Enhanced management of communication rules over multiple computing networks
AssigneeNicira, Inc.
InventorsArijit Chanda, Rajiv Krishnamurthy
Life of this patent
Estimating the term…
Abstract
Described herein are systems, methods, and software to enhance the implementation of communication rules in a computing network. In one example, a method of operating a communication settings system maintains communication rules for a plurality of networks, wherein the communication rules define forwarding actions for ingress and egress packets to and from applications in the plurality of computing networks. The service further identifies a configuration request from a computing network with applications executing in the computing network, identifies a subset of the communication rules based on the plurality of applications, and provides the subset of the communication rules to the computing network.
Claims20
A method comprising:
- identifying a configuration request for a computing network, wherein the configuration request indicates information about a plurality of applications executing in the computing network;
- in response to the configuration request, identifying a subset of computing networks from a plurality of computing networks that meet similarity criteria to the computing network based on the information about the plurality of applications;
- and
- identifying communication rules for the computing network from the subset of computing networks, wherein the communication rules define forwarding actions for ingress and egress packets to and from virtual nodes in the subset of computing networks based on information about applications on the virtual nodes.
A computing apparatus comprising:
- one or more non-transitory computer readable storage media;
- a processing system operatively coupled to the one or more non-transitory computer readable media;
- and
- program instructions stored on the one or more non-transitory computer readable storage media that, when read and executed by the processing system, direct the computing apparatus to:
- identify a configuration request for a computing network, wherein the configuration request indicates information about a plurality of applications executing in the computing network;
- in response to the configuration request, identify a subset of computing networks from a plurality of computing networks that meet similarity criteria to the computing network based on the information about the plurality of applications;
- and
- identify communication rules for the computing network from the subset of computing networks, wherein the communication rules define forwarding actions for ingress and egress packets to and from virtual nodes in the subset of computing networks based on information about applications on the virtual nodes.
An apparatus comprising:
- one or more non-transitory computer readable storage media;
- and
- program instructions stored on the one or more non-transitory computer readable storage media that, when executed by at least one processor, direct the at least one processor to:
- identify a configuration request for a computing network, wherein the configuration request indicates information about a plurality of applications executing in the computing network;
- in response to the configuration request, identify a subset of computing networks from a plurality of computing networks that meet similarity criteria to the computing network based on the information about the plurality of applications, wherein wherein the similarity criteria comprise application types and network size;
- and
- identify communication rules for the computing network from the subset of computing networks, wherein the communication rules define forwarding actions for ingress and egress packets to and from virtual nodes in the subset of computing networks based on information about applications on the virtual nodes.
Dependencies are inferred from the claim text.