Efficient computation of address groupings across multiple network interfaces
AssigneeNicira, Inc.
InventorSoner SEVINC
Life of this patent
Estimating the term…
Abstract
Certain embodiments described herein are generally directed to normalizing service rules across multiple virtual interfaces (VIFs). For example, certain embodiments described herein relate to a method for managing service rules. The method may include receiving a plurality of service rules for a set of VIFs, wherein each service rule corresponds to at least one network address and grouping the network addresses into non-overlapping groups of network addresses, wherein the grouping is performed over the service rules corresponding to the set of VIFs. In certain embodiments, flow entries may be generated based on the grouping of the network addresses.
Claims20
A method for managing service rules, comprising:
- receiving a plurality of service rules for a set of virtual interfaces (VIFs), wherein each service rule corresponds to at least one network address;
- grouping the network addresses into non-overlapping groups of network addresses, wherein the grouping is performed over the service rules corresponding to the set of VIFs;
- and
- generating flow entries based on the grouping of the network addresses.
A computer-readable medium having instructions stored thereon for:
- receiving a plurality of service rules for a set of virtual interfaces (VIFs), wherein each service rule corresponds to at least one network address;
- grouping the network addresses into non-overlapping groups of network addresses, wherein the grouping is performed over the service rules corresponding to the set of VIFs;
- and
- generating flow entries based on the grouping of the network addresses.
An apparatus for managing service rules, comprising:
- means for receiving a plurality of service rules for a set of virtual interfaces (VIFs), wherein each service rule corresponds to at least one network address;
- means for grouping the network addresses into non-overlapping groups of network addresses, wherein the grouping is performed over the service rules corresponding to the set of VIFs;
- and
- means for generating flow entries based on the grouping of the network addresses.
Dependencies are inferred from the claim text.