Abstract: A system and method can verify trustfulness of a fabric component in an InfiniBand (IB) fabric. A subnet manager that is responsible for authenticating the fabric component using private/public key pairs. The subnet manager can first send a first encrypted message to a fabric component in the IB fabric, wherein the first encrypted message contains a token and is encrypted using a public key associated with the fabric component. Then, the fabric component is allowed to decode the first encrypted message using a private key associated with the fabric component, and to send a second encrypted message back to the subnet manager. Finally, the subnet manager can authenticate the fabric component if the second encrypted message contains correct information.

Abstract: A system and method can support multiple domains in an InfiniBand (IB) fabric. The IB fabric can include one or more subnets, wherein each said subnet contains one or more switch nodes. Additionally, at least one said subnet can be divided into one or more sub-subnets, wherein each said sub-subnet is managed by a separate sub-subnet manager that is associated with a unique management key, and wherein said one or more sub-subnets are connected by one or more sub-subnet gateway switch nodes, wherein each sub-subnet gateway switch node belongs to one sub-subnet.

Abstract: A system and method can support packet direct forwarding in a middleware machine environment. The middleware machine environment comprises one or more external ports on at least one network switch instance, wherein each external port can receive one or more data packets from an external network. Furthermore, the middleware machine environment comprises a plurality of host channel adapter (HCA) ports on one or more host servers, wherein each said HCA port is associated with a said host server, and each said host server can support one or more virtual machines that operate to process the one or more data packets. The at least one network switch operate to send a packet received at an external port to a designated HCA port associated with the external port. An external switch in the external network can send the data packet to the particular external port based on a packet distribution algorithm.

Abstract: A method for transmitting a message includes a communication adapter receiving, from a transmitting device, a request to send the message. The method further includes modifying a maximum transfer unit (MTU) to obtain a modified MTU, transmitting, from the communication adapter to a receiving system, a first sub-unit of the message using the modified MTU, iteratively increasing the MTU for transmitting intermediate sub-units of the message until an MTU limit is reached, and transmitting, to the receiving system, the intermediate sub-units of the message. The intermediate sub-units are transmitted after the first sub-unit and before a second sub-unit. The method further includes transmitting, from the communication adapter to the receiving system, the second sub-unit to the receiving system using a full path MTU.

Abstract: A system and method can support a flooding mechanism using a multicast group in a middleware machine environment. The middleware machine environment can comprise a gateway instance that includes an external port for receiving one or more data packets from an external network. The middleware machine environment also comprises one or more host servers, each of which is associated with one or more virtual machines that can process the data packets. Furthermore, said host servers can provide virtual interfaces that belong to a virtual hub associated with the gateway instance. At least one said packet is a flooded packet that is specified with an unknown destination address when it is received at the external port. The gateway instance operates to send the flooded packet to the multicast group that operates to forward the flooded packet to one or more said host servers in the multicast group.

Abstract: A method for transmitting a message includes a communication adapter receiving, from a transmitting device, a request to send the message. The method further includes modifying a maximum transfer unit (MTU) to obtain a modified MTU, transmitting, from the communication adapter to a receiving system, a first sub-unit of the message using the modified MTU, iteratively increasing the MTU for transmitting intermediate sub-units of the message until an MTU limit is reached, and transmitting, to the receiving system, the intermediate sub-units of the message. The intermediate sub-units are transmitted after the first sub-unit and before a second sub-unit. The method further includes transmitting, from the communication adapter to the receiving system, the second sub-unit to the receiving system using a full path MTU.

Abstract: A method for transmitting a message includes a communication adapter receiving, from a transmitting device, a request to send the message. The method further includes modifying a maximum transfer unit (MTU) to obtain a modified MTU, transmitting, from the communication adapter to a receiving system, a first sub-unit of the message using the modified MTU, iteratively increasing the MTU for transmitting intermediate sub-units of the message until an MTU limit is reached, and transmitting, to the receiving system, the intermediate sub-units of the message. The intermediate sub-units are transmitted after the first sub-unit and before a second sub-unit. The method further includes transmitting, from the communication adapter to the receiving system, the second sub-unit to the receiving system using a full path MTU.

Abstract: A system and method can support virtual machine migration in a middleware machine environment. The middleware machine environment can comprise one or more network switch instances with one or more external ports, each of which is adapted to receive data packets from an external network. Furthermore, the middleware machine environment can comprise a plurality of virtual interfaces on one or more host servers. Each host server is associated with one or more virtual machines that can process the one or more data packets. A virtual machine on a first host server is allowed to migrate from the first host server to a second host server and operates to receive one or more packets via a virtual interface on the second host server and process the one or more data packets.

Abstract: A system and method can support multiple domains in an InfiniBand (IB) fabric. The IB fabric can include one or more subnets, wherein each said subnet contains one or more switch nodes. Additionally, at least one said subnet can be divided into one or more sub-subnets, wherein each said sub-subnet is managed by a separate sub-subnet manager that is associated with a unique management key, and wherein said one or more sub-subnets are connected by one or more sub-subnet gateway switch nodes, wherein each sub-subnet gateway switch node belongs to one sub-subnet.

Abstract: A system and method can support multiple domains in an InfiniBand (IB) fabric. The IB fabric can include one or more subnets, wherein each said subnet contains one or more switch nodes. Additionally, at least one said subnet can be divided into one or more sub-subnets, wherein each said sub-subnet is managed by a separate sub-subnet manager that is associated with a unique management key, and wherein said one or more sub-subnets are connected by one or more sub-subnet gateway switch nodes, wherein each sub-subnet gateway switch node belongs to one sub-subnet.

Abstract: A method for transmitting a message includes a communication adapter receiving, from a transmitting device, a request to send the message. The method further includes modifying a maximum transfer unit (MTU) to obtain a modified MTU, transmitting, from the communication adapter to a receiving system, a first sub-unit of the message using the modified MTU, iteratively increasing the MTU for transmitting intermediate sub-units of the message until an MTU limit is reached, and transmitting, to the receiving system, the intermediate sub-units of the message. The intermediate sub-units are transmitted after the first sub-unit and before a second sub-unit. The method further includes transmitting, from the communication adapter to the receiving system, the second sub-unit to the receiving system using a full path MTU.

Abstract: A system and method can support virtual machine migration in a middleware machine environment. The middleware machine environment can comprise one or more network switch instances with one or more external ports, each of which is adapted to receive data packets from an external network. Furthermore, the middleware machine environment can comprise a plurality of virtual interfaces on one or more host servers. Each said host server is associated with one or more virtual machines that can process the one or more data packets. A virtual machine on a first host server is allowed to migrate from the first host server to a second host server and operates to receive one or more packets via a virtual interface on the second host server and process the one or more data packets.

Abstract: A system and method can provide switch based subnet management packet (SMP) traffic protection in a middleware machine environment. The middleware machine environment includes a network switch that operates to receive at least one SMP destined for a subnet management agent (SMA). The network switch can check whether the at least one SMP includes a correct management key, and prevent the at least one SMP from being forwarded to the destined SMA when at least one SMP does not include the correct management key. Furthermore, the network switch can specify a different management key for each external port and can enforce separate restrictions on ingress and egress SMP traffic at a particular external port.

Abstract: A system and method can support a flooding mechanism using a multicast group in a middleware machine environment. The middleware machine environment can comprise a gateway instance that includes an external port for receiving one or more data packets from an external network. The middleware machine environment also comprises one or more host servers, each of which is associated with one or more virtual machines that can process the data packets. Furthermore, said host servers can provide virtual interfaces that belong to a virtual hub associated with the gateway instance. At least one said packet is a flooded packet that is specified with an unknown destination address when it is received at the external port. The gateway instance operates to send the flooded packet to the multicast group that operates to forward the flooded packet to one or more said host servers in the multicast group.

Abstract: A system and method can support packet direct forwarding in a middleware machine environment. The middleware machine environment comprises one or more external ports on at least one network switch instance, wherein each external port can receive one or more data packets from an external network. Furthermore, the middleware machine environment comprises a plurality of host channel adapter (HCA) ports on one or more host servers, wherein each said HCA port is associated with a said host server, and each said host server can support one or more virtual machines that operate to process the one or more data packets. The at least one network switch operate to send a packet received at an external port to a designated HCA port associated with the external port. An external switch in the external network can send the data packet to the particular external port based on a packet distribution algorithm.

Abstract: A system and method can support flooding mechanism using a packet process proxy in a middleware machine environment. The middleware machine environment can comprise a gateway instance that includes an external port for receiving data packets from an external network. The middleware machine environment also comprises one or more host servers, each of which is associated with one or more virtual machines. Furthermore, said host servers can provide virtual interfaces that belong to a virtual hub associated with the gateway instance. At least one said packet is a flooded packet that is specified with an unknown destination address when it is received at the external port. The gateway instance can send the flooded packet to a designated virtual interface on a host server, and a packet process proxy on the host server can forward the flooded packet to a virtual machine on another host server for processing this packet.

Abstract: A system and method can support a scalable packet forwarding mechanism in a middleware machine environment. The middleware machine environment can comprise one or more network switch instances, wherein each network switch instance is associated with one or more external ports that are adapted to receive data packets from an external network. Furthermore, the middleware machine environment can comprise a plurality of packet dispatching components, each of which is responsible for forwarding a data packet to a virtual machine on a host server that operates to process the data packet. Additionally, a link aggregation component can combine multiple external ports into a logical port, and wherein the bandwidth of the logical port is linearly scaled accordingly to a total number of the multiple external ports.

Abstract: A system and method can provide a secure subnet management agent (SMA) in an Infiniband (IB) network. The system can comprise a host channel adapter (HCA) associated with a host, wherein the HCA operates to implement a SMA in its embedded firmware. The HCA can prevent a host administrator or software with root access to the host from changing the embedded firmware on the HCA and modifying one or more states associated with the SMA without being endorsed by a site administrator. Additionally, the SMA is associated with a management key, and the host is not allowed to observe the management key without being endorsed by a site administrator.

Abstract: A system and method can verify trustfulness of a fabric component in an InfiniBand (IB) fabric. A subnet manager that is responsible for authenticating the fabric component using private/public key pairs. The subnet manager can first send a first encrypted message to a fabric component in the IB fabric, wherein the first encrypted message contains a token and is encrypted using a public key associated with the fabric component. Then, the fabric component is allowed to decode the first encrypted message using a private key associated with the fabric component, and to send a second encrypted message back to the subnet manager. Finally, the subnet manager can authenticate the fabric component if the second encrypted message contains correct information.

Abstract: A system and method can support multiple domains in an InfiniBand (IB) fabric. The IB fabric can include one or more subnets, wherein each said subnet contains one or more switch nodes. Additionally, at least one said subnet can be divided into one or more sub-subnets, wherein each said sub-subnet is managed by a separate sub-subnet manager that is associated with a unique management key, and wherein said one or more sub-subnets are connected by one or more sub-subnet gateway switch nodes, wherein each sub-subnet gateway switch node belongs to one sub-subnet.