International Business Machines Corporation

Lenovo (singapore) Pte. Ltd.

Jayakrishna Kidambi

Vijoy A Pandey

Amitabha Biswas

Dayavanti G Kamath

Keshav G Kamble

Vinit Jain

Stephan Benny

John I Buswell

Dorit Rond

Renato John Recio

Nilanjan Mukherjee

Abhijit Prabhakar Kumbhare

Dar-Ren Leu

Omar Cardona

Bhalachandra G Banavalikar

Santosh Rajagopalan

Gang Tang

Zi Jin Tao

Chandarani J Mendon

Harshad S Padhye

Keshav Govind Kamble

Deepak Kumar

Tang Gang

Mike Browne

Ryan Moats

Sisir Chowdhury

Suryanarayan Ramamurthy

Zhenwei Hu

Dayavanti Gopal Kamath

Vijoy Pandey

Chandarani Mendon

A method, computer system, and a computer program product for sharing a peering connection parameter is provided. The present invention may include receiving a peering connection order from a user. The present invention may also include assigning at least one shared secret to the received peering connection order. The present invention may then include receiving a request from a network service provider of the user for at least one connection parameter associated with the received peering connection order, wherein the received request includes the at least one shared secret for the received peering connection order. The present invention may further include, in response to determining that the at least one shared secret included in the received request is valid, returning the at least one connection parameter associated with the received peering connection order to the network service provider of the user.

Secure sharing of peering connection parameters between cloud providers and network providers

Managing traffic on a distributed system includes partitioning VCE load balancers of the distributed system among service virtual server instances (SVSIs) of the distributed system, each service virtual server instance (SVSI) being identical in function and deployed across two or more regions of the distributed system. The method further includes: periodically polling, by each SVSI each other of the SVSIs; monitoring, by each SVSI, a load on each VCE load balancer for which it is responsible, resulting in a monitored load; recovering, by an SVSI from a failure of VCE load balancer(s) for which it is responsible; automatically adjusting, by an SVSI a capacity of a VCE load balancer for which it is responsible based on a corresponding monitored load; and repartitioning, by the distributed system, in response to an SVSI failure, the VCE load balancers among remaining SVSIs.

Fault tolerant distributed system to monitor, recover and scale load balancers

Embodiments of the invention relate to overlay network address management. One embodiment includes an overlay gateway including an overlay network manager associated with a physical network. The overlay network manager prevents duplicate address assignment for overlay domains having a first sharing status and performs address translation for overlay domains having a second sharing status. Address translation is avoided for overlay domains having the first sharing status.

Address management in an overlay network environment

In one embodiment, a system includes a plurality of network ports including multiple Peripheral Component Interconnect express (PCIe) ports, a network interface card (NIC) driver configured to interface with and support an accelerated NIC, a processor, and logic integrated with the processor, executable by the processor, or integrated with and executable by the processor. The logic is configured to cause the processor to provide a virtual switch to host one or more virtual machines (VMs). Also, the logic is configured to cause the processor to provide a hypervisor which processes at least some outbound packets received from the one or more VMs and processes at least some inbound packets sent to the one or more VMs. Moreover, the logic is configured to cause the processor to divert network traffic of the one or more VMs that has overlay functionality provided by the accelerated NIC to bypass the hypervisor.

Processing of overlay networks using an accelerated network interface card

According to one embodiment, a system includes an accelerated network interface card (NIC), the accelerated NIC including a plurality of network ports including multiple Peripheral Component Interconnect express (PCIe) ports, an Overlay Network Offload System (ONOS), the ONOS including logic configured to provide overlay functionality to network traffic received by the accelerated NIC, and logic configured to cause network traffic that has overlay functionality provided by a hypervisor to bypass the ONOS. In another embodiment, a method for accelerating overlay functionality in a server includes providing overlay functionality for at least some network traffic received by an accelerated NIC implemented in a server, wherein the accelerated NIC provides an interface between the server and a network, and causing network traffic that has overlay functionality provided by a hypervisor of the server to bypass the accelerated NIC.

In one embodiment, a system includes a processor and logic integrated with and/or executable by the processor. The logic is configured to cause the processor to receive, at a first end point station, information exchange packets from all end point stations in a virtual network having a specified VNID, process each received information exchange packet to retrieve information about connections at each end point station in the virtual network having the specified VNID, and assemble a Tunnel Information Base (TIB) for a selected tunnel end point. Each of the information exchange packets include a MAC address for all member VMs in the virtual network having the specified VNID connected to each end point station in the virtual network having the specified VNID. In addition, the TIB includes a Tunnel ID, the specified VNID, and MAC addresses of the member VMs of the virtual network having the specified VNID.

Overlay tunnel information exchange protocol

A method and system for configuring communications over a physical communication link connected between a physical port of a network switch and a physical port of a physical network interface on an end station. The communication link between the physical port of the network switch and the physical port of the physical network interface is logically partitioned into a number of channels of communication. For each channel, a channel profile is generated that defines properties of that channel. The physical network interface is instructed to self-configure such that the physical network interface is able to communicate with the network switch over each channel in accordance with the channel profile defined for that channel.

Unified fabric port

A method includes receiving tunnel information and end point information in response to a request to a distributed cluster. A common tunnel type supported by a source switch and a destination switch is selected. A packet is encapsulated with the common tunnel type supported by the source switch and the destination switch for a destination virtual machine (VM).

Interoperability for distributed overlay virtual environment

In one embodiment, a server includes a processor and logic integrated with and/or executable by the processor. The logic is configured to hash at least a portion of a packet according to a hashing algorithm to obtain a hash value. The logic is also configured to select an uplink with which to forward the packet based on the hash value. In another embodiment, a method includes hashing at least a portion of at least one packet according to a hashing algorithm to obtain a hash value using an accelerated network interface card (NIC) of a server. The accelerated NIC is configured to provide overlay functionality. The method also includes selecting an uplink, based on the hash value, from a plurality of uplinks available to send traffic out to a network using the accelerated NIC.

Load balancing overlay network traffic using a teamed set of network interface cards

According to one embodiment, a method for asymmetrical link aggregation includes detecting a link change corresponding to a previously selected port of a first set of ports used to forward frames to one of a plurality of aggregation switches connected via the first set of ports to an access switch. The method also includes re-selecting, using the access switch, a port of the first set of ports according to a distribution algorithm that ensures that all frames with a given source address are forwarded using a single port and causes frames with different source addresses to be distributed uniformly among the first set of ports in response to detecting the link change. Also, the method includes generating and sending a fake reverse address resolution protocol (RARP) frame including the given source address of the frame from the re-selected port in response to detecting the link change.

Asymmetrical link aggregation

A method includes receiving a first packet having a first virtual local area network (VLAN) identifier (ID) directly from a first virtual switch using a first physical overlay switch located at an edge of an internet protocol (IP) network, encapsulating the first packet with an overlay header and tunneling the first encapsulated packet via Layer-3 operations across the IP network to a second physical overlay switch in response to a determination that a source of the packet is physically separated from a destination of the packet by the IP network, receiving a second encapsulated packet having a second overlay header from the second physical overlay switch, de-encapsulating the second encapsulated packet to create a second packet having a second VLAN ID, and sending the second packet having the second VLAN ID directly to the first virtual switch operating in the first hypervisor domain.

Hypervisor independent network virtualization

Embodiments of the invention provide a method for packet distribution in a virtual networking system comprising multiple virtual networks interconnected over an underlying layer network, wherein each virtual network comprises one or more computing nodes. The method comprises, for each virtual network, sending at least one outgoing packet targeting a computing node at a different virtual network, and receiving at least one incoming packet targeting a computing node of the virtual network. Each packet has a corresponding virtual networking tag that includes routing information identifying a destination virtual network for the packet.

Tagging virtual overlay packets in a virtual networking system

In one embodiment, an apparatus includes a processor and logic integrated with and/or executable by the processor. The logic is configured to communicate with a first physical switch, a second physical switch, and an overlay network that connects the first physical switch to the second physical switch. The logic is also configured to receive a request for a communication path through the overlay network for a packet, the request including at least the packet, first information about a source of the packet, the source of the packet being connected to the first physical switch, and second information about a most closely connected physical switch to a destination of the packet. Moreover, the logic is configured to determine the destination of the packet, the destination of the packet being connected to the second physical switch. Also, the logic is configured to determine whether to apply a security policy to the packet.

Growing community of inventors

San Jose, CA, United States of America

Jayakrishna Kidambi