Vmware, Inc.

Cisco Technology, Inc.

Harish Manoharan

Dileep Kumar Devireddy

Subin Cyriac Mathew

Sreenivas Duvvuri

Vijai Coimbatore Natarajan

Umamaheswararao Karyampudi

Pirabhu Raman

Murukanandam Kamalam Panchalingam

Pavithra Ramaswamy

Santosh Golecha

The disclosure provides an approach for seamless hand-off of data traffic in public cloud environments. Techniques are provided for activating an edge services gateway (ESG) virtual computing instance (VCI) on a new host. Prior to activating the ESG VCI on the new host, an underlay routing table is reprogrammed to associate a first IP address of a first tunnel endpoint (TEP) with a first network interface of an old host and to associate a second IP address of a second TEP with a second network interface of the new host. The routing table associates a third IP address of the ESG VCI with the first network interface. After activating the ESG VCI, a packet having as a destination address the third IP address is received at the first network interface and is encapsulated, by the first TEP, with an outer header having as a destination address the second IP address.

Seamless hand-off of data traffic in public cloud environments

The disclosure provides an approach for seamless hand-off of data traffic in public cloud environments with reverse path filtering. Techniques are provided for activating an edge services gateway (ESG) virtual computing instance (VCI) on a new host in a data center. Before an underlay converges on the new host, inbound and outbound packets for the ESG VCI are sent by the underlay to the old host and the old tunnels the packets to the new host via a pre-created overlay tunnel. For outbound packets, the new host tunnels the packets back to the old host after the ESG VCI performs network address translation of the source address. Once the new host detects that the underlay converges, the new host stops redirecting the outbound packets to the old host.

Seamless hand-off of data traffic in public cloud environments with reverse path filtering

Some embodiments provide a novel method for configuring managed forwarding elements (MFEs) to handle data messages for multiple logical networks that are implemented in a data center at the MFEs and to provide gateway service processing (e.g., firewall, DNS, etc.). A controller, in some embodiments, identifies logical networks implemented in the datacenter and MFEs available to provide gateway service processing and assigns gateway service processing for each logical network to a particular MFE. The MFEs, in some embodiments, receive data messages from endpoints in the logical networks that are destined for an external network. In some embodiments, the MFEs identify that the data messages require gateway service processing before being sent to the external network. The MFEs, in some embodiments, identify a particular MFE that is assigned to provide the gateway service processing for logical networks associated with the data messages.

Configuring traffic optimization using distributed edge services

Traffic optimization using distributed edge services

Systems, methods, and computer-readable storage media for executing a copy service. A copy service engine can monitoring network data flow in a network, detect packet data containing a contract defining copy parameters for the execution of a copy service, and determine, based on the contract, when the particular data flow hits a particular network node specified in the contract parameters. When the data flow hits the specified node, the copy service engine can execute the copy service which copies the particular data flow, determines one or more endpoints for sending the copied data flow, and deploys the copies to the one or more endpoints.

Contract-defined execution of copy service

Growing community of inventors

San Jose, CA, United States of America

Harish Manoharan