Vmware, Inc.

Hewlett Packard Enterprise Development LP

Li Sun

Yang Ping

Raju Koganty

Pierluigi Rolando

Anuprem Chalvadi

Yong Feng

Yanjun Lin

Souvik Sen

Fenil Kavathia

Jayant Jain

Jianjun Shen

Akhila Naveen

Parasuramji Rajendran

Chidambareswaran Raman

Medhavi Dhawan

Ziyou Wang

Aravinda Kidambi Srinivasan

Deepika Rajendra Kalani

Mary Firenze

Xiaozheng Guo

Some embodiments provide a novel secure method for suppressing address discovery messaging. In some embodiments, the method receives an address discovery record that provides a network address associated with a machine connected to a network. The method then identifies a set of one or more rules for evaluating the received address discovery record to determine whether the address discovery record or its provided network address should be distributed to one or more hosts and/or devices associated with the network. The method then processes the set of rules to determine whether the received address discovery record violates a rule in the set of rules so as to prevent the distribution of its provided network address. When the address discovery record violates a rule, the method discards it in some embodiments. On the other hand, when the address discovery record does not violate any rule in the identified set of rules, the method distributes the address discovery record or its provided network address to one or more hosts and/or devices associated with the network.

Secured suppression of address discovery messages

Some embodiments provide a method, for configuring logical network entities at a host computer. The method receives configuration data for a particular logical networking entity implemented at the host computer. The method identifies that the configuration data for the particular logical networking entity includes at least two conflicting configuration settings for the particular logical networking entity. At least one of the configuration settings for the particular logical networking entity is based on association of a configuration profile to a group of logical entities that includes the particular logical networking entity. The method determines a particular one of the conflicting configuration settings with a highest priority to apply to the particular logical networking entity at the host computer.

Configuration of logical networking entities

A method of recording layer-2 (L2) mappings created for workloads executing on a plurality of hosts in a first database managed by a network management server: upon receipt of a first mapping reported by a first host, determining that the first mapping is not recorded in the first database; and in response to the determining that the received first mapping is not recorded in the first database, generating a first timestamp and persisting a first record in the first database that includes the first mapping and the first timestamp.

Resolving L2 mapping conflicts without reporter synchronization

Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).

Creating and distributing service chain descriptions

The disclosure provides an approach for computing service paths for a service chain identifying a sequence of services. One method includes including information about a plurality of hosts in a heap. Each of the plurality of hosts includes at least one service virtual computing instance (SVCI) configured to provide at least one of the services of the service chain. The information includes, for each of the plurality of hosts, a number of service paths computed for the service chain at the host and one of a number of services provided by unused SVCIs of the host or a number of consecutive services provided by unused SVCIs of the host. The method further includes selecting a host from the heap based on the information. The method further includes generating a first service path for the service chain, the first service path identifying at least one SVCI of the selected host.

Service path computation for service insertion

Specifying and distributing service chains

Some embodiments provide a method for assigning different service path identifiers to each of a set of different service paths along each of which a same set of service operations are performed on a set of packets. The method retrieves an available service path identifier from an identifier storage that stores service path identifiers for multiple service paths. The method generates a set of proposed service path identifiers based on the retrieved available service path identifier and the number of service paths in the set of service paths. The method performs a write operation on the identifier storage based on the set of proposed service path identifiers, and based on a determination that the write operation was successful, assigns the set of proposed service path identifiers to the set of service paths. Based on the set of service path identifiers, the method forwards the set of packets along the set of service paths.

Service path identifier allocation in service insertion

According to an example, mobility-aware frame aggregation may include using mobility information related to a transmitter and/or a receiver associated with transmission of data over a wireless channel to determine an aggregation size for frame aggregation of the data to be transmitted over the wireless channel. The mobility information may be based on subcarriers and antennas related to the wireless channel.

Mobility-aware frame aggregation

According to an example, mobility may be determined between a mobile device and a wireless access point (AP).

Mobility determination

According to an example, motion-aware MCS adaptation may include determining whether a device is static relative to a wireless AP, moving towards the wireless AP, or moving away from the wireless AP. A device static rate probing interval, a device moving rate probing interval, first and second frame retransmission limits, a device static PER smoothing factor, and a device moving PER smoothing factor may be determined. In response to a determination that the device is static relative to the wireless AP, moving towards the wireless AP, or moving away from the wireless AP, an appropriate rate probing interval, an appropriate frame retransmission limit, and an appropriate PER smoothing factor may be used to determine a MCS value from a plurality of available MCS values to be used for transmitting data between the device and the wireless AP.

Growing community of inventors

Palo Alto, CA, United States of America

Li Sun