Nicira, Inc.

Oracle International Corporation

Shrikrishna Khare

Wenyi Jiang

Guolin Yang

Rajeev Nair

Ayyappan Veeraiyan

Aditya Gajanana Holla

Nicolas G Droux

Subin Cyriac Mathew

Boon Seong Ang

Rishi Mehta

Aditya Krishna Sonthy

Craige Wenyi Jiang

Described herein are systems, methods, and software to enhance the management of packet filters for host computing systems. In one implementation, a method of managing packet filters for a physical network interface on a host computing system includes obtaining dispatch statistics for media access control (MAC) addresses associated with virtual nodes communicating over the physical network interface via a virtual switch. After obtaining the dispatch statistics, the method further provides identifying a filter configuration based on the dispatch statistics, wherein the filter configuration classifies received packets at the physical network interface into processing queues based on attributes identified in the received packets, and applying the filter configuration in the physical network interface.

Enhanced network processing of virtual node data packets

An approach for dynamically distributing RSS engines to virtual machines based on flow data is disclosed. A method comprises receiving first absolute counts of data packets that belong to at least one data flow. Flow load indicator values are computed based on the first absolute counts, and stored in a lookup table. A sorted table is generated by sorting entries of the lookup table. A first count of filters that can be applied on RSS engines is determined. A second count of data flows in the sorted table and having corresponding flow load indicator values exceeding a threshold value is determined. If the second count exceeds the first count, then the first count of data flows is selected from the sorted table. The first count of filters that correspond to the data flows is determined, and the first count of the filters is assigned to at least one RSS engine.

Dynamic distribution of RSS engines to virtual machines based on flow data

Described herein are systems, methods, and software to enhance the management of packet filters for host computing systems. In one implementation, a computing system may identify media access control (MAC) addresses and communication statistics for virtual nodes communicating over physical network interfaces of the computing system. The computing system may further prioritize the MAC addresses based on the virtual network interface ports and physical network interface ports that the MAC addresses were identified on, and generate a filter configuration for the physical network interfaces based on the prioritization and the communication statistics.

Network packet filtering via media access control (MAC) address learning

Example methods are provided for a host to perform Media Access Control (MAC) address learning in a virtualized computing environment. The host includes multiple physical network interface controllers (NICs) configured as a team. The method may comprise: in response to detecting an egress packet that includes a source MAC address from a virtualized computing instance, learning address mapping information that associates the source MAC address with a virtual port; and sending the egress packet to a physical network via a first physical NIC selected from the team based on a NIC teaming policy. The method may also comprise: in response to detecting an ingress packet that also includes the source MAC address, determining whether the source MAC address has moved based on whether the ingress packet is received via the first physical NIC, or a second physical NIC from the team, but otherwise, maintaining the address mapping information.

Media access control (MAC) address learning in virtualized computing environments

A method for remapping VNICs associated with an aggregation layer. The method includes making a first determination that a first network interface card (NIC) has failed, where the first NIC and a second NIC are part of the aggregation group, the aggregation layer manages the aggregation group, where a first virtual NIC (VNIC) is mapped to the first NIC and a second VNIC is mapped to the second NIC, and the first NIC is connected to a first switch and the second NIC is connected to a second switch. The method further includes, based on the first determination, remapping the first VNIC to the second NIC, and after the remapping, receiving packets by the first VNIC from the second NIC.

Growing community of inventors

Sunnyvale, CA, United States of America

Shrikrishna Khare