Abstract: According to an example, a switch controller is connected to a computer hosting a virtual machine (VM) and a virtual switch to provide packet forwarding for the VM. The switch controller restricts packet forwarding actions on the ports according to the assigned primary VLAN, the assigned secondary VLAN, and the assigned VDS to the ports and the stored rules.

Abstract: A controller of a virtual switch system receives an uplink packet forwarded by a SDN switch hosted on a server from a VM (virtual machine) hosted on the server. The controller determines an outgoing interface from at least two uplink interfaces on the SDN switch respectively corresponding to aggregated member ports of a physical switch by using an aggregation algorithm according to the uplink packet. The controller generates a first flow table entry and sends the first flow table entry to the SDN switch, wherein the first flow table entry is to instruct the SDN switch to forward a received uplink packet to the physical switch through the outgoing interface.

Abstract: According to an example, a VEPA switch may receive a message and a determination may be made as to whether a Datapath of the VEPA switch includes a flow table entry for forwarding the message. In response to a determination that the VEPA switch does not include a flow table entry for forwarding the message, the message may be forwarded to a SDN controller through a SDN protocol that is to construct the flow table entry for forwarding the message according to information contained in the message, in which the constructed flow table entry identifies an egress port of the VEPA switch for forwarding the message. The VEPA switch may also obtain the constructed flow table entry from the SDN controller and forward the message via the egress port identified in the obtained flow table entry.

Abstract: According to an example, a switch controller is connected to a computer hosting a virtual machine (VM) and a virtual switch to provide packet forwarding for the VM. The switch controller restricts packet forwarding actions on the ports according to the assigned primary VLAN, the assigned secondary VLAN, and the assigned VDS to the ports and the stored rules.