Scalable policy assignment in an edge virtual bridging (EVB) environment
View Patent ↗Embodiments of the invention relate to scalable policy assignment in an edge virtual bridging (EVB) environment. One embodiment includes fetching virtual machine (VM) information for one or more VMs from a virtual station interface (VSI) database (DB). The VM information includes a VSI type identification (ID) associated with each VM. A policy discriminator (PD) value is associated for each VSI type ID. A VSI DB table is generated with at least a portion of the VM information from the VSI DB and the PD for each VSI type ID. A message is received including virtual machine (VM) information for a created VM. One or more rules and bandwidth filter information associated with a VSI type ID are retrieved from the VSI DB table. The associated rules and filter information are applied based on the PD.
1. A method comprising:
fetching, by a switch, virtual machine (VM) information for one or more VMs from a virtual station interface (VSI) database (DB), wherein the VM information includes a VSI type identification (ID) associated with each VM;
associating, by the switch, a policy discriminator (PD) value for each VSI type ID;
generating, by the switch, a VSI DB table with at least a portion of the VM information from the VSI DB and the PD for each VSI type ID;
receiving, by the switch, a message including VM information for a created VM;
retrieving, by the switch, one or more rules and bandwidth filter information associated with a VSI type ID from the VSI DB table; and
applying, by the switch, the associated one or more rules and filter information based on one of multiple PD types and VM information or network information, wherein the multiple PD types comprise a VM type and a virtual local area network (vLAN) type.
2. The method of claim 1 , wherein the one or more rules comprise access list information, and the bandwidth filter information comprises transmission rate information and receiving rate information.
3. The method of claim 2 , wherein the VSI DB table comprises one or more VSI Type IDs that is associated with one or more access rules, transmission rate, receiving rate and PD.
4. The method of claim 1 , wherein the switch fetches the information from the VSI DB from a server in an edge virtual bridging (EVB) system.
5. The method of claim 4 , wherein upon creation of the VM, a hypervisor transmits a VSI discovery protocol (VDP) message to the switch, and the VDP message includes the VSI type ID, source media access control (MAC) address and vLAN ID for the VM.
6. The method of claim 5 , further comprising:
determining the PD type.
7. The method of claim 1 , wherein if the PD type comprises a VM type VM information comprises a source MAC address of the VM, and if the PD type comprises a LAN type, the network information comprises a vLAN ID of the VM.