Microsoft Technology Licensing, LLC

Pranjal Shrivastava

Rishabh Tewari

Deepak Bansal

Avijit Gupta

Abhishek Shukla

James Wesley Boerner

Nisheeth Srivastava

Vinayak Uppunda Padiyar

Rangaprasad Narasimhan

Neeraj Motwani

Vaibhav Kumar

Sumit Sharad Dhoble

Manasi Deval

Geoffrey Hugh Outhred

Lihua Yuan

Harish Kumar Chandrappa

Parag Sharma

Jun Tse Chen

Madhan Sivakumar

Abhishek Ellore Sreenath

Guohan Lu

Hang Kwong Lee

Sushant Sharma

Gerald Roy De Grace

Qiming Chen

Sumeet Mittal

Anish Sagar Narsian

Anitha Adusumilli

Arun Jeedigunta Venkata Satya

Zexuan Zhao

Weixi Chen

Sirshak Das

Sahil Aggarwal

Sonia Sharma

Bhushan Vinayak Bhise

Devan Harikumar

Bidirectional flows of a communication session in a software defined network (SDN) are efficiently managed. A smart switch comprises a digital processing unit (DPU) complex comprising one or more DPUs, and a switching complex comprising one or more network processing units (NPUs). The DPU complex is configured to disaggregate enforcement of policies of the SDN from hosts of the SDN. The switching complex is configured to perform network routing of packets in the SDN. The hosts are implemented on servers communicatively coupled to network interfaces of the SDN. The switching complex is configured to perform policy enforcement of data flows for communication sessions that are offloaded from the DPU complex to the switching complex.

Smart switch for offloading high bandwidth flows in a software defined network

Systems and methods for enabling access to dedicated resources in a virtual network using top of rack switches are disclosed. A method includes a virtual filtering platform encapsulating at least one packet, received from a virtual machine, to generate at least one encapsulated packet comprising a virtual network identifier (VNI). The method further includes a TOR switch: (1) receiving the at least one encapsulated packet and decapsulating the at least one encapsulated packet to create at least one decapsulated packet, (2) using the VNI to identify a virtual routing and forwarding artifact to determine a virtual local area network interface associated with the dedicated hardware portion, and (3) transmitting the at least one decapsulated packet to the dedicated hardware portion based on at least one policy provided by a controller, where the at least one policy comprises information related to a customer of the service provider.

Enabling access to dedicated resources in a virtual network using top of rack switches

A virtual network comprising virtual machines executing at a computing environment is implemented. A flexibly extensible NIC (eNIC) is executed at a software defined networking (SDN) appliance. A data packet is received that is addressed to a host that is connected to the virtual network. Based on a layer 2 address and a network identifier, the virtual switch identifies the host represented by the eNIC that is associated with the data packet. A policy associated with the host is determined and applied to the data packet. The policy is dynamically adjustable based on the host.

Injecting network endpoints into a SDN

A virtual network comprising virtual machines executing at a computing environment is implemented. A software defined networking (SDN) appliance is configured to provide a connection to computing resources via a virtual network of a virtual computing environment. The SDN appliance is configured to apply policies of the virtual computing environment to data traffic on the virtual network. The SDN appliance is operable to interact with multiple network devices that are configured to act as a hardware acceleration device for processing data traffic. Virtual addresses are assigned to the network devices. The SDN appliance executes a virtual switch configured to identify data traffic sent to or received from a host and act as a proxy for the network devices and respond on their behalf.

Software defined networking operations for programmable connected devices

The techniques described herein enable a private connectivity solution between a virtual network of a service consumer and a virtual network of a service provider in a cloud-based platform. The techniques map a service (e.g., one or more workloads or containers) executing in the virtual network of the service provider into the virtual network of the service consumer. The mapping uses network address translation (NAT) that is performed by the cloud-based infrastructure. As a result of the techniques described herein, a public Internet Protocol (IP) address does not need to be used to establish a connection thereby alleviating privacy and/or security concerns for the virtual networks of the service provider and/or the service consumer that are hosted by the cloud-based platform.

Mapping a service into a virtual network using source network address translation

Growing community of inventors

Redmond, WA, United States of America

Pranjal Shrivastava