Application based network traffic management
AssigneeVMware, Inc.
InventorsZhao YiSan, Shengbo Teng, Nan Wang, Tracy Yan Chi
Life of this patent
Estimating the term…
Abstract
Described herein are systems, methods, and software to enhance network traffic management for virtual machines. In one implementation, a host for a virtual machine may identify applications available for execution on the virtual machine from mounted application volumes and identify firewall rules for the applications. Once identified, the host may identify network traffic for the virtual machine, and forward or block the network traffic for the virtual machine based on the firewall rules.
Claims18
A method of operating a hypervisor associated with a virtual machine to implement a firewall for the virtual machine, the method comprising
- obtaining, from a virtual computing service, identifiers for one or more applications available for execution on the virtual machine from one or more mounted application volumes;
- identifying firewall rules for the one or more applications;
- identifying outbound network traffic from the virtual machine to a destination network address;
- determining whether to permit the outbound network traffic based on the firewall rules;
- and
- if permitted, forwarding the outbound network traffic to the destination network address.
A computer apparatus comprising:
- one or more computer readable storage media;
- a processing system operatively coupled with the one or more computer readable storage media;
- and
- program instructions stored on the one or more computer readable storage media to manage a firewall for a virtual machine that, when read and executed by the processing system, direct the processing system to:
- in a hypervisor associated with a virtual machine, obtain, from a virtual computing service, identifiers for one or more applications available for execution on the virtual machine from one or more mounted application volumes;
- identify firewall rules for the one or more applications;
- identify outbound network traffic from the virtual machine to a destination network address;
- determine whether to permit the outbound network traffic based on the firewall rules;
- and
- if permitted, forwarding the outbound network traffic to the destination network address.
A system to implement a firewall for a virtual machine, the system comprising:
- a virtual computing service configured to:
- allocate the virtual machine to the end user from a plurality of virtual machines;
- identify one or more applications associated with the end user;
- initiate a volume attach process to attach at least one application volume with the one or more applications to the virtual machine;
- transfer application identifiers to a hypervisor executing on a host for associated with the virtual machine:
- the host configured to:
- receive the application identifiers;
- in the hypervisor, identify firewall rules to be applied against network traffic for the virtual machine based on the application identifiers;
- identify outbound network traffic from the virtual machine to a destination network address;
- determine whether to permit the outbound network traffic based on the firewall rules;
- and
- if permitted, forward the outbound network traffic to the destination network address.
Dependencies are inferred from the claim text.