Vmware, Inc.

Nicira, Inc.

Mengdie Song

Donghai Han

Pankaj Thakkar

Jianjun Shen

Qi Wu

Da Wan

Qiong Wang

Ziyou Wang

Rui Cao

Juntao Gao

Yuanhui Wang

Rahul Jain

Xu Bin Liu

Quan Tian

Haoran Chen

Wenying Dong

The disclosure provides a method for authenticating a network agent deployed in a networking environment. The method generally includes receiving, by a network controller in the networking environment, a name of an external node where the network agent is running and a token associated with the external node; in response to receiving the name of the external node, obtaining, by the network controller, a secret associated with the token; parsing, by the network controller, the secret to determine an expected external node name corresponding to the token; comparing the expected external node name with the received external node name; and trusting the network agent when the expected external node name and the received external node name match.

Securing connections between a networking and security controller and distributed agents in a container-based cluster

Example methods and systems for intent-based network virtualization design are disclosed. One example may comprise: obtaining configuration information and traffic information associated with multiple virtualized computing instances, processing the configuration information and traffic information to identify network connectivity intents and mapping the network connectivity intents to a logical network topology template. Based on a switching intent, a first group may be assigned to a logical network domain and the logical network topology template modified to include a logical switching element. Based on a routing intent, the logical network topology template may be modified to include a logical routing element. A logical network may be configured based on the modified logical network topology template to satisfy the switching intent and routing intent.

Intent-based network virtualization design

Example methods and systems for a network management entity to perform topology-aware control information dissemination in a software-defined networking (SDN) environment. The method may comprise obtaining group topology information specifying a network group, and a network configuration object that references the network group. The method may also comprise: processing the group topology information to identify, from multiple members of the network group, a first member that is relevant to a first host; and processing the group topology information to identify, from the multiple members, a second member that is irrelevant to the first host. The method may further comprise: generating and sending, to the first host, control information associated with a subset of the network group. The subset may include the first member but exclude the second member.

Topology-aware control information dissemination in software-defined networking environments

Example methods and systems for intent-based network virtualization design are disclosed. One example may comprise: obtaining configuration information and traffic information associated with multiple virtualized computing instances, processing the configuration information and traffic information to identify network connectivity intents and mapping the network connectivity intents to a logical network topology template. Based on a first switching intent, a first group may be assigned to a first logical network domain and the logical network topology template configured to include a first logical switching element. Based on a second switching intent, a second group may be assigned to a second logical network domain and the logical network topology template configured to include a second logical switching element. Based on a routing intent, the logical network topology template may be configured to include a logical routing element.

Some embodiments provide a method for a network controller. The method receives network configuration data including an association of an entity configuration profile set with a logical network entity. The entity configuration profile set is a group of at least two entity configuration profiles for different types of settings to apply to logical network entities with which the entity configuration profile set is associated. The method identifies a host machine at which the logical network entity is implemented. The method distributes the entity configuration profile set and each of the at least two entity configuration profiles to the identified host machine.

Application of profile setting groups to logical network entities

Some embodiments provide a method for a network controller. The method receives network configuration data including an association of an entity configuration profile to a logical entity group that references at least two logical network entities. The entity configuration profile includes a set of configuration settings to apply to logical network entities with which the entity configuration profile is associated. The method associates the entity configuration profile with the logical network entities referenced by the logical entity group. Based on the associations of the entity configuration profile with the logical network entities, the method determines multiple host machines that require the configuration data for the entity configuration profile. The method distributes the entity configuration profile to the host machines.

Growing community of inventors

Beijing, China

Mengdie Song