首页> 外国专利> PROVIDING SERVICES BY USING SERVICE INSERTION AND SERVICE TRANSPORT LAYERS

PROVIDING SERVICES BY USING SERVICE INSERTION AND SERVICE TRANSPORT LAYERS

机译:通过使用服务插入和服务传输层来提供服务

摘要

Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (1) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and/or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane. For instance, in some embodiments, each forwarding plane connects to a machine or service node through a port that receives data messages from, or supplies data messages to, the machine or service node. In such embodiments, the service forwarding plane does not have a port that directly receives data messages from, or supplies data messages to, any guest machine. Instead, in some such embodiments, data associated with a guest machine is routed to a port proxy module executing on the same host computer, and this other module has a service plane port. This port proxy module in some embodiments indirectly can connect more than one guest machine on the same host to the service plane (i.e., can serve as the port proxy module for more than one guest machine on the same host).
机译:一些实施例提供了新颖的方法,用于为在一个或多个数据中心中运行的机器执行服务。例如,对于一组相关的访客机器(例如,一组租户机器),一些实施例定义两个不同的转发平面:(1)访客转发平面和(2)服务转发平面。来宾转发平面连接到组中的计算机,并为这些计算机执行L2和/或L3转发。服务转发平面(1)连接到对发送到这些机器和从这些机器发送的数据消息执行服务的服务节点,并且(2)将这些数据消息转发到服务节点。在一些实施例中,访客机不直接与服务转发平面连接。例如,在一些实施例中,每个转发平面通过端口从机器或服务节点接收数据消息或向机器或服务节点提供数据消息的端口连接到机器或服务节点。在这样的实施例中,服务转发平面不具有直接从任何访客机接收数据消息或向任何访客机提供数据消息的端口。相反,在一些这样的实施例中,与访客机相关联的数据被路由到在同一主机上执行的端口代理模块,并且该另一个模块具有服务平面端口。在一些实施例中,该端口代理模块可以间接地将同一主机上的一台以上客户机计算机连接到服务平面(即,可以用作同一主机上的一台以上客户机的端口代理模块)。

著录项

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号