International Business Machines Corporation

Guo Xing He

Gang Tang

Yi Jing Zhu

Zheng Dong Zhu

Shi Xin Ruan

Na Zhu

Ming Shuang Xian

Liang Rong

Lu Zhang

Yuan Yuan Zhang

Zi Jin Tao

Tamanna Zackaria Sait

Lei Bao

Described are techniques including a computer-implemented method comprising appending a HyperText Transfer Protocol (HTTP) header to a HTTP request, wherein the HTTP header includes a source Internet Protocol (IP) address of a client generating the HTTP request, a universally unique identifier (UUID) of the HTTP request, a timestamp, a lifetime, a Universal Resource Locator (URL) of the HTTP request, and a signature. The method further comprises transmitting the HTTP request with the HTTP header to a web server.

Header for conveying trustful client address

Aspects of the present invention provide an approach for improving communications between a software-defined networking (SDN) controller and a hardware gateway in a SDN. In an embodiment, a SDN proxy gateway is installed. The SDN proxy gateway communicates with the SDN controller on behalf of the hardware gateway. To accomplish this, the SDN proxy gateway processes a communication sent from the SDN controller to the hardware gateway. This communication includes a request from a computing node to establish a network communication channel. The SDN proxy gateway translates these instructions (e.g., the logical network and endpoint information), which are in the native format of the SDN controller, into a standardized hardware gateway protocol. The translated information that the hardware gateway can use to establish the network connection is then pushed to the hardware gateway by the proxy gateway.

Software-defined networking proxy gateway

A PVLAN switch for connecting a PVLAN to a non-PVLAN device is configured as a primary VLAN with secondary VLANs, the primary VLAN includes promiscuous ports, each of the secondary VLANs includes a smart PVLAN trunk port, and the smart PVLAN trunk port is included in at least two secondary VLANs where the smart PVLAN trunk port and the promiscuous port connect to non-PVLAN devices. A frame is received on a smart PVLAN trunk port sent from a non-PVLAN device, and includes a destination address and a secondary VLAN ID. The PVLAN switch port ID for the first frame, and a primary VLAN ID for the secondary VLAN ID are identified. If the frame is a non-isolated port, the secondary VLAN ID is modified to be the primary VLAN ID, and the modified frame is sent to another non-PVLAN device connected to the PVLAN switch port.

Connecting a PVLAN switch to a non-PVLAN device

Embodiments disclose systems, methods, and computer program products to perform an operation for generating entropy values for packets in an overlay network. The operation generally includes generating a first entropy value for each packet in a first group of packets received in a sequence of packets from a host, and detecting an idle amount of time between the the first group of packets in the sequence of packets and a second group of packets in the sequence of packets received from the host. The operation also includes upon determining that the idle amount of time is greater than a first threshold, generating a second entropy value for each packet in the second group of packets. The operation further includes inserting the second entropy value in an outer header of each packet in the second group of packets, and transmitting the second group of packets to the underlay network.

Exploiting underlay network link redundancy for overlay networks

An approach is provided in which an information handling system establishes a resource reservation protocol (RSVP) session corresponding to a flow between a first entity and a second entity operating within a computer environment that implements a network virtualization overlay protocol. Once the RSVP session is established, the information handling system encapsulates data packets of the flow based on the network virtualization overlay protocol and, in turn, sends the encapsulated data packet over the computer network with a quality of service (QoS) assurance level that is based on the established RSVP session.

Resource reservation mechanism for overlay networking

Aspects provide optimized broadcast, unknown unicast, multicast packet (BUM) flooding. A flooding interface list is built for a network virtualization edge structure for an overlay network first virtual machine that includes one or more tunnel interfaces, one for each of a subset of the underlay network virtualization edge structures. In response to receiving a BUM packet from the first virtual machine at the first network virtualization edge structure, an overlay encapsulated packet is generated from the BUM packet and sent out to only those tunnel interfaces listed within the flooding interface list built for the virtual machine, thereby without sending to other network virtualization edge structures that do not have tunnel interfaces listed within the built flooding interface list.

Growing community of inventors

Suzhou, China

Guo Xing He