated as future packets are received by the backup device.

Efficient state replication in SDN networks

Bidirectional flows of a communication session in a software defined network (SDN) are efficiently managed. A smart switch comprises a digital processing unit (DPU) complex comprising one or more DPUs, and a switching complex comprising one or more network processing units (NPUs). The DPU complex is configured to disaggregate enforcement of policies of the SDN from hosts of the SDN. The switching complex is configured to perform network routing of packets in the SDN. The hosts are implemented on servers communicatively coupled to network interfaces of the SDN. The switching complex is configured to perform policy enforcement of data flows for communication sessions that are offloaded from the DPU complex to the switching complex.

Smart switch for offloading high bandwidth flows in a software defined network

Data flows in a virtualized computing environment are efficiently updated by a hardware-based networking device configured to disaggregate processing of data packets of the data flows from hosts of the virtualized computing environment. A connection table is accessed that defines connection flows for data packets having a source from an endpoint in a virtual network of the virtualized computing environment or a destination to the endpoint in the virtual network of the virtualized computing environment. The hardware-based networking device re-simulates full packet processing paths for each of the flows in the connection table and updates the flows in the connection table to ensure that the flows in the connection table implement policies of the virtualized computing environment that were updated after corresponding flows in the connection table were added to the connection table.

Re-simulation of updated SDN connection flows

High availability network services are provided in a in a virtual computing environment comprising a plurality of network devices running in a software defined network (SDN) of the virtual computing environment, the network devices comprising a plurality of SDN appliances configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment, the hosts implemented on servers communicatively coupled to network interfaces of the SDN appliances, the servers hosting a plurality of virtual machines, the SDN appliance comprising a plurality of smart network interface cards (fNICs) configured to implement functionality of the SDN appliances.

Zero downtime servicing of datapath services in software defined networks

Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. A plurality of computing nodes are communicatively coupled to network devices. The computing nodes are configured to provide at least one cloud edge processing function. The network devices are configured to enable communications between virtual machines within a virtual network of the virtual computing environment in accordance with associated policies. The network devices and the processing function are disaggregated from dependencies on particular computing nodes that are hosting the virtual machines.

Edge gateways in disaggregated networks

Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. A plurality of servers are communicatively coupled to network interfaces of one of a skinny NIC or a smart NIC. The skinny NIC is configured to provide network interfaces for virtual machines hosted on a corresponding server. The smart NIC is configured to enable virtual machine communications within a virtual network in accordance with associated policies.

Pooling smart NICs for network disaggregation

Described herein is a system and method of connectivity migration of an executing virtual application and/or guest operating system. State associated with a first instance of an application and/or a guest operating system executing on a first virtual machine is captured. Information regarding connectivity state associated with a plurality of running connections between the first virtual machine and client device(s) is also captured (e.g., layers 2, 3 and 4). The captured state information can be provided to a second virtual machine which utilizes the captured station information to establish state for a second instance of the application, a second instance of the guest operating system, and/or connectivity of the plurality of running connections between the second virtual machine and client device(s). The state of the second instance of the application can be synchronized with the state of the second instance of the guest operating system.

Connectivity migration in a virtual execution system

Techniques are disclosed for dynamically adjusting a throttling threshold in a multi-tenant virtualized computing environment. System health parameters are collected during a predetermined time interval. A system health status of the multi-tenant virtualized computing environment is determined. Based on the system health status, a throttling threshold for service requests for the multi-tenant virtualized computing environment is determined. The throttling threshold is applied for further service requests. During a subsequent time interval, an updated system health status of the multi-tenant virtualized computing environment is determined based on system health parameters received during the subsequent time interval. The throttling threshold is updated based on the updated system health status. The updated throttling threshold is applied for further service requests.

Dynamic throttling based on health metrics

A virtual network comprising virtual machines executing at a computing environment remote from the virtualized computing service provider is implemented. A control plane management functions is configured to provide and implement the virtual machines of the virtual network and executed at the virtualized computing service provider. Data plane management functions are configured to manage data traffic to and from the virtual machines of the virtual network and executed at the remote computing environment. A secure network connection between the virtualized computing service provider and the remote computing environment is established. The control plane management functions cause instantiation of the virtual machines of the virtual network at the remote computing environment. Using the control plane management functions executing at the virtualized computing service provider, operation of the virtual machines of the virtual network is managed. Using the data plane management functions executing at the remote computing environment, operation of data plane operations at the virtual machines executing at the remote computing environment is allowed.

Remote network control for network virtualization

Described herein are systems and methods for supporting multicast for virtual networks. In some embodiments, a native multicast approach can utilized in which packet replication is performed on a host node of a virtual machine (VM) with a multicast data packet encapsulated in uniquely address unicast packets. In some embodiments, a network virtual appliance can be utilized. A multicast packet sent from the VM can be unicasted to the network virtual appliance. The multicast appliance can then replicate the packet into multiple copies and send the packets to the receivers in the virtual network as unicast data packets encapsulating the multicast packet.

Multi-cast support for a virtual network

Techniques are disclosed for processing data packets by a hardware-based networking device configured to disaggregate processing of data packets from hosts of a virtualized computing environment. The hardware-based networking device includes a hardware-based component implementing a plurality of behavioral models indicative of packet processing graphs for data flows in the virtualized computing environment. A data packet having a source from or destination to an endpoint in a virtual network of the virtualized computing environment is received. Based on determining that the data packet is a first packet of a data flow to or from the endpoint, one of the behavioral models is mapped to the data flow. The packet is modified in accordance with the mapped behavioral model. A state of the data flow is stored. Subsequent data packets of the data flow are processed based on the stored state.

Hardware-based packet flow processing

Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least two SDN appliances are configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. The hosts are implemented on servers communicatively coupled to network interfaces of the SDN appliance. The servers host a plurality of virtual machines. The servers are communicatively coupled to network interfaces of at least two top-of-rack switches (ToRs). The SDN appliance comprises a plurality of smart network interface cards (sNICs) configured to implement functionality of the SDN appliance. The sNICs have a floating network interface configured to provide a virtual port connection to an endpoint within a virtual network of the virtual computing environment.

Scaling host policy via distribution

Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least one SDN appliance is configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. The servers are communicatively coupled to network interfaces of the SDN appliance. The servers host a plurality of virtual machines The SDN appliance comprises a plurality of smart network interface cards (sNICs) configured to implement functionality of the SDN appliance.

Architectures for disaggregating SDN from the host

High availability for hardware-based packet flow processing

Growing community of inventors

Redmond, WA, United States of America

Deepak Bansal