Patents by Inventor Benjamin L. Pfaff
Benjamin L. Pfaff has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Publication number: 20240155026Abstract: The disclosure provides an approach for load balancing requests among data centers based on one or more environmental impact factors of the data centers. A method of load balancing requests among data centers is provided. The method includes receiving, at a load balancer from a client, a service request. The method further includes selecting, by the load balancer, a first data center of a plurality of data centers based on one or more environmental impact factors associated with each of the plurality of data centers. The method further includes causing the service request to be serviced by the selected first data center.Type: ApplicationFiled: January 10, 2023Publication date: May 9, 2024Inventors: RAJAGOPAL SREENIVASAN, Sreeram Iyer, Benjamin L. Pfaff, Victor Firoiu, Diptyaroop Maji
-
Publication number: 20230262006Abstract: Some embodiments provide a method for a forwarding element that receives a packet. The method determines whether the packet matches any flow entries in a first cache that uses a first type of algorithm to identify matching flow entries for packets. When the packet does not match any flow entries in the first cache, the method determines whether the packet matches any flow entries in a second cache that uses a second, different type of algorithm to identify matching flow entries for packets. The method executes a set of actions specified by a flow entry matched by the packet in one of the first and second caches.Type: ApplicationFiled: April 17, 2023Publication date: August 17, 2023Inventors: Cheng-Chun Tu, Yifeng Sun, Yi-Hung Wei, Benjamin L. Pfaff, Justin Pettit
-
Patent number: 11683214Abstract: Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.Type: GrantFiled: August 2, 2020Date of Patent: June 20, 2023Assignee: NICIRA, INC.Inventors: Martin Casado, Keith E. Amidon, Peter J. Balland, III, Natasha Gude, Justin Pettit, Benjamin L. Pfaff, Scott J. Shenker, Daniel J. Wendlandt
-
Patent number: 11632332Abstract: Some embodiments provide a method for a forwarding element that receives a packet. The method determines whether the packet matches any flow entries in a first cache that uses a first type of algorithm to identify matching flow entries for packets. When the packet does not match any flow entries in the first cache, the method determines whether the packet matches any flow entries in a second cache that uses a second, different type of algorithm to identify matching flow entries for packets. The method executes a set of actions specified by a flow entry matched by the packet in one of the first and second caches.Type: GrantFiled: June 7, 2018Date of Patent: April 18, 2023Assignee: VMWARE, INC.Inventors: Cheng-Chun Tu, Yifeng Sun, Yi-Hung Wei, Benjamin L. Pfaff, Justin Pettit
-
Publication number: 20220400088Abstract: In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state.Type: ApplicationFiled: August 21, 2022Publication date: December 15, 2022Inventors: Martin Casado, Paul Ingram, Keith E. Amidon, Peter J. Balland, III, Teemu Koponen, Benjamin L. Pfaff, Justin Pettit, Jesse E. Gross, IV, Daniel J. Wendlandt
-
Patent number: 11522788Abstract: Some embodiments provide a set of one or more network controllers that communicates with a wide range of devices, ranging from switches to appliances such as firewalls, load balancers, etc. The set of network controllers communicates with such devices to connect them to its managed virtual networks. The set of network controllers can define each virtual network through software switches and/or software appliances. To extend the control beyond software network elements, some embodiments implement a database server on each dedicated hardware. The set of network controllers accesses the database server to send management data. The hardware then translates the management data to connect to a managed virtual network.Type: GrantFiled: February 15, 2021Date of Patent: December 6, 2022Assignee: NICIRA, INC.Inventors: Bruce Davie, Anupam Chanda, Benjamin L. Pfaff, Justin Pettit, Amar Padmanabhan
-
Patent number: 11425055Abstract: In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state.Type: GrantFiled: February 17, 2021Date of Patent: August 23, 2022Assignee: NICIRA, INC.Inventors: Martin Casado, Paul Ingram, Keith E. Amidon, Peter J. Balland, III, Teemu Koponen, Benjamin L. Pfaff, Justin Pettit, Jesse E. Gross, IV, Daniel J. Wendlandt
-
Publication number: 20210258269Abstract: In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state.Type: ApplicationFiled: February 17, 2021Publication date: August 19, 2021Inventors: Martin Casado, Paul Ingram, Keith E. Amidon, Peter J. Balland, III, Teemu Koponen, Benjamin L. Pfaff, Justin Pettit, Jesse E. Gross, IV, Daniel J. Wendlandt
-
Publication number: 20210243112Abstract: Some embodiments provide a set of one or more network controllers that communicates with a wide range of devices, ranging from switches to appliances such as firewalls, load balancers, etc. The set of network controllers communicates with such devices to connect them to its managed virtual networks. The set of network controllers can define each virtual network through software switches and/or software appliances. To extend the control beyond software network elements, some embodiments implement a database server on each dedicated hardware. The set of network controllers accesses the database server to send management data. The hardware then translates the management data to connect to a managed virtual network.Type: ApplicationFiled: February 15, 2021Publication date: August 5, 2021Inventors: Bruce Davie, Anupam Chanda, Benjamin L. Pfaff, Justin Pettit, Amar Padmanabhan
-
Patent number: 10931600Abstract: In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state.Type: GrantFiled: February 23, 2017Date of Patent: February 23, 2021Assignee: NICIRA, INC.Inventors: Martin Casado, Paul Ingram, Keith E. Amidon, Peter J. Balland, III, Teemu Koponen, Benjamin L. Pfaff, Justin Pettit, Jesse E. Gross, IV, Daniel J. Wendlandt
-
Patent number: 10924386Abstract: Some embodiments provide a set of one or more network controllers that communicates with a wide range of devices, ranging from switches to appliances such as firewalls, load balancers, etc. The set of network controllers communicates with such devices to connect them to its managed virtual networks. The set of network controllers can define each virtual network through software switches and/or software appliances. To extend the control beyond software network elements, some embodiments implement a database server on each dedicated hardware. The set of network controllers accesses the database server to send management data. The hardware then translates the management data to connect to a managed virtual network.Type: GrantFiled: November 4, 2018Date of Patent: February 16, 2021Assignee: NICIRA, INC.Inventors: Bruce Davie, Anupam Chanda, Benjamin L. Pfaff, Justin Pettit, Amar Padmanabhan
-
Publication number: 20210021455Abstract: Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.Type: ApplicationFiled: August 2, 2020Publication date: January 21, 2021Inventors: Martin Casado, Keith E. Amidon, Peter J. Balland, III, Natasha Gude, Justin Pettit, Benjamin L. Pfaff, Scott J. Shenker, Daniel J. Wendlandt
-
Patent number: 10798048Abstract: A method of suppressing ARP packets in a logical network comprising a set of data compute nodes (DCNs). The DCNs are hosted on a set of physical hosts. Each DCN has a protocol address and is connected to a forwarding elements (FE) on the corresponding host. Each FE has a set of flows that specifies a set of conditions to match a set of fields of each received packet and a set of actions to take on a packet that matches the set of conditions. An FE on a physical host receives a packet sent by a first DCN on the physical host and determines that the received packet is an ARP request packet by matching a set of fields in the packet with a set of conditions of a particular flow. The ARP request packet identifies a protocol address of a second DCN on the logical network.Type: GrantFiled: December 3, 2015Date of Patent: October 6, 2020Assignee: NICIRA, INC.Inventors: Harold Vinson C. Lim, Mart Haitjema, Srinivas Neginhal, Pankaj Thakkar, Teemu Koponen, Anupam Chanda, Benjamin L. Pfaff
-
Patent number: 10749736Abstract: Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.Type: GrantFiled: December 11, 2017Date of Patent: August 18, 2020Assignee: NICIRA, INC.Inventors: Martin Casado, Keith E. Amidon, Peter J. Balland, III, Natasha Gude, Justin Pettit, Benjamin L. Pfaff, Scott J. Shenker, Daniel J. Wendlandt
-
Patent number: 10659373Abstract: Some embodiments provide a method for processing a packet received by a managed forwarding element. The method performs a series of packet classification operations based on header values of the received packet. The packet classifications operations determine a next destination of the received packet. When the series of packet classification operations specifies to send the packet to a network service that performs payload transformations on the packet, the method (1) assigns a service operation identifier to the packet that identifies the service operations for the network service to perform on the packet, (2) sends the packet to the network service with the service operation identifier, and (3) stores a cache entry for processing subsequent packets without the series of packet classification operations. The cache entry includes the assigned service operation identifier. The network service uses the assigned service operation identifier to process packets without performing its own classification operations.Type: GrantFiled: May 12, 2018Date of Patent: May 19, 2020Assignee: NICIRA, INCInventors: Teemu Koponen, Andy Zhou, Benjamin L. Pfaff, Justin Pettit
-
Publication number: 20190379606Abstract: Some embodiments provide a method for a forwarding element that receives a packet. The method determines whether the packet matches any flow entries in a first cache that uses a first type of algorithm to identify matching flow entries for packets. When the packet does not match any flow entries in the first cache, the method determines whether the packet matches any flow entries in a second cache that uses a second, different type of algorithm to identify matching flow entries for packets. The method executes a set of actions specified by a flow entry matched by the packet in one of the first and second caches.Type: ApplicationFiled: June 7, 2018Publication date: December 12, 2019Inventors: Cheng-Chun Tu, Yifeng Sun, Yi-Hung Wei, Benjamin L. Pfaff, Justin Pettit
-
Patent number: 10476735Abstract: Some embodiments provide a method that receives several flow descriptions. Each flow description includes a set of match conditions and corresponding set of actions. Each set of match conditions is represented as a combination of Boolean and relational operators in a flow description language. The method generates one or more flow entries for each flow description. The flow entries are generated in a format useable by a managed forwarding element (MFE). The method distributes the generated flow entries to the MFE in order for the MFE to implement network operations described by the plurality of flow descriptions.Type: GrantFiled: November 18, 2015Date of Patent: November 12, 2019Assignee: NICIRA, INC.Inventors: Benjamin L. Pfaff, Justin Pettit
-
Patent number: 10348619Abstract: Some embodiments provide a method for a network controller that manages a managed forwarding element (MFE). The method receives a set of data tuples that define packet processing behavior of the MFE. A particular one of the data tuples defines (i) a match condition with at least two conjunctive dimensions and (ii) an action for the MFE to take on a packet that matches an element from each of the dimensions, each of which include at least one element. The method generates a conjunction flow entry that matches on an assigned conjunction identifier and specifies the action defined by the particular data tuple. For each dimension, the method generates a set of flow entries that each match on a different element of the dimension and specify an action that includes the assigned conjunction identifier. The method distributes the conjunction flow entry and the sets of flow entries to the MFE.Type: GrantFiled: July 31, 2015Date of Patent: July 9, 2019Assignee: NICIRA, INC.Inventor: Benjamin L. Pfaff
-
Patent number: 10305725Abstract: Some embodiments provide a method for a controller agent operating in a physical machine alongside a managed forwarding element (MFE) that implements several logical networks. The method receives a first set of flow entries describing a particular logical network. The flow entries of the first set have a first format. The method receives a set of physical network description data and binding data that binds logical network entities to the physical network. Based on the received flow entries, physical network description data, and binding data, the method generates a second set of flow entries for implementing the particular logical network in the physical network. The flow entries of the second set have a second format readable by the MFE. The method distributes the second set of flow entries to the MFE.Type: GrantFiled: November 18, 2015Date of Patent: May 28, 2019Assignee: NICIRA, INC.Inventors: Benjamin L. Pfaff, Justin Pettit
-
Publication number: 20190089622Abstract: Some embodiments provide a set of one or more network controllers that communicates with a wide range of devices, ranging from switches to appliances such as firewalls, load balancers, etc. The set of network controllers communicates with such devices to connect them to its managed virtual networks. The set of network controllers can define each virtual network through software switches and/or software appliances. To extend the control beyond software network elements, some embodiments implement a database server on each dedicated hardware. The set of network controllers accesses the database server to send management data. The hardware then translates the management data to connect to a managed virtual network.Type: ApplicationFiled: November 4, 2018Publication date: March 21, 2019Inventors: Bruce Davie, Anupam Chanda, Benjamin L. Pfaff, Justin Pettit, Amar Padmanabhan