Verizon Patent and Licensing Inc.

International Business Machines Corporation

Marc Cochran

Paul Michael Curtis

Kevin J Clarke

Kevin Allen Hughes

Eran Gampel

Jason Garth Pearce

John Considine

Michael J Matczynski

Alexander T Iannicelli

Alan Ross

Hubertus Franke

Christoph Raisch

Malcolm Scott Allen-Ware

Gheorghe Almasi

Guy Laden

Jeffrey Bloom

Gal Sagi

Marcio Augusto Silva

Liran Schour

Joseph Liu

Stanislaw Kowalczyk

Chitz Shung

Avinash N Suvvari

James H H Chou

A computer-implemented method for distributing packets for asymmetrical traffic by a network interface card (NIC). The computer-implemented method includes obtaining information of an incoming packet incoming from a source endpoint behind a stateful service and accessing a destination endpoint using a network address translation (NAT) service, hashing the information to calculate queue identification for the packet to direct the packet to the queue associated therewith, executing a NAT on an outgoing packet associated with the incoming packet to allow for retrieval of the queue identification from a header of the outgoing packet, sending the outgoing packet to the destination endpoint, which is responsive with a return packet, stamping the queue identification to the return packet upon the return packet being transmitted back from the destination endpoint and the queue identification being retrieved and instantiating an RSS override operation to redirect the return packet to the queue on the response.

Symmetric receive-side scaling (RSS) for asymmetric flows

A virtual machine live migration is performed. A port mirroring rule for a source virtual machine in source computer is created by a computer system such that ingress traffic received at the source computer for the source virtual machine is delivered to both the source virtual machine and a target virtual machine on a target computer. The port mirroring rule is established prior to the virtual machine live migration from the source virtual machine to the target virtual machine. The source virtual machine on the source computer is migrated by the computer system to the target virtual machine on the target computer in which the port mirroring rule directs the ingress traffic to both the source virtual machine and the target virtual machine while the source virtual machine is migrated from the source computer to the target virtual machine on the target computer during the virtual machine live migration.

Virtual machine live migration with seamless network connectivity

A virtual address of a destination of a packet is parsed into a set of virtual address components. A subset of the set of virtual address components is tokenized into a token. The token is converted into at least a portion of a hostname. A look-up of a real network address corresponding to the hostname is performed. The packet is caused to be transmitted to the real network address, wherein the real network address corresponds to a host machine on a physical network, the receiving virtual entity operating on the host machine.

Discovery-less virtual addressing in software defined networks

Embodiments for managing bare metal networking in a cloud computing environment. A network communication module that receives a configuration instruction over a direct network link from an external remote management device on a network endpoint may be initialized.

Managing bare metal networking in a cloud computing environment

A network device, of a cloud computing environment, receives a packet destined for a virtual machine of the cloud computing environment. The packet is received from a user device and via public network. The network device is associated with a first public Internet protocol (IP) address, and the virtual machine is associated with a second public IP address that is different than the first public IP address. The network device determines, based on the packet, the second public IP address associated with the virtual machine, and provides the packet to the virtual machine based on the second public IP address associated with the virtual machine.

Secure public connectivity to virtual machines of a cloud computing environment

An internal route usage information from a set of internal route usage information is analyzed to determine an encoding structure used in the internal route usage information and an external route that is referenced in internal route usage information. Using the set of internal route usage information, a subset of external route change information is selected from a set of external route change information, where each changed external route represented in the subset is usable to reach a currently used destination on an external network. A first external route change information from the subset is encoded according to the encoding structure, forming a first encoded route change data. Using the first encoded route change data, an internal router in an internal network is caused to recognize a status change in a first external route.

Propagating external route changes into a cloud network

Preparing a plurality of computer nodes to boot in a multidimensional fabric network is provided. The method includes a fabric processor (FP) generating a plurality of DHCP discovery packets using a baseboard management controller (BMC) MAC address, and placing them into the multi-host switch. A dedicated connection directly connects the BMC and the FP. All ports of the multi-host switch broadcast DHCP discovery packets into the fabric network. The BMC, FP, and switch are all within the node. A designated exit node inside the fabric connects to a provisioning node not part of the fabric. The exit node relays DHCP traffic from the fabric. A location-based IP address uniquely identifies the nodes' physical location in the fabric. The IP address is calculated based on inventory records describing physical location information about the nodes. The FP calculates a host MAC address using its IP address and configures it onto the switch.

Preparing computer nodes to boot in a multidimensional torus fabric network

A first cloud computing device includes a first virtual machine, and receives, from the first virtual machine, a packet destined for a second virtual machine provided in a second cloud computing device. The device appends, to the packet, a header that includes an address of the second cloud computing device, a virtual local area network (VLAN) identifier of the first virtual machine, and a VLAN identifier of the second virtual machine. The device provides the packet and the header to a cloud computing network for provision to the second virtual machine.

Encapsulation scheme for cloud computing environment

A device, of a cloud computing environment, includes a virtual network device that receives a packet with an address, and determines whether the packet is a broadcast packet or a unicast packet. The virtual network device processes the packet based on whether the packet is a broadcast packet or a unicast packet. The packet is transmitted to local address(es) or remote address(es) when the packet is a broadcast packet. The local address(es) is associated with at least one hardware component of the device, and the remote address(es) is associated with at least one other device, of the cloud computing environment, that is separate from the device. The packet is transmitted based on whether the address, of the packet, matches the local address(es) or the remote address(es) when the packet is a unicast packet.

Virtual network device in a cloud computing environment

A device, of a cloud computing environment, receives an instruction to create a virtual packet analyzer from a user device associated with a user. The device creates the virtual packet analyzer in the device based on the instruction, and receives a packet provided in a portion of the cloud computing environment associated with the user. The virtual packet analyzer determines information associated with the packet, and determines whether to duplicate the packet based on the information. The virtual packet analyzer processes the packet based on whether the packet is to be duplicated. A duplicate packet of the packet is generated when it is determined that the packet is to be duplicated, and is transmitted to another device to identify or resolve a problem within the portion. The packet is transmitted to a destination of the packet when it is determined that the packet is not to be duplicated.

Virtual packet analyzer for a cloud computing environment

A device, of a cloud computing environment, receives user requirements for the cloud computing environment from user device(s). Each of the user requirements is associated with a corresponding one of the user device(s). The device receives system requirements associated with the cloud computing environment. The system requirements include quality of service (QoS) requirements for computing resources of the cloud computing environment. The device generates proposed arrangement(s) of sets of computing resources, from the computing resources of the cloud computing environment, based on the user requirements and the system requirements. Each of the proposed arrangements is associated with a corresponding one of the user devices. The device provides information associated with the proposed arrangements to the user devices.

User defined arrangement of resources in a cloud computing environment

A device, of a cloud computing environment, receives an instruction to create a virtual packet tracker from a user device associated with a user, and implements the virtual packet tracker in the device based on the instruction. The virtual packet tracker: receives a packet that includes a unique value used to track the packet in a portion of the cloud computing environment associated with the user; provides the packet for routing through the portion; receives an indication that the packet is dropped at a particular resource of the portion; determines whether a problem causing the packet to be dropped can be corrected; and processes the problem based on whether the problem can be corrected. The problem is corrected when it is determined that the problem can be corrected. Information associated with the packet is transmitted to the user device when it is determined that the problem cannot be corrected.

Tracking packets through a cloud computing environment

A device receives traffic destined for a first application, and the traffic is received from a second application via a virtual machine and an indirect connection. The device determines, based on the traffic, whether the second application is a known and trusted neighbor of the first application, and establishes a direct connection between the first application and the second application, when the second application is a known and trusted neighbor of the first application. The device also applies traffic rules to the direct connection, and enables the traffic to be directly and securely communicated between the first application and the second application via the direct connection.

Growing community of inventors

Shrewsbury, MA, United States of America

Marc Cochran