# US 10,374,972 B2 · Virtual flow network in a cloud environment > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,374,972 B2 - Document ID: US10374972B2 - Status: Granted - Kind: B2 - Application number: 14/711,444 - Filed: 2015-05-13 - Published: 2015-11-19 - Granted: 2019-08-06 - Earliest claimed: 2014-05-13 - Assignees: Telefonaktiebolaget LM Ericsson (publ) - Applicants: Benoit Tremblay; Suresh Krishnan - Inventors: Benoit Tremblay; Suresh Krishnan - Web page: https://patentgrep.com/patent/US10374972B2 ## CPC - H04L 41/12: Discovery or management of network topologies - H04L 41/40: using virtualisation of network functions or resources, e.g. SDN or NFV entities - H04L 45/14: {Routing performance; Theoretical aspects} - H04L 45/586: of virtual routers - H04L 45/64: using an overlay routing layer - H04L 47/2441: relying on flow classification, e.g. using integrated services [IntServ] - H04L 47/783: Distributed allocation of resources, e.g. bandwidth brokers - H04L 49/35: Switches specially adapted for specific applications - H04L 49/70: {Virtual switches} - H04L 45/42: Centralised routing - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system and method for virtualizing a flow switch to be used by application providers in a cloud computing environment is provided. An application provider's packet handling rules are received by a cloud management system. The rules are translated from the application provider's overlay topology to the underlay data center topology. The underlay network elements involved in the received rules can be identified. A translated rule can be decomposed into a plurality of rule portions which are transmitted to the appropriate underlay network elements. ## Claims ### Claim 1 A method for distributing flow rules comprising: receiving a packet handling rule, the rule including a match field and an associated action to be applied to incoming packets, the match field including an overlay network ingress port; translating the packet handling rule from an overlay network topology to an underlay network topology; determining that the match field maps to a first underlay switch and the action maps to a second underlay switch in accordance with mapping the overlay network ingress port to an underlay network ingress port on the first underlay switch; decomposing the translated packet handling rule into a first rule portion, including the match field, associated with the first underlay switch and a second rule portion, including the action, associated with the second underlay switch; and transmitting the first rule portion to the first underlay switch and the second rule portion to the second underlay switch. ### Claim 2 (depends on 1) The method of claim 1, further comprising modifying the first rule portion by adding a first action to forward incoming packets to the second underlay switch. ### Claim 3 (depends on 1) The method of claim 1, further comprising modifying the first rule portion by adding a second action to tag incoming packets with a flow identifier. ### Claim 4 (depends on 3) The method of claim 3, further comprising modifying the second rule portion by adding a first match field corresponding to the flow identifier. ### Claim 5 (depends on 1) The method of claim 1, further comprising, responsive to determining that the match field does not specify an ingress port, transmitting the first rule portion to a plurality of underlay switches. ### Claim 6 (depends on 1) The method of claim 1, wherein the action includes an overlay network egress port. ### Claim 7 (depends on 6) The method of claim 6, further comprising mapping the overlay network egress port to an underlay network egress port on the second underlay switch. ### Claim 8 A network node for distributing rules, the network node comprising a processor and a memory, the memory containing instructions executable by the processor whereby the network node is operative to: receive a packet handling rule, the rule including a match field and an associated action to be applied to incoming packets, the match field including an overlay network ingress port; translate the packet handling rule from an overlay network topology to an underlay network topology; determine that the match field maps to a first underlay switch and the action maps to a second underlay switch in accordance with mapping the overlay network ingress port to an underlay network ingress port on the first underlay switch; decompose the translated packet handling rule into a first rule portion, including the match field, associated with the first underlay switch and a second rule portion, including the action, associated with the second underlay switch; and transmit the first rule portion to the first underlay switch and the second rule portion to the second underlay switch. ### Claim 9 (depends on 8) The network node of claim 8, further operative to modify the first rule portion by adding a first action to forward incoming packets to the second underlay switch. ### Claim 10 (depends on 8) The network node of claim 8, further operative to modify the first rule portion by adding a second action to tag incoming packets with a flow identifier. ### Claim 11 (depends on 10) The network node of claim 10, further operative to modify the second rule portion by adding a first match field corresponding to the flow identifier. ### Claim 12 (depends on 8) The network node of claim 8, further operative to transmit the first rule portion to a plurality of underlay switches responsive to determining that the match field does not specify an ingress port. ### Claim 13 (depends on 8) The network node of claim 8, wherein the action includes an overlay network egress port. ### Claim 14 (depends on 13) The network node of claim 13, further comprising mapping the overlay network egress port to an underlay network egress port on the second underlay switch. ### Claim 15 A non-transitory computer readable storage medium storing executable instructions, which when executed by a processor, cause the processor to: receive a packet handling rule, the rule including a match field and an associated action to be applied to incoming packets, the match field including an overlay network ingress port; translate the packet handling rule from an overlay network topology to an underlay network topology; determine that the match field maps to a first underlay switch and the action maps to a second underlay switch in accordance with mapping the overlay network ingress port to an underlay network ingress port on the first underlay switch; decompose the translated packet handling rule into a first rule portion, including the match field, associated with the first underlay switch and a second rule portion, including the action, associated with the second underlay switch; and transmit the first rule portion to the first underlay switch and the second rule portion to the second underlay switch.