Microsoft Technology Licensing, LLC

Xinyan Zan

Deepak Bansal

Parveen Kumar Patel

Rishabh Tewari

Nisheeth Srivastava

Abhishek Shukla

Naveen Prabhat

Harish Kumar Chandrappa

Parag Sharma

Ashish Bhargava

Jayesh Kumaran

Daniel Max Firestone

Sushant Pramod Rewaskar

Mohammad Shabbir Alam

Poovanpilli G Madhavan

Zhong Deng

Md Daud Hossain Howlader

Sharad Mittal

Ankur Agiwal

Frank Li

John-Paul M Stewart

Young Lee

Michal Czeslaw Zygmunt

Milan Dasgupta

Vishal Taneja

Neha Aggarwal

Sheng Lu

Anil A Ingle

Abhishek Ellore Sreenath

Hemant Kumar

Nimish Aggarwal

Adarsh Kirnelli Rangaiah

Eric Lawrence Albert Lantz

Kaihua Xu

David A Maltz

Sanjay N Kaniyar

Lihua Yuan

Neeraj Garg

Murali Krishna Sangubhatla

Wei Zhao

Amit A Sehgal

Avijit Gupta

Chandramouleswaran Ravichandran

Gabriel Silva

Ganesh Srinivasan

Deven Jagasia

Fengfen Liu

Neeraj Motwani

Vaibhav Kumar

Karthik Ananthakrishnan

Sumit Sharad Dhoble

David Michael Brumley

Kalven Wu

Anavi Arun Nahar

Vladimir Serov

Narayan Annamalai

Maitrey Kumar

Chandrasekar Srinivasan

Wei Xia

Leiwen Deng

Daud Hossain Howlader

Anil Ingle

A hybrid state for a virtual machine (VM) in a cloud computing system enables a VM to communicate with other VMs that belong to a virtual network (VNET VMs) while maintaining connectivity with other VMs that do not belong to the virtual network (non-VNET VMs). A non-VNET VM can be transitioned to a hybrid VM that operates in a hybrid state. The hybrid VM can be assigned a private virtual IP address (VNET address) for communication with other VNET VMs. The hybrid VM can continue to use a physical IP address to communicate with other non-VNET VMs. In this way, the hybrid VM is able to maintain connectivity with other non-VNET VMs during and after migration to the VNET. A network stack can be configured to process data packets that are destined for non-VNET VMs differently from data packets that are destined for VNET VMs.

Support of virtual network and non-virtual network connectivity on the same virtual machine

The disclosed technology is generally directed to virtual machines. In one example of the technology, a network change from a first virtual network to a second virtual network is reconfigured for a first virtual machine that is executing on a first virtual machine host. The reconfiguring includes the following. In the first virtual machine host, a mapping change from the first virtual network to the second virtual network is configured by reprogramming drivers in the first virtual machine host for route mapping for the second virtual network. A Dynamic Host Configuration Protocol (DHCP) retrigger is caused without rebooting the first virtual machine. A configuration file is provided to the first virtual machine. The configuration file includes user-specific networking settings. The first virtual machine is reconfigured in accordance with the user-specific networking settings.

Virtual machine client-side virtual network change

Described herein are systems and methods for supporting multicast for virtual networks. In some embodiments, a native multicast approach can utilized in which packet replication is performed on a host node of a virtual machine (VM) with a multicast data packet encapsulated in uniquely address unicast packets. In some embodiments, a network virtual appliance can be utilized. A multicast packet sent from the VM can be unicasted to the network virtual appliance. The multicast appliance can then replicate the packet into multiple copies and send the packets to the receivers in the virtual network as unicast data packets encapsulating the multicast packet.

Multi-cast support for a virtual network

A distributed resource may be mapped into a virtual network, where the resource is distributed across a large number of nodes that are uniquely addressable within the distributed resource service's address space. The resource can be represented using a relatively small number of private VIP addresses within the virtual network, while still enabling access to all of the nodes that are uniquely addressable within the address space of the distributed resource service. A resource map may be created that relates the distributed resource service's address space to the virtual network's address space. The resource map may be used by a gateway that facilitates access to a distributed resource by clients. The resource map may also be used to translate packets that are sent from clients within a virtual network into the distributed resource service's address space.

Efficiently mapping a distributed resource to a virtual network

A virtual network interface controller (NIC) associated with a virtual machine in a cloud computing network is configured to support one or more network containers that encapsulate networking configuration data and policies that are applicable to a specific discrete computing workload to thereby enable the virtual machine to simultaneously belong to multiple virtual networks using the single NIC. The network containers supported by the NIC can be associated with a single tenant to enable additional flexibility such quickly switching between virtual networks and support pre-provisioning of additional computing resources with associated networking policies for rapid deployment. The network containers can also be respectively associated with different tenants so that the single NIC can support multi-tenant services on the same virtual machine.

Multi-tenant support on virtual machines in cloud computing networks

The disclosed system implements techniques to enable a tenant of a cloud-based platform to effectively and efficiently apply a policy that copies data packets communicated to or from a virtual machine in the tenant's own virtual network. When applied, the policy mirrors data traffic associated with a workload executing on a virtual machine in the tenant's virtual network. To mirror the data traffic, a copy of a data packet is streamed to another virtual machine so that network analytics can be performed (e.g., performance analytics, security analytics, etc.). In various examples, the policy can be a role-based mirroring policy that defines a plurality of roles in association with a role-based access model that scales operations and that provides improved security for a tenant's virtual network.

Mirroring virtual network traffic

A DHCP server implementation includes transmission of a DHCP packet from a virtual machine executing on a server node to a node agent executing on the server node, generation, by the node agent, of a DHCP response packet based on the DHCP packet and on DHCP information previously stored in a local memory of the server node, and transmission of the DHCP response packet from the node agent to the virtual machine. Neither the DHCP packet transmitted by the virtual machine nor the DHCP response packet are transmitted out of the server node.

On-node DHCP implementation for virtual machines

Virtual networks located in different regions of cloud provider are peered using unique regional identifiers for the virtual networks. The regional identifiers and other information are pushed down a network management stack to implement the peering.

Cross-regional virtual network peering

Techniques are disclosed for capturing network traffic in a virtualized computing environment. A packet to be captured in the virtualized environment is identified. The packet is tagged using a pattern of one or more bits in a header of the packet. The pattern indicates that the packet is to be traced. The pattern is propagated to an outer layer during encapsulation of the packet. A header of the encapsulated packet includes the pattern of one or more bits. At least one network device is caused to mirror identified packets based on the reserved bit.

Packet capture via packet tagging

The disclosed technology is generally directed to virtual machines. In one example of the technology, generic virtual machine artifacts are created. The generic virtual machine artifacts include at least one generic compute artifact and at least one generic network artifact. A first virtual machine is composed and booted with the generic virtual machine artifacts. The first virtual machine is caused to enter a state in which the first virtual machine is polling for a configuration with user-specific compute settings, user-specific networking settings, and user-specific storage settings.

Deployment of partially provisioned virtual machines

Growing community of inventors

Sammamish, WA, United States of America

Xinyan Zan