Vmware, Inc.

Packeteer, Inc.

Suresh Babu Muppala

Amarnath Palavalli

Ganesan Chandrashekhar

Pavlush Margarian

Josh Dorr

Sirisha Myneni

Medhavi Dhawan

Venkatakrishnan Rajagopalan

Alexander Rogozinsky

Sukhdev Singh

Azeem Feroz

Farzad Ghannadian

Nafisa Mandliwala

Some embodiments provide a method for one of multiple shared API processing services in a container cluster that implements a network policy manager shared between multiple tenants. The method receives a configuration request from a particular tenant to modify a logical network configuration for the particular tenant. Configuration requests from the plurality of tenants are balanced across the plurality of shared API processing services. Based on the received configuration request, the method posts a logical network configuration change to a configuration queue in the cluster. The configuration queue is dedicated to the logical network of the particular tenant. Services are instantiated separately in the container cluster for each tenant to distribute configuration changes from the respective configuration queues for the tenants to datacenters that implement the tenant logical networks such that configuration changes for one tenant do not slow down processing of configuration changes for other tenants.

Sharing network manager between multiple tenants

Described herein are systems, methods, and software to manage communication rates between applications in a tiered application computing environment. In one implementation, a load service monitor load information associated with applications that each execute using one or more virtual nodes. The load service further determines that the load information associated with an application of the applications satisfy one or more load criteria and identifies at least one application that communicates requests to the application. Once identified, the load service communicates a notification to the at least one application to update a communication request configuration to the application.

Managing communication rates between applications in a tiered application computing environment

Some embodiments provide a method for a global manager that manages a logical network configuration for multiple datacenters that each have a local manager for managing the logical network configuration within the datacenter. Based on detecting that a connection to a particular local manager of a particular datacenter has been restored after a period of unavailability, the method identifies a portion of the logical network configuration that is relevant to the particular datacenter. In a series of transactions, the method transfers the identified portion of the logical network configuration to the particular local manager. During the series of transactions, the method identifies modifications to the identified portion of the logical network configuration to be included in the series of transactions. Upon completion of the series of transactions, the method transfers a notification to the particular local manager indicating completion of the series of transactions.

Synchronization of logical network state between global and local managers

Some embodiments provide a method for distributing rules associated with a particular logical network element that is implemented across one or more physical sites. The method uses a set of attributes of a set of elements associated with the particular logical network element to identify a particular set of physical sites spanned by the particular logical network element. The method identifies a set of rules associated with the particular logical network element. The method distributes the identified set of rules to each site of the identified set of physical sites.

Determining span of logical network element

The disclosure provides an approach for rate limiting packets in a network. Embodiments include receiving, by a rate limiting engine running on a host machine, a network event related to a virtual computing instance running on the host machine, the network event comprising flow information about a network flow. Embodiments include receiving, by the rate limiting engine, context information corresponding to the network flow, wherein the context information comprises one or more of a user characteristic or an application characteristic. Embodiments include determining, by the rate limiting engine, a priority for the network flow by applying a rate limiting policy to the flow information and the context information. Embodiments include providing, by the rate limiting engine, the priority for the network flow to a multiplexer for use in rate limiting the network flow.

Context-aware rate limiting

Some embodiments provide a method for collecting data regarding realized state associated with a logical network spanning multiple physical sites. At a global manager that manages a logical network, the method receives a request to collect realized state for a set of one or more logical network elements, each of which spans a set of two or more physical sites. Each physical site is managed by a local manager. For each of the logical network elements, the method identifies the set of physical sites spanned by the logical network element. For each of the logical network elements, the method sends requests for realized state of the logical network element to the local manager of each identified physical site spanned by the logical network element. The method generates a report for presentation from the realized states received from the local managers.

Presenting realized state of multi-site logical network

A method for controlling data rate at an application layer. The method, in a particular implementation, includes identifying an application-layer message corresponding to a network application, wherein the application-layer message is transmitted in a first direction from a first host to a remote host and is operable to cause the remote host to transmit one or more responsive messages to the first host. A queuing delay is computed for the application-layer message and transmission of the application-layer message across a link to the remote host is delayed according to the queuing delay wherein the computed queuing delay is based at least in part on utilization of the link in a direction opposite the first direction of network traffic corresponding to the network application.

Application-aware rate control

Methods, apparatuses and systems directed to the coordinated classification of network traffic. In one implementation, the present invention enables a coordinated network environment for traffic classification where an upstream network device classifies a data flow and adds traffic class information to at least one packet in the data flow. Downstream network devices in the communications path to the destination host can use the traffic class information in the modified packet, bypassing at least some of the local traffic classification operations and thereby reducing CPU utilization. In one implementation, the last downstream network device strips the traffic classification information from the modified packet before it is forwarded to the destination host. Embodiments of the invention reduce or eliminate redundant network traffic classification operations performed by a plurality of network devices in a communications path.

Coordinated environment for classification and control of network traffic

Methods, apparatuses and systems directed to a network traffic classification mechanism that probes hosts against one or more network application profiles to facilitate identification of network applications corresponding to data flows traversing a network.

Growing community of inventors

Cupertino, CA, United States of America

Suresh Babu Muppala