Microsoft Technology Licensing, LLC

Neeraj Motwani

Rishabh Tewari

Deepak Bansal

Nisheeth Srivastava

Vaibhav Kumar

Abhishek Shukla

Avijit Gupta

Vinayak Uppunda Padiyar

Rangaprasad Narasimhan

Pranjal Shrivastava

James Wesley Boerner

Daniel Max Firestone

Xinyan Zan

Harish Kumar Chandrappa

Parag Sharma

Vivek Bhanu

Jie Li

Michal Czeslaw Zygmunt

Ashish Bhargava

Madhan Sivakumar

Milan Dasgupta

Vishal Taneja

Abhijeet Kumar

David Michael Brumley

Anavi Arun Nahar

Vladimir Serov

Narayan Annamalai

Mohamed N Hassan

A virtual network manager and associated user interface/portal provide customers with simplified centralized management of virtual networks to implement logical groupings of network resources at scale. The virtual network manager enables network segmentation using names or tags, connectivity configuration to create different virtual network topologies, security configuration to provide enforcement of organizational rules without being overwritten and Network Security Group (NSG) management in a simple and scalable manner, safe deployment of network configurations to designated regions on a fix and roll forward basis, and virtual network (VNet) level monitoring.

Logical grouping of network resources and control at scale

Systems and methods for enabling access to dedicated resources in a virtual network using top of rack switches are disclosed. A method includes a virtual filtering platform encapsulating at least one packet, received from a virtual machine, to generate at least one encapsulated packet comprising a virtual network identifier (VNI). The method further includes a TOR switch: (1) receiving the at least one encapsulated packet and decapsulating the at least one encapsulated packet to create at least one decapsulated packet, (2) using the VNI to identify a virtual routing and forwarding artifact to determine a virtual local area network interface associated with the dedicated hardware portion, and (3) transmitting the at least one decapsulated packet to the dedicated hardware portion based on at least one policy provided by a controller, where the at least one policy comprises information related to a customer of the service provider.

Enabling access to dedicated resources in a virtual network using top of rack switches

A network appliance is configured to receive a packet having an address of a custom device as a source address. Policies are accessed that are applicable to a virtual network associated with the custom device. The policies are applied to the packet. A hairpin layer redirects the packet to a destination address contained in the packet. For subsequent packets, application of the policies is bypassed to the subsequent packets. Application of the policies is offloaded to an acceleration device.

Third-party hardware integration in virtual networks

Virtual networks located in different regions of cloud provider are peered using unique regional identifiers for the virtual networks. The regional identifiers and other information are pushed down a network management stack to implement the peering.

Cross-regional virtual network peering

Growing community of inventors

Sammamish, WA, United States of America

Neeraj Motwani