Microsoft Technology Licensing, LLC

Neha Aggarwal

Rishabh Tewari

Xinyan Zan

Nisheeth Srivastava

Naveen Prabhat

Abhishek Shukla

Parag Sharma

Ashish Bhargava

Abhishek Ellore Sreenath

Harish Kumar Chandrappa

Michal Czeslaw Zygmunt

Avijit Gupta

Fengfen Liu

Gabriel Silva

Ganesh Srinivasan

Deven Jagasia

Karthik Ananthakrishnan

Abhijeet Kumar

Aanand Ramachandran

Chandan Aggarwal

Sumit Sharad Dhoble

Wei Xia

Sudhir Goel

Evan Alexander Baker

Chandrasekar Srinivasan

Matthew Francis Long

Trilok Nuwal

Alok Upadhyay

Maitrey Kumar

A virtual network provider system supports a virtual network including virtual machines that are each assigned to an underlay address of an underlay addressing scheme. The virtual network provider system further includes multiple routing domains each defined to include a different subset of the virtual machines. Each of the routing domains is assigned to a range of overlay addresses of an overlay addressing scheme. For each routing domain, the assigned range of overlay addresses is allocated among the subset of the virtual machines in the routing domain. The system further includes a virtual network host configured to use addresses of the overlay addressing scheme to selectively route messages between endpoints on select pairs of the virtual machines assigned to a same routing domain of the plurality of routing domains.

Overlay scheme for container addressing in virtual networks

A virtual network interface controller (NIC) associated with a virtual machine in a cloud computing network is configured to support one or more network containers that encapsulate networking configuration data and policies that are applicable to a specific discrete computing workload to thereby enable the virtual machine to simultaneously belong to multiple virtual networks using the single NIC. The network containers supported by the NIC can be associated with a single tenant to enable additional flexibility such quickly switching between virtual networks and support pre-provisioning of additional computing resources with associated networking policies for rapid deployment. The network containers can also be respectively associated with different tenants so that the single NIC can support multi-tenant services on the same virtual machine.

Multi-tenant support on virtual machines in cloud computing networks

The disclosed system implements techniques to enable a tenant of a cloud-based platform to effectively and efficiently apply a policy that copies data packets communicated to or from a virtual machine in the tenant's own virtual network. When applied, the policy mirrors data traffic associated with a workload executing on a virtual machine in the tenant's virtual network. To mirror the data traffic, a copy of a data packet is streamed to another virtual machine so that network analytics can be performed (e.g., performance analytics, security analytics, etc.). In various examples, the policy can be a role-based mirroring policy that defines a plurality of roles in association with a role-based access model that scales operations and that provides improved security for a tenant's virtual network.

Mirroring virtual network traffic

Growing community of inventors

Seattle, WA, United States of America

Neha Aggarwal