Information redirection
A technique is disclosed for redirecting information in a segmented virtual machine. The technique includes sending information to a shell VM and redirecting the information to bypass the shell VM. A technique for evaluating whether to redirect information may include sending a discovery packet, receiving a reply to the discovery packet; and determining whether a switch is capable of stitching based on the reply. A technique for responding to a discovery packet may include receiving the discovery packet at a switch and sending a response indicating a capability of the switch.
1. A method of redirecting information in a segmented virtual machine (VM) including a shell VM and a core VM, the method comprising:
establishing a first connection between an external application and the shell VM via a switch to transfer information between the external application and the core VM via the switch, the shell VM, and a communication link between the shell VM and the core VM;
establishing a second connection between the shell VM and the core VM via the switch such that the information between the external application and the core VM is transferred via the shell VM, the switch, and the second connection instead of the communication link; and
using the switch to stitch a portion of the first connection between the external application and the switch and a portion of the second connection between the switch and the core VM to redirect the information between the external application and the core VM, wherein the switch transfers data via the portion of the first connection and the portion of the second connection, thereby bypassing the shell VM; wherein:
the shell VM and the core VM each perform some but not all functions of the segmented VM.
2. The method of claim 1 , wherein redirecting includes receiving the information at the switch.
3. The method of claim 1 , wherein the information is redirected to the core VM.
4. The method of claim 1 , wherein the information is redirected to the external application.
5. The method of claim 1 , wherein the information is included in a TCP packet or TCP connection.
6. The method of claim 1 , wherein a packet received by the core VM includes a translated address indicating that the packet has been sent by the shell VM.
7. The method of claim 1 , wherein a packet received by the external application includes a translated address indicating that the packet has been sent by the shell VM.
8. The method of claim 1 , wherein redirecting includes translating an address within a packet.
9. The method of claim 1 , further including determining that the information should be redirected.
10. The method of claim 1 , wherein the information is redirected once a connection associated with the information lasts longer than a certain period of time.
11. The method of claim 1 , wherein the information is redirected once a connection associated with the information sends more than a certain number of packets.
12. The method of claim 1 , wherein the information is redirected once the shell VM device carries a certain load.
13. The method of claim 1 , further including:
receiving a message indicating that the information sending has been completed; and
sending a control message.
14. The method of claim 1 , further including:
receiving a message indicating that the information sending has been completed; and
forwarding the message.
15. The method of claim 1 , further including:
receiving a message indicating that the information sending has been completed;
translating the message; and
sending the translated message.
16. The method of claim 1 , wherein a device that includes the switch and the core VM redirects the information.
17. The method of claim 16 , further including determining the number of ingress and egress points on a device.
18. The method of claim 1 , wherein a device that includes the switch and the shell VM redirects the information.
19. The method of claim 1 , wherein a device that includes the shell VM, the core VM, and the switch redirects the information.
20. The method of claim 19 , further including determining whether the switch is one hop away from a device that sent the discovery packet.
21. The method of claim 1 , wherein redirecting the information further comprises:
sending a discovery packet;
receiving a reply to the discovery packet; and
determining whether the switch is capable of stitching based on the reply by examining the reply to determine whether the reply includes an indication of whether the switch has stitching capability.
22. The method of claim 1 , further comprising:
receiving a discovery packet at the switch; and
sending a response indicating a capability of the switch.
23. A system for redirecting information in a segmented VM including a shell VM and a core VM, comprising:
a device on which the shell VM operates;
and
a switch configured to:
establish a first connection between an external application and the shell VM to transfer information between the external application and the core VM via the switch, the shell VM, and a communication link between the shell VM and the core VM;
establish a second connection between the shell VM and the core VM such that the information between the external application and the core VM is transferred via the shell VM, the switch, and the second connection instead of the communication link; and
stitch a portion of the first connection between the external application and the switch and a portion of the second connection between the switch and the core VM to redirect the information between the external application and the core VM, wherein the switch transfers data via the portion of the first connection and the portion of the second connection, thereby bypassing the shell VM; wherein:
the shell VM and the core VM each perform some but not all functions of the segmented VM.
24. The system of claim 23 , further comprising a second device that includes an external application.
25. The system of claim 23 , wherein the device includes a core VM.
26. The system of claim 23 , wherein:
the shell VM configured to:
send a discovery packet;
receive a reply to the discovery packet; and
determine whether the switch is capable of stitching based on the reply by examining the reply to determine whether the reply includes an indication of whether the switch has stitching capability; and
the system further comprises the switch configured to send a reply to the discovery packet.
27. The system of claim 23 , wherein:
the shell VM configured to send a discovery packet; and
the system further comprises the switch configured to:
receive the discovery packet; and
respond with a capability of the switch.