Framework for networking and security services in virtual networks
AssigneeVMware, Inc.
InventorsRaju KOGANTY, Alex NHU, Chi-Hsiang SU
Life of this patent
Estimating the term…
Abstract
Methods, computer-readable storage medium and systems described herein facilitate registering and consuming network services on a virtual network. A virtual machine management server (VMMS) is configured to receive a service definition associated with a network service. The VMMS creates one or more service profiles based on the service definition. The VMMS configures a plurality of hosts based on the one or more service profiles such that the network service is usable, via a virtual network, by one or more virtual machines within the plurality of hosts.
Claims20
A virtual infrastructure comprising:
- a plurality of hosts each including virtual switches and at least one virtual machine executing therein, the virtual switches implementing a virtual network that can extend across multiple layer-2 domains on a physical network by causing encapsulation of layer-2 packets associated with the virtual network within a UDP encapsulation header;
- and
- a management server configured to:
- receive a service definition associated with a network service, the service definition including information about the network service and configuration instructions for configuring the plurality of hosts to enable the virtual machines connected to the virtual network to use the network service;
- create a service profile describing services available from the network service, the service profile including a particular configuration of parameters of the network service;
- and
- enable the network service for the one of the virtual machines by configuring, based on the service definition, the host on which the one of the virtual machines executes such that the network service with the particular configuration of parameters is usable, wherein the configuring of the host includes configuring the virtual switch or ports thereof in the host with rules and/or filters to forward packets from the one of the virtual machines to one or more insertion points at which the network service's software is installed to run.
At least one computer-readable storage medium having computer-executable instructions embodied thereon, wherein, when executed by at least one processor, the computer-executable instructions cause the at least one processor to:
- receive a service definition associated with a network service, the service definition including information about the network service and configuration instructions for configuring the plurality of hosts, each including at least a virtual machine executing therein and a virtual switch, which implements a virtual network by causing layer 2 packets to be encapsulated within a UDP encapsulation header so that the virtual network can extend across multiple layer 2 domains on a physical network, the service definition and configuration instructions for enabling the virtual machines connected to the virtual network to use the network service;
- create a service profile describing services available from the network service, the service profile including a particular configuration of parameters of the network service for use on a virtual machine of the virtual machines;
- and
- enable the network service for the one of the virtual machines by configuring, based on the service definition, the host on which the one of the virtual machines executes such that the network service is usable, wherein the configuring of the host includes configuring the virtual switch or ports thereof in the host with rules and/or filters to forward packets from the one of the virtual machines to one or more insertion points at which the network service software is installed to run.
A method of registering a network service on a virtual network, the virtual network implemented by causing encapsulation of layer-2 packets that are associated with the virtual network within a UDP encapsulation header so that the virtual network can extend across multiple layer-2 domains on a physical network, the method comprising:
- receiving a service definition associated with a network service, the service definition including information about the network service and configuration instructions for configuring a plurality of hosts, each including at least a virtual machine executing therein and a virtual switch, to enable the virtual machines connected to the virtual network to use the network service;
- create a service profile describing services available from the network service, the network services comprising one or more of the following:
- the load balancer, the proxy, the firewall, and the virus scanner, the service profile including a particular configuration of parameters of the network service for use on a virtual machine of the plurality of virtual machines;
- and
- enabling the network service for the one of the virtual machines by configuring, based on the service definition, the host o which the one of the virtual machines executed such that the network service with the particular configuration of parameters is usable, wherein the configuring of the host includes configuring the virtual switch or ports thereof in the host with rules and/or filters to forward packets from the one of the virtual machines to one or more insertion points at which the network srevice's software is installed to run.
Dependencies are inferred from the claim text.