Abstract: Embodiments of the invention relate to providing acceleration for traffic migration for virtual machine (VM) migration in overlay networks. One embodiment includes a method that includes migrating of a VM from a first hypervisor to a second hypervisor. The first hypervisor detects incoming encapsulated traffic sent from a third hypervisor that is targeted for the VM. The first hypervisor indicates to a service of incorrect information in the incoming encapsulated traffic for the VM. The third hypervisor is notified with updated information for the VM.

Abstract: A data handling network includes a management system and a plurality of devices in communication with the management system. Each device may operate under various configurations. The management system includes a configuration version table that includes a device identifier and an intended configuration version number. A configuration manager within a device queries the management system with a query that includes a device identifier and a current device operating configuration version number. The management system may interrogate the configuration version table to determine if the current device operating configuration version number is similar to the intended configuration version number.

Abstract: A computer system establishes offloaded connections over a network between requestor applications running on client nodes and server applications running on a server node. The connections are established through an aggregated plurality of network resources of the server node. Each of the aggregated plurality of server resources is operable to provide offloaded connections over the network and each is assigned to a unique private IP address. Connect queries are generated on behalf of requesting applications. Each of the connect queries specifies one of the server applications using a first endpoint tuple. The first endpoint tuple includes one of one or more IP addresses identifying the server node publicly on the network and a first port number uniquely identifying the server application. A valid set of bypass endpoint tuples are obtained that are translated from the first endpoint tuple specified in the query. Each tuple of the set includes a different one of the assigned private IP addresses.

Abstract: Methods are provided for overlaying a virtual network on a physical network in a data center environment. An overlay system is arranged in an overlay virtual network to include an overlay agent and an overlay helper. The overlay agent is implemented in an access switch. The overlay helper is implemented in an end station that is in communication with the access switch. Overlay parameters in compliance with an in-band protocol are transmitted between the overlay agent and the overlay helper.

Abstract: In the context of a client sub-system that requires the use of directory services on behalf of a tenant (such as an overlay tenant), learning an identity of a server node, that can provide such directory services by: (i) sending, by the client sub-system to a first server node, a first directory service request for directory service for a first tenant; (ii) receiving, by the client sub-system, a first acknowledgement from a second server node; and (iii) learning, by the client sub-system, that the second server node can provide directory service for the first tenant based upon the first acknowledgement.

Abstract: In accordance with one embodiment, a system that may be used for enabling Virtual Ethernet Port Aggregation (VEPA) in an overlay network includes a host server providing a virtual switch, the virtual switch including logic adapted for receiving a packet from a first virtual machine (VM) on the host server, logic adapted for determining that a destination of the packet is a second VM common to the host server, logic adapted for encapsulating the packet with a tunnel header to form an overlay packet, logic adapted for sending the overlay packet via a tunnel to a physical networking element to have inspection services performed thereon, logic adapted for receiving the overlay packet from the physical networking element, logic adapted for de-encapsulating the overlay packet to retrieve a serviced packet, and logic adapted for forwarding the serviced packet to the second VM, wherein the tunnel header includes tenant specific information.

Abstract: Systems are provided for overlaying a virtual network on a physical network in a data center environment. An overlay system is arranged in an overlay virtual network to include an overlay agent and an overlay helper. The overlay agent is implemented in an access switch. The overlay helper is implemented in an end station that is in communication with the access switch. Overlay parameters in compliance with an in-band protocol are transmitted between the overlay agent and the overlay helper.

Abstract: According to one embodiment, an apparatus and method for asymmetrical link aggregation is disclosed, wherein the method is implemented in an access switch, the access switch connects to at least two aggregation switches through a first set of ports and respective links, the access switch connects to an external network through a second set of ports, and the at least two aggregation switches connects to an internal network, the method comprising: in response to receiving a frame from one of the second set of ports, selecting one of the first set of ports based on the source address of the frame; and sending the frame using the selected one of the first set of ports.

Abstract: Embodiments of the invention provide a method for load balancing a networking system comprising multiple computing nodes. The method comprises maintaining one or more data sets on at least one computing node. The method further comprises receiving, from each computing node, a load information unit for the computing node, wherein the load information unit relates to resource usage on the computing node. For each computing node, the method determines whether the load information for the computing node exceeds a corresponding load threshold for the computing node. A data set on at least one computing node is transferred to another computing node when the load information for the at least one computing node exceeds a corresponding load threshold for the at least one computing node.

Abstract: Embodiments of the invention relate to providing interoperability between hosts supporting multiple encapsulation. One embodiment includes a method that includes mapping packet encapsulation protocol type information for virtual switches. Each virtual switch is associated with one or more virtual machines (VMs). It is determined whether one or more common encapsulation protocol types exist for a first VM associated with a first virtual switch and a second VM associated with a second virtual switch based on the mapping. A common encapsulation protocol type is selected if it is determined that one or more common encapsulation protocol types exist for the first virtual switch and the second virtual switch. A packet is encapsulated for communication between the first VM and the second VM using the selected common encapsulation protocol type.

Abstract: Packet processing logic of a host system's virtualization manager detects packets on the ingress or the egress path to/from a virtual port having three bitmap arrays for processing packets within a virtual local area network (VLAN). The logic checks the VLAN identifier (VID) of the packet to determine, based on an offset position within the corresponding bitmap array, whether the port supports the VLAN. Both the ingress array offset position and egress array offset positions correspond to the value of the VID, and are set within the specific bitmap array during configuration of the VLAN on the port. When the VLAN is supported by the port, the logic enables the packet to be processed by the port. Otherwise, the logic discards the packet. A strip bitmap array indicates when a packet's VID should be removed prior to forwarding the packet on the egress of a port (or destination port).

Abstract: A technique for operating a virtual switch includes determining network connection requirements for virtual machines controlled by a virtual machine monitor. Resources available, for processing data traffic of the virtual machines, are also determined. Finally, based on the network connection requirements and the resources available, a port of a virtual switch is selected to operate as a virtual Ethernet bridge or a virtual Ethernet port aggregator.

Abstract: A technique for operating a virtual switch includes determining network connection requirements for virtual machines controlled by a virtual machine monitor. Resources available, for processing data traffic of the virtual machines, are also determined. Finally, based on the network connection requirements and the resources available, a port of a virtual switch is selected to operate as a virtual Ethernet bridge or a virtual Ethernet port aggregator.

Abstract: Embodiments of the invention relate to overlay network address management. One embodiment includes an overlay gateway including an overlay network manager associated with a physical network. The overlay network manager prevents duplicate address assignment for overlay domains having a first sharing status and performs address translation for overlay domains having a second sharing status. Address translation is avoided for overlay domains having the first sharing status.

Abstract: A switching network includes an upper tier having a master switch and a lower tier including a plurality of lower tier entities. The master switch, which has a plurality of ports each coupled to a respective lower tier entity, implements on each of the ports a plurality of virtual ports each corresponding to a respective one of a plurality of remote physical interfaces (RPIs) at the lower tier entity coupled to that port. Data traffic communicated between the master switch and RPIs is queued within virtual ports that correspond to the RPIs with which the data traffic is communicated. The master switch applies data handling to the data traffic in accordance with a control policy based at least upon the virtual port in which the data traffic is queued, such that the master switch applies different policies to data traffic queued to two virtual ports on the same port of the master switch.

Abstract: Packet processing logic of a host system's virtualization manager detects packets on the ingress or the egress path to/from a virtual port having three bitmap arrays for processing packets within a virtual local area network (VLAN). The logic checks the VLAN identifier (VID) of the packet to determine, based on an offset position within the corresponding bitmap array, whether the port supports the VLAN. Both the ingress array offset position and egress array offset positions correspond to the value of the VID, and are set within the specific bitmap array during configuration of the VLAN on the port. When the VLAN is supported by the port, the logic enables the packet to be processed by the port. Otherwise, the logic discards the packet. A strip bitmap array indicates when a packet's VID should be removed prior to forwarding the packet on the egress of a port (or destination port).

Abstract: A system includes a server including: logic adapted for receiving traffic from a virtual machine (VM), the traffic including at least one packet, logic adapted for hashing at least a portion of the at least one packet according to a hashing algorithm to obtain a hash value, and logic adapted for selecting an uplink based on the hash value; at least one accelerated network interface card (NIC), each accelerated NIC including: network ports including multiple Peripheral Component Interconnect express (PCIe) ports adapted for communicating with the server and a network, each network port including an uplink, logic adapted for encapsulating the at least one packet into an overlay-encapsulated packet, logic adapted for storing a media access control (MAC) address corresponding to the selected uplink as a source MAC (SMAC) address in an outer header of the overlay-encapsulated packet, and logic adapted for sending the overlay-encapsulated packet via the selected uplink.

Abstract: A method for providing location independent dynamic port mirroring on distributed virtual switches is disclosed. A controller is provided to configure one or more virtual switches within a group of physical machines to appear as a set of distributed virtual switches. In response to the receipt of a data packet at a port of a physical machine, a determination is made whether or not the port has a monitor port located on the physical machine. If the port has a monitor port located on the same physical machine, a copy of the data packet is sent to the monitor port of the physical machine. If the port has a monitor port located on a different physical machine, a copy of the data packet along with an identification (ID) of the port and an ID of the monitor port are encapsulated, and the encapsulated information are sent to a controller.

Abstract: Techniques for providing location independent dynamic port mirroring on distributed virtual switches is disclosed. A controller is provided to configure one or more virtual switches within a group of physical machines to appear as a set of distributed virtual switches. In response to the receipt of a data packet at a port of a physical machine, a determination is made whether or not the port has a monitor port located on the physical machine. If the port has a monitor port located on the same physical machine, a copy of the data packet is sent to the monitor port of the physical machine. If the port has a monitor port located on a different physical machine, a copy of the data packet along with an identification (ID) of the port and an ID of the monitor port are encapsulated, and the encapsulated information are sent to a controller.

Abstract: In accordance with one embodiment, a system that may be used for enabling Virtual Ethernet Port Aggregation (VEPA) in an overlay network includes a host server providing a virtual switch, the virtual switch including logic adapted for receiving a packet from a first virtual machine (VM) on the host server, logic adapted for determining that a destination of the packet is a second VM common to the host server, logic adapted for encapsulating the packet with a tunnel header to form an overlay packet, logic adapted for sending the overlay packet via a tunnel to a physical networking element to have inspection services performed thereon, logic adapted for receiving the overlay packet from the physical networking element, logic adapted for de-encapsulating the overlay packet to retrieve a serviced packet, and logic adapted for forwarding the serviced packet to the second VM, wherein the tunnel header includes tenant specific information.