Back to results
US 11,121,965 B2Granted
Network resource isolation method for container network and system thereof
AssigneeHuazhong University of Science and Technology
InventorsSong Wu, Hai Jin, Junjian Guan
Life of this patent
Estimating the term…
Abstract
A network resource isolation method for container networks and a system thereof, including a computation system for network resource isolation, or a system using network resource isolation, or a network resource isolation system for container networks, and methods of implementation thereof. The system provides container overlay networks with a resource isolation scheme that also reduces the use threshold for isolation of network resources and optimizes the utilization rate of network resources.
Claims8
A computation system, wherein the system comprises:
- at least one processor;
- and
- at least one memory, wherein at least one command is stored in the at least one memory and executable on the at least one processor to perform an operation;
- wherein, the operation comprises:
- before a relevant container sends out a data packet, attaching an exclusive container network identity of the container to the data packet without losing source container information of the data packet in an overlay network mode;
- identifying a source container of the data packet according to the container network identity attached to the data packet in both the overlay network mode and a non-overlay network mode and classifying the data packet into a class and a queue discipline of the source container;
- monitoring an operational state of the container on a host and dynamically adjusting a part or all of network resources isolated by the container when the operational state of the container at least partially changes, including:
- where any newly launched container on the host is detected, assigning an exclusive network identity to each said newly launched container,
- creating the class and the queue discipline for each said newly launched container wherein the class and the queue discipline are used to isolate the network resources of the container,
- analyzing a startup parameter of each said newly launched container to convert the startup parameter into a traffic control command, and
- configuring the isolated network resources to the class and the queue discipline for the relevant newly launched container according to the relevant traffic control command;
- managing the container network identity used by the container that is configured to network resource isolation and is active on the host;
- recording a state of the relevant container network identity using a bitmap;
- when the relevant newly launched container needs to apply for a container network identity, searching for a minimal available container network identity from a low-order address in the bitmap and assigning it to the relevant newly launched container;
- and
- when the active container stops, changing a state of the container network identity assigned to the container that stops to “available”.
13 more elements
A network resource isolation method for container networks, wherein the method comprises:
- before a relevant container sends out a data packet, attaching an exclusive network identity of the container to the data packet without losing source container information of the data packet in an overlay network mode;
- identifying a source container of the data packet according to the container network identity attached to the data packet in both the overlay network mode and a non-overlay network mode and classifying the data packet into a class and a queue discipline of the source container;
- monitoring an operational state of the container on a host and dynamically adjusting a part or all of network resources isolated by the container when the operational state of the container at least partially changes, including:
- where any newly launched container on the host is detected, assigning an exclusive network identity to each said newly launched container,
- creating the class and the queue discipline for each said newly launched container wherein the class and the queue discipline are used to isolate the network resources of the container,
- analyzing a startup parameter of each said newly launched container to convert the startup parameter into a traffic control command, and
- configuring the isolated network resources to the class and the queue discipline for the relevant newly launched container according to the relevant traffic control command;
- managing the container network identity used by the container that is configured to network resource isolation and is active on the host;
- recording a state of the relevant container network identity using a bitmap;
- when the relevant newly launched container needs to apply for a container network identity, searching for a minimal available container network identity from a low-order address in the bitmap and assigning it to the relevant newly launched container;
- and
- when the active container stops, changing a state of the container network identity assigned to the container that stops to “available”.
9 more elements
Dependencies are inferred from the claim text.