Architecture of networks with middleboxes
AssigneeNicira, Inc.
InventorsTeemu Koponen, Ronghua Zhang, Pankaj Thakkar, Martin Casado
Life of this patent
Estimating the term…
Abstract
Some embodiments provide a system for implementing a logical network that includes a set of end machines, a first logical middlebox, and a second logical middlebox connected by a set of logical forwarding elements. The system includes a set of nodes. Each of several nodes includes (i) a virtual machine for implementing an end machine of the logical network, (ii) a managed switching element for implementing the set of logical forwarding elements of the logical network, and (iii) a middlebox element for implementing the first logical middlebox of the logical network. The system includes a physical middlebox appliance for implementing the second logical middlebox.
Claims20
A method for implementing a logical network that comprises a set of end machines and a logical middlebox on a physical network comprising a plurality of nodes, the method comprising:
- receiving middlebox configuration data for the logical middlebox;
- identifying a plurality of host computers to which the middlebox configuration data should be distributed, wherein each host computer in the identified plurality of host computers executes (i) at least one end machine of the set of end machines of the logical network, (ii) a managed forwarding element (MFE) for implementing a set of logical forwarding elements (LFEs) of the logical network, and (iii) a middlebox element for implementing the logical middlebox of the logical network, wherein the plurality of MFEs executing on the plurality of host computers collectively implement the LFEs of the logical network and the plurality of middlebox elements executing on the plurality of host computers collectively implement the logical middlebox of the logical network;
- and
- distributing the middlebox configuration data to the plurality of middlebox elements of the identified host computers for implementing the logical middlebox.
A non-transitory machine readable medium storing a program for implementing a logical network that comprises a set of end machines and a logical middlebox on a physical network comprising a plurality of nodes, the program for execution by at least one processing unit, the program comprising sets of instructions for:
- receiving middlebox configuration data for the logical middlebox;
- identifying a plurality of host computers to which the middlebox configuration data should be distributed, wherein each host computer in the identified plurality of host computers executes (i) at least one end machine of the set of end machines of the logical network, (ii) a managed forwarding element (MFE) for implementing a set of logical forwarding elements (LFEs) of the logical network, and (iii) a middlebox element for implementing the logical middlebox of the logical network, wherein the plurality of MFEs of the plurality of host computers collectively implement the LFEs of the logical network and the plurality of middlebox elements of the plurality of host computers collectively implement the logical middlebox of the logical network;
- and
- distributing the middlebox configuration data to the middlebox elements of the identified host computers for implementing the logical middlebox.
Dependencies are inferred from the claim text.