公开(公告)号：US11533294B2

公开(公告)日：2022-12-20

申请号：US17674936

申请日：2022-02-18

申请人： VMware, Inc.

发明人： Rishi Kanth Alapati ,  Parasuramji Rajendran ,  Weiming Xu ,  Shireesh Kumar Singh ,  Aditi Vutukuri ,  Anuprem Chalvadi ,  Chidambareswaran Raman ,  Margaret Angeline Petrus

IPC分类号： H04L9/40 ,  H04L41/00 ,  H04L41/0806 ,  H04L61/5007

摘要： Described herein are systems and methods to manage blacklists and duplicate addresses in software defined networks (SDNs). In one implementation, a method includes, in a control plane and data plane of an SDN environment, obtaining a blacklist for a logical port in the SDN environment. The method further includes deleting realized address bindings in a realized address list for the logical port that match the one or more address bindings in the blacklist and preventing subsequent address bindings that match the one or more address bindings in the blacklist from being added to the realized address list.

公开(公告)号：US20200280537A1

公开(公告)日：2020-09-03

申请号：US16746075

申请日：2020-01-17

申请人： VMware, Inc.

发明人： Rishi Kanth Alapati ,  Parasuramji Rajendran ,  Weiming Xu ,  Shireesh Kumar Singh ,  Aditi Vutukuri ,  Anuprem Chalvadi ,  Chidambareswaran Raman ,  Margaret Angeline Petrus

IPC分类号： H04L29/06 ,  H04L29/12 ,  H04L12/24

摘要： Described herein are systems and methods to manage blacklists and duplicate addresses in software defined networks (SDNs). In one implementation, a method includes, in a control plane and data plane of an SDN environment, obtaining a blacklist for a logical port in the SDN environment. The method further includes deleting realized address bindings in a realized address list for the logical port that match the one or more address bindings in the blacklist and preventing subsequent address bindings that match the one or more address bindings in the blacklist from being added to the realized address list.

公开(公告)号：US11805101B2

公开(公告)日：2023-10-31

申请号：US17223731

申请日：2021-04-06

申请人： VMware, Inc.

发明人： Li Sun ,  Parasuramji Rajendran ,  Yang Ping ,  Jianjun Shen

IPC分类号： H04L9/40 ,  H04L61/103 ,  H04L101/622

CPC分类号： H04L63/0263 ,  H04L61/103 ,  H04L63/0236 ,  H04L63/20 ,  H04L2101/622

摘要： Some embodiments provide a novel secure method for suppressing address discovery messaging. In some embodiments, the method receives an address discovery record that provides a network address associated with a machine connected to a network. The method then identifies a set of one or more rules for evaluating the received address discovery record to determine whether the address discovery record or its provided network address should be distributed to one or more hosts and/or devices associated with the network. The method then processes the set of rules to determine whether the received address discovery record violates a rule in the set of rules so as to prevent the distribution of its provided network address. When the address discovery record violates a rule, the method discards it in some embodiments. On the other hand, when the address discovery record does not violate any rule in the identified set of rules, the method distributes the address discovery record or its provided network address to one or more hosts and/or devices associated with the network.

公开(公告)号：US11115379B2

公开(公告)日：2021-09-07

申请号：US16804638

申请日：2020-02-28

申请人： VMware, Inc.

发明人： Parasuramji Rajendran ,  Rishi Kanth Alapati ,  Shireesh Kumar Singh ,  Aditi Vutukuri ,  Chidambareswaran Raman ,  Margaret Angeline Petrus ,  Anuprem Chalvadi ,  Pallavi Moghe ,  Weiming Xu

IPC分类号： H04L29/12 ,  G06F9/455 ,  H04L12/741 ,  H04L12/715 ,  H04L12/751

摘要： Described herein are systems and methods to manage Internet Protocol (IP) address discovery in a software defined networking (SDN) environment. In one example, a manager may generate an IP address discovery configuration and pass the IP address discovery configuration to a controller. Once received, the controller may obtain a discovered list from a hypervisor of one or more IP addresses associated with one or more logical ports and update a realized list for the one or more logical ports based on the discovered list and the IP address discovery configuration.

公开(公告)号：US20230122596A1

公开(公告)日：2023-04-20

申请号：US18083311

申请日：2022-12-16

申请人： VMware, Inc.

发明人： Rishi Kanth Alapati ,  Parasuramji Rajendran ,  Weiming Xu ,  Shireesh Kumar Singh ,  Aditi Vutukuri ,  Anuprem Chalvadi ,  Chidambareswaran Raman ,  Margaret Angeline Petrus

IPC分类号： H04L9/40 ,  H04L41/0806 ,  H04L41/00 ,  H04L61/5007

摘要： Described herein are systems and methods to manage blacklists and duplicate addresses in software defined networks (SDNs). In one implementation, a method includes, in a control plane and data plane of an SDN environment, obtaining a blacklist for a logical port in the SDN environment. The method further includes deleting realized address bindings in a realized address list for the logical port that match the one or more address bindings in the blacklist and preventing subsequent address bindings that match the one or more address bindings in the blacklist from being added to the realized address list.

公开(公告)号：US20220311669A1

公开(公告)日：2022-09-29

申请号：US17214254

申请日：2021-03-26

申请人： VMware, Inc.

发明人： Parasuramji Rajendran ,  Li Sun ,  Chidambareswaran Raman

IPC分类号： H04L12/24

摘要： Some embodiments provide a method, for configuring logical network entities at a host computer. The method receives configuration data for a particular logical networking entity implemented at the host computer. The method identifies that the configuration data for the particular logical networking entity includes at least two conflicting configuration settings for the particular logical networking entity. At least one of the configuration settings for the particular logical networking entity is based on association of a configuration profile to a group of logical entities that includes the particular logical networking entity. The method determines a particular one of the conflicting configuration settings with a highest priority to apply to the particular logical networking entity at the host computer.

公开(公告)号：US20200280534A1

公开(公告)日：2020-09-03

申请号：US16804638

申请日：2020-02-28

申请人： VMware, Inc.

发明人： Parasuramji Rajendran ,  Rishi Kanth Alapati ,  Shireesh Kumar Singh ,  Aditi Vutukuri ,  Chidambareswaran Raman ,  Margaret Angeline Petrus ,  Anuprem Chalvadi ,  Pallavi Moghe ,  Weiming Xu

IPC分类号： H04L29/12 ,  G06F9/455 ,  H04L12/751 ,  H04L12/741 ,  H04L12/715

摘要： Described herein are systems and methods to manage Internet Protocol (IP) address discovery in a software defined networking (SDN) environment. In one example, a manager may generate an IP address discovery configuration and pass the IP address discovery configuration to a controller. Once received, the controller may obtain a discovered list from a hypervisor of one or more IP addresses associated with one or more logical ports and update a realized list for the one or more logical ports based on the discovered list and the IP address discovery configuration.

公开(公告)号：US11736441B2

公开(公告)日：2023-08-22

申请号：US18083311

申请日：2022-12-16

申请人： VMware, Inc.

发明人： Rishi Kanth Alapati ,  Parasuramji Rajendran ,  Weiming Xu ,  Shireesh Kumar Singh ,  Aditi Vutukuri ,  Anuprem Chalvadi ,  Chidambareswaran Raman ,  Margaret Angeline Petrus

IPC分类号： H04L29/08 ,  H04L12/14 ,  H04L29/12 ,  H04L9/40 ,  H04L41/0806 ,  H04L41/00 ,  H04L61/5007

CPC分类号： H04L63/0236 ,  H04L41/0806 ,  H04L41/20 ,  H04L61/5007

摘要： Described herein are systems and methods to manage blacklists and duplicate addresses in software defined networks (SDNs). In one implementation, a method includes, in a control plane and data plane of an SDN environment, obtaining a blacklist for a logical port in the SDN environment. The method further includes deleting realized address bindings in a realized address list for the logical port that match the one or more address bindings in the blacklist and preventing subsequent address bindings that match the one or more address bindings in the blacklist from being added to the realized address list.

公开(公告)号：US11689499B2

公开(公告)日：2023-06-27

申请号：US17466165

申请日：2021-09-03

申请人： VMware, Inc.

发明人： Parasuramji Rajendran ,  Rishi Kanth Alapati ,  Shireesh Kumar Singh ,  Aditi Vutukuri ,  Chidambareswaran Raman ,  Margaret Angeline Petrus ,  Anuprem Chalvadi ,  Pallavi Moghe ,  Weiming Xu

IPC分类号： H04L61/5014 ,  H04L61/103 ,  G06F9/455 ,  H04L45/745 ,  H04L45/64 ,  H04L45/02

CPC分类号： H04L61/5014 ,  G06F9/45558 ,  H04L45/02 ,  H04L45/64 ,  H04L45/745 ,  H04L61/103 ,  G06F2009/45595

摘要： Described herein are systems and methods to manage Internet Protocol (IP) address discovery in a software defined networking (SDN) environment. In one example, a manager may generate an IP address discovery configuration and pass the IP address discovery configuration to a controller. Once received, the controller may obtain a discovered list from a hypervisor of one or more IP addresses associated with one or more logical ports and update a realized list for the one or more logical ports based on the discovered list and the IP address discovery configuration.

公开(公告)号：US20220321535A1

公开(公告)日：2022-10-06

申请号：US17223731

申请日：2021-04-06

申请人： VMware, Inc.

发明人： Li Sun ,  Parasuramji Rajendran ,  Yang Ping ,  Jianjun Shen

IPC分类号： H04L29/06 ,  H04L29/12

摘要： Some embodiments provide a novel secure method for suppressing address discovery messaging. In some embodiments, the method receives an address discovery record that provides a network address associated with a machine connected to a network. The method then identifies a set of one or more rules for evaluating the received address discovery record to determine whether the address discovery record or its provided network address should be distributed to one or more hosts and/or devices associated with the network. The method then processes the set of rules to determine whether the received address discovery record violates a rule in the set of rules so as to prevent the distribution of its provided network address. When the address discovery record violates a rule, the method discards it in some embodiments. On the other hand, when the address discovery record does not violate any rule in the identified set of rules, the method distributes the address discovery record or its provided network address to one or more hosts and/or devices associated with the network.