Abstract: According to one embodiment, a method for asymmetrical link aggregation includes detecting a link change corresponding to a previously selected port of a first set of ports used to forward frames to one of a plurality of aggregation switches connected via the first set of ports to an access switch. The method also includes re-selecting, using the access switch, a port of the first set of ports according to a distribution algorithm that ensures that all frames with a given source address are forwarded using a single port and causes frames with different source addresses to be distributed uniformly among the first set of ports in response to detecting the link change. Also, the method includes generating and sending a fake reverse address resolution protocol (RARP) frame including the given source address of the frame from the re-selected port in response to detecting the link change.

Abstract: A data handling network includes a management system and a plurality of devices in communication with the management system. Each device may operate under various configurations. The management system includes a configuration version table that includes a device identifier and an intended configuration version number. A configuration manager within a device queries the management system with a query that includes a device identifier and a current device operating configuration version number. The management system may interrogate the configuration version table to determine if the current device operating configuration version number is similar to the intended configuration version number.

Abstract: According to one embodiment, an apparatus and method for asymmetrical link aggregation is disclosed, wherein the method is implemented in an access switch, the access switch connects to at least two aggregation switches through a first set of ports and respective links, the access switch connects to an external network through a second set of ports, and the at least two aggregation switches connects to an internal network, the method comprising: in response to receiving a frame from one of the second set of ports, selecting one of the first set of ports based on the source address of the frame; and sending the frame using the selected one of the first set of ports.

Abstract: Embodiments of the invention provide a method for packet distribution in a virtual networking system comprising multiple virtual networks interconnected over an underlying layer network, wherein each virtual network comprises one or more computing nodes. The method comprises, for each virtual network, sending at least one outgoing packet targeting a computing node at a different virtual network, and receiving at least one incoming packet targeting a computing node of the virtual network. Each packet has a corresponding virtual networking tag that includes routing information identifying a destination virtual network for the packet.

Abstract: A method includes receiving tunnel information and end point information in response to a request to a distributed cluster. A common tunnel type supported by a source switch and a destination switch is selected. A packet is encapsulated with the common tunnel type supported by the source switch and the destination switch for a destination virtual machine (VM).

Abstract: Systems and methods are provided for overlaying a virtual network on a physical network in a data center environment. An overlay system is arranged in an overlay virtual network to include an overlay agent and an overlay helper. The overlay agent is implemented in an access switch. The overlay helper is implemented in an end station that is in communication with the access switch. Overlay parameters in compliance with an in-band protocol are transmitted between the overlay agent and the overlay helper.

Abstract: In one embodiment, a system includes a processor and logic integrated with and/or executable by the processor. The logic is configured to cause the processor to receive, at a first end point station, information exchange packets from all end point stations in a virtual network having a specified VNID, process each received information exchange packet to retrieve information about connections at each end point station in the virtual network having the specified VNID, and assemble a Tunnel Information Base (TIB) for a selected tunnel end point. Each of the information exchange packets include a MAC address for all member VMs in the virtual network having the specified VNID connected to each end point station in the virtual network having the specified VNID. In addition, the TIB includes a Tunnel ID, the specified VNID, and MAC addresses of the member VMs of the virtual network having the specified VNID.

Abstract: A method includes forwarding a request to a distributed overlay virtual Ethernet (DOVE) connectivity service (DCS) cluster for tunnel information by a source switch. In response to the request for tunnel information, the tunnel information and end point information are received. A common tunnel type supported by the source switch and a destination switch is selected. A packet is encapsulated with the common tunnel type supported by the source switch and the destination switch for a destination virtual machine (VM).

Abstract: Embodiments of the invention provide a method for packet distribution in a virtual networking system comprising multiple virtual networks interconnected over an underlying layer network, wherein each virtual network comprises one or more computing nodes. The method comprises, for each virtual network, sending at least one outgoing packet targeting a computing node at a different virtual network, and receiving at least one incoming packet targeting a computing node of the virtual network. Each packet has a corresponding virtual networking tag that includes routing information identifying a destination virtual network for the packet.

Abstract: A method includes receiving a first packet having a first virtual local area network (VLAN) identifier (ID) directly from a first virtual switch using a first physical overlay switch located at an edge of an internet protocol (IP) network, encapsulating the first packet with an overlay header and tunneling the first encapsulated packet via Layer-3 operations across the IP network to a second physical overlay switch in response to a determination that a source of the packet is physically separated from a destination of the packet by the IP network, receiving a second encapsulated packet having a second overlay header from the second physical overlay switch, de-encapsulating the second encapsulated packet to create a second packet having a second VLAN ID, and sending the second packet having the second VLAN ID directly to the first virtual switch operating in the first hypervisor domain.

Abstract: In one embodiment, a system includes logic adapted for receiving, at a first end point station, an information exchange packet from each end point station in a virtual network having a specified virtual network identifier (VNID) and logic adapted for processing each received information exchange packet to retrieve information about connections at each end point station in the virtual network having the specified VNID, wherein each end point station either terminates or originates a tunnel shared by the first end point station in an overlay network. In this way, the information may be used to respond to address resolution protocol (ARP) requests sent locally in lieu of flooding the ARP request. Other systems, methods, and computer program products are also presented regarding the overlay tunnel information exchange protocol, according to various embodiments.

Abstract: In one embodiment, a method for exchanging overlay tunnel information includes receiving an information exchange packet, at a first end point station, from each end point station in a virtual network having a specified virtual network identifier (VNID); and processing each received information exchange packet to retrieve information about connections at each end point station in the virtual network having the specified VNID, wherein each end point station either terminates or originates a tunnel shared by the first end point station in an overlay network. In this way, the information may be used to respond to address resolution protocol (ARP) requests sent locally in lieu of flooding the ARP request. Other systems, methods, and computer program products are also presented regarding the overlay tunnel information exchange protocol, according to various embodiments.

Abstract: A method includes receiving a packet having a VLAN ID at a first physical overlay switch located at an edge of an IP network, encapsulating the packet with an overlay header, and tunneling the encapsulated packet to a second physical overlay switch via IP network.

Abstract: In one embodiment, an apparatus includes a processor and logic integrated with and/or executable by the processor. The logic is configured to communicate with a first physical switch, a second physical switch, and an overlay network that connects the first physical switch to the second physical switch. The logic is also configured to receive a request for a communication path through the overlay network for a packet, the request including at least the packet, first information about a source of the packet, the source of the packet being connected to the first physical switch, and second information about a most closely connected physical switch to a destination of the packet. Moreover, the logic is configured to determine the destination of the packet, the destination of the packet being connected to the second physical switch. Also, the logic is configured to determine whether to apply a security policy to the packet.

Abstract: In one embodiment, a server includes a processor and logic integrated with and/or executable by the processor. The logic is configured to hash at least a portion of a packet according to a hashing algorithm to obtain a hash value. The logic is also configured to select an uplink with which to forward the packet based on the hash value. In another embodiment, a method includes hashing at least a portion of at least one packet according to a hashing algorithm to obtain a hash value using an accelerated network interface card (NIC) of a server. The accelerated NIC is configured to provide overlay functionality. The method also includes selecting an uplink, based on the hash value, from a plurality of uplinks available to send traffic out to a network using the accelerated NIC.

Abstract: Embodiments of the invention relate to overlay network address management. One embodiment includes an overlay gateway including an overlay network manager associated with a physical network. The overlay network manager prevents duplicate address assignment for overlay domains having a first sharing status and performs address translation for overlay domains having a second sharing status. Address translation is avoided for overlay domains having the first sharing status.

Abstract: Embodiments of the invention relate to overlay network address management. One embodiment includes an overlay gateway including an overlay network manager associated with a physical network. The overlay network manager prevents duplicate address assignment for overlay domains having a first sharing status and performs address translation for overlay domains having a second sharing status. Address translation is avoided for overlay domains having the first sharing status.

Abstract: In one embodiment, a method for applying security policy in an overlay network includes receiving a request, including a packet, for a communication path through an overlay network, determining whether a security policy is to be applied to the packet based on at least one of: contents of the packet, first information, and second information, selecting a communication path between a source physical switch and a destination physical switch, wherein the selected communication path directly connects the source physical switch to the destination physical switch when it is determined to not apply the security policy to the packet, and the selected communication path connects the source physical switch to the destination physical switch via a security appliance when it is determined to apply the security policy to the packet, and sending the selected communication path to the source physical switch.

Abstract: A system includes a server including: logic adapted for receiving traffic from a virtual machine (VM), the traffic including at least one packet, logic adapted for hashing at least a portion of the at least one packet according to a hashing algorithm to obtain a hash value, and logic adapted for selecting an uplink based on the hash value; at least one accelerated network interface card (NIC), each accelerated NIC including: network ports including multiple Peripheral Component Interconnect express (PCIe) ports adapted for communicating with the server and a network, each network port including an uplink, logic adapted for encapsulating the at least one packet into an overlay-encapsulated packet, logic adapted for storing a media access control (MAC) address corresponding to the selected uplink as a source MAC (SMAC) address in an outer header of the overlay-encapsulated packet, and logic adapted for sending the overlay-encapsulated packet via the selected uplink.

Abstract: A method includes forwarding a request to a distributed overlay virtual Ethernet (DOVE) connectivity service (DCS) cluster for tunnel information by a source switch. In response to the request for tunnel information, the tunnel information and end point information are received. A common tunnel type supported by the source switch and a destination switch is selected. A packet is encapsulated with the common tunnel type supported by the source switch and the destination switch for a destination virtual machine (VM).