Vmware, Inc.

Nicira, Inc.

Wmware, Inc.

Vmare, Inc.

Highway9 Networks, Inc.

Serge Maskalik

Jayant Jain

Anirban Sengupta

Ronghua Zhang

Xinhua Hong

Raju Koganty

Sachin Thakkar

Debashis Basak

Allwyn M Sequeira

Aravind Srinivasan

Weiqing Wu

Uday Suresh Masurekar

Narendra Kumar Basur Shankarappa

Kaushal Bansal

Mohan Parthasarathy

Rick Lund

Shadab Shah

Todd Sabin

Abhinav Vijay Bhagwat

Mark Bryan Whipple

Govind Haridas

Rajiv Ramanathan

Kai-Wei Fan

Srinivas Neginhal

Benjamin C Basler

David J Leroy

Ansis Atteka

Ariel Tubaltsev

Sreeram Kumar Ravinoothala

Aarti Kumar Gupta

Minjal Agarwal

Hemanth Kumar Pannem

Akshatha Sathyanarayan

Laxminarayana Tumuluru

Anand Pritam

Siddharth Ekbote

Manjunath Bandi

Leon Cui

Bhaskar Subramanyam Annadata

Abhijeet Deshpande

Gabriel Rosas

Vemana Murty

Bob Sheehan

Some embodiments of the invention provide a novel method for specifying firewall rules. In some embodiments, the method provides the ability to specify for a particular firewall rule, a set of network nodes (also called a set of enforcement points below) at which the particular firewall should be enforced. To provide this ability, the method of some embodiments adds an extra tuple (referred to below as the AppliedTo tuple) to a firewall rule. This added AppliedTo tuple lists the set of enforcement points at which the firewall rule has to be applied (i.e., enforced).

Method and apparatus for distributing firewall rules

Some embodiments provide a novel method for load balancing data messages that are sent by a source compute node (SCN) to one or more different groups of destination compute nodes (DCNs). In some embodiments, the method deploys a load balancer in the source compute node's egress datapath. This load balancer receives each data message sent from the source compute node, and determines whether the data message is addressed to one of the DCN groups for which the load balancer spreads the data traffic to balance the load across (e.g., data traffic directed to) the DCNs in the group. When the received data message is not addressed to one of the load balanced DCN groups, the load balancer forwards the received data message to its addressed destination. On the other hand, when the received data message is addressed to one of load balancer's DCN groups, the load balancer identifies a DCN in the addressed DCN group that should receive the data message, and directs the data message to the identified DCN. To direct the data message to the identified DCN, the load balancer in some embodiments changes the destination address (e.g., the destination IP address, destination port, destination MAC address, etc.) in the data message from the address of the identified DCN group to the address (e.g., the destination IP address) of the identified DCN.

Inline load balancing

Some embodiments provide a network system. The network system includes a first set of host machines for hosting virtual machines that connect to each other through a logical network. The first set of host machines includes managed forwarding elements for forwarding data between the host machines. The network system includes a second set of host machines for hosting virtualized containers that operate as gateways for forwarding data between the virtual machines and an external network. At least one of the virtualized containers peers with at least one physical router in the external network in order to advertise addresses of the virtual machines to the physical router.

Route advertisement by managed gateways

A private mobile network supports information technology (IT) needs of an organization of any type and size. The private mobile network may be customized and scaled to meet the changing IT needs of the organization. It provides a common virtual network fabric by which all of the disparate networks of the organization can be bridged together and across multiple locations, and may be integrated with existing IT software and hardware of the organization, even proprietary software and hardware. The private mobile network may be accessed by devices through existing access mechanisms and through a radio access network. In addition, any device accessing the private mobile network is associated with a user identifier, such as an e-mail address assigned to the user by the organization, so that the user can be identified regardless of which device was used in accessing the private mobile network.

Private mobile network having network edges deployed across multiple sites

An example method of provisioning a network service in a cloud computing system includes: defining, at an orchestrator, the network service to include a plurality of network functions; defining, at the orchestrator, network connectivity among the plurality of network functions; identifying a plurality of vendor device managers (VDMs) configured to provision virtual network functions that implement the plurality of network functions; and instructing, by the orchestrator, the VDMs to deploy the virtual network functions having the defined network connectivity.

Service chaining of virtual network functions in a cloud computing system

A method of deploying a network service across a plurality of data centers, includes the steps of: in response to a request for or relating to a network service, identifying virtual network functions associated with the network service and determining network connectivity requirements of the virtual network functions, issuing commands to provision a virtual link between at least two of the data centers in which the virtual network functions are to be deployed.

Multi-site hybrid networks across cloud environments

A method of deploying a network service (NS) across multiple data centers includes identifying virtual network functions (VNFs) associated with the NS in response to a request for or relating to the NS, generating commands to deploy VNFs based on VNF descriptors, and issuing the commands to the data centers to deploy VNFs. The data centers each have a cloud management server in which cloud computing management software is run to provision virtual infrastructure resources thereof for a plurality of tenants. The cloud computing management software of a first data center is different from the cloud computing management software of a second data center, and the commands issued to the first and second data centers are each a generic command that is not in a command format of the cloud computing management software of either the first data center or the second data center.

Multi-site virtual infrastructure orchestration of network service in hybrid cloud environments

A method of deploying a virtual network function of a network service in a data center having a cloud management server running a cloud computing management software to provision virtual infrastructure resources of the data center to at least one tenant, includes generating at least first and second API calls to the cloud computing management software in response to external commands received at the data center to deploy a virtual network function, and executing at least the first and second API calls by the cloud computing management software to deploy the virtual network function. The cloud computing management software creates at least one virtual machine by executing the first API call and at least one virtual disk by executing the second API call.

A method of deploying a network service across a plurality of data centers, includes the steps of: in response to a request for or relating to a network service, identifying virtual network functions associated with the network service and determining network connectivity requirements of the virtual network functions, issuing commands to provision a first virtual link between at least two of the data centers in which the virtual network functions are to be deployed, and issuing commands to provision a second virtual link to one of the data centers in which the virtual network functions are to be deployed.

Techniques disclosed herein relate to migrating virtual computing instances such as virtual machines (VMs). In one embodiment, VMs are migrated across different virtual infrastructure platforms by, among other things, translating between resource models used by virtual infrastructure managers (VIMs) that manage the different virtual infrastructure platforms. VM migrations may also be validated prior to being performed, including based on resource policies that define what is and/or is not allowed to migrate, thereby providing compliance and controls for borderless data centers. In addition, an agent-based technique may be used to migrate VMs and physical servers to virtual infrastructure, without requiring access to an underlying hypervisor layer.

Mobility passport for cross-datacenter migrations of virtual computing instances

Hypervisor agnostic cloud mobility across virtual infrastructures

A method of deploying a network service across multiple data centers, each having a cloud management server running a cloud computing management software to provision virtual infrastructure resources thereof for a first tenant among a plurality of tenants, includes maintaining for each data center static inventory data that indicate virtual infrastructure resources that are available thereat to the first tenant, identifying, in response to a network service request for the first tenant, a virtual network function associated with the network service, generating commands to deploy the virtual network function based on a descriptor of the virtual network function, selecting one of the data centers in which the virtual network function is to be deployed based on the descriptor of the virtual network function and the static inventory data of each data center, and issuing the commands to the selected data center to deploy the virtual network function.

Intelligent distributed multi-site application placement across hybrid infrastructure

One or more examples provide techniques for providing a multi-site wide area network in a cloud computing system. In an example, a method of providing a multi-site wide area network (WAN) in a cloud computing system includes: creating a plurality of sites; creating a compute profile in each of the plurality of sites, each compute profile having a compute cluster of virtual machines (VMs); creating a service mesh having the compute profile of each of the plurality of sites; and deploying an application to the service mesh.

Multi-site wide area network in a cloud computing system

Virtual infrastructure platform mobility

Growing community of inventors

Los Gatos, CA, United States of America

Serge Maskalik