SERVICE OPERATION CHAINING
    1.
    发明申请

    公开(公告)号:US20190132221A1

    公开(公告)日:2019-05-02

    申请号:US15881674

    申请日:2018-01-26

    申请人: Nicira, Inc.

    IPC分类号: H04L12/24 H04L12/46

    摘要: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).

    SERVICE OPERATION CHAINING
    4.
    发明申请

    公开(公告)号:US20210044502A1

    公开(公告)日:2021-02-11

    申请号:US17067635

    申请日:2020-10-09

    申请人: Nicira, Inc.

    摘要: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).

    SERVICE OPERATION CHAINING
    6.
    发明申请

    公开(公告)号:US20190132220A1

    公开(公告)日:2019-05-02

    申请号:US15881670

    申请日:2018-01-26

    申请人: Nicira, Inc.

    IPC分类号: H04L12/24 H04L12/46

    摘要: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).

    DYNAMIC CHAIN OF SERVICE FUNCTIONS FOR PROCESSING NETWORK TRAFFIC IN A VIRTUAL COMPUTING ENVIRONMENT

    公开(公告)号:US20180331951A1

    公开(公告)日:2018-11-15

    申请号:US15593516

    申请日:2017-05-12

    申请人: Nicira, Inc.

    摘要: The technology disclosed herein enables a dynamic chain of virtual service functions for processing network traffic in a virtual computing environment. In a particular embodiment, a method includes providing a service chain policy to a virtual routing element connecting the respective service functions and determining an initial classification of a network packet entering the dynamic service chain. The initial classification indicates at least a first service function in a sequence of the service functions for processing the network packet. The method further includes providing a service chain policy to a virtual routing element connecting the respective service functions. After the network packet has been processed by a one service function in the sequence and before the virtual routing element passes the network packet to a next service function in the sequence, the method provides applying the service chain policy to the network packet in the virtual routing element to determine the next service function and directing the network packet from the virtual routing element to the next service function. The process continues till the packet passes through all service functions till it reaches its destination.

    Service function chain (SFC) data communications with SFC data in virtual local area network identifier (VLAN ID) data fields

    公开(公告)号:US10129186B2

    公开(公告)日:2018-11-13

    申请号:US15371934

    申请日:2016-12-07

    申请人: Nicira, Inc.

    摘要: A data system transfers data packets over Service Function Chains (SFCs). A classifier receives the packets and determines SFC Identifiers (IDs) and metadata. The classifier inserts the SFC IDs and metadata in Virtual Local Area Network (VLAN) ID data fields of the packets. The classifier transfers the classified packets to a forwarder. The forwarder identifies the SFC IDs and metadata from the VLAN ID data fields. The forwarder selects network functions based on the SFC IDs and metadata. The forwarder transfers the packets having the SFC IDs and metadata in the VLAN ID data fields to the selected network functions. The selected network functions identify the SFC IDs and metadata from the VLAN ID data fields. The network functions process the packets based on the SFC IDs, metadata, and configured policies to perform functions like network address translation, firewall, deep packet inspection, and others.