Granted Patent B2

US 12,250,194 · App. 18/102,697 · Granted Mar 11, 2025

Inventors: Sami Boutros (Union City, CA); Mani Kancherla (Cupertino, CA); Jayant Jain (Cupertino, CA); Anirban Sengupta (Saratoga, CA)

Assignee: VMware LLC

H04L61/256H04L12/66H04L45/745H04L61/2592H04L61/5007H04L2101/659

Abstract

Claims (36)

1. A method of facilitating a network address translation (NAT) operation in a first network of a first datacenter that comprises a plurality of host computers each of which executes a set of one or more machines, the method comprising:

at a router of the first network:

receiving advertisement of different external network addresses that different host computers use to send data messages from the machines that they execute to at least one external second network separate from the first network;

identifying, for each received flow that has a header storing a destination network address that is a particular advertised external network address, an internal network address associated with a host computer that used the particular advertised external network address, using a cache storing information regarding forwarding decisions made for previously received packets and NAT records;

collecting performance metrics associated with the NAT operations;

storing the performance metrics in a time-series database for access by a controller;

accessing the performance metrics from the time-series database to generate aggregated metrics related to the NAT operations;

encapsulating packets of each received flow with an encapsulating header that uses the identified internal network address as a destination address;

forwarding the encapsulated packets along the first network for NAT instances executing on the host computers to decapsulate.

2. The method of claim 1 , wherein receiving the advertisements comprises receiving the advertisements from a set of one or more route reflectors within the first network.

3. The method of claim 2 , wherein the route reflector set receives the advertisements from routing modules executing on the host computers.

4. The method of claim 1 , wherein the internal and external network addresses are layers 3 and 4 network addresses.

5. The method of claim 4 , wherein the layer 3 external network addresses are internet protocol version 4 (IPv4) addresses, while the layer 3 internal network addresses are internet protocol version 6 (IPv6) addresses.

6. The method of claim 3 , wherein the advertisements comprise advertised IPv6 addresses each of which is an IPv6 address prefix based on an external IPv4 address used by NAT instances on host computers to replace source addresses of packets sent from within the first network to the external second network.

7. The method of claim 1 , wherein said identifying is based on a routing entry in a routing table of the router that is created based on the received advertisements.

8. The method of claim 1 , wherein the NAT instances on the host computers implement a distributed NAT operation, and each NAT instance is assigned a non-overlapping range of IP and port addresses to perform its NAT operation.

9. The method of claim 1 , wherein said identifying comprises using a NAT record that identifies packets received at a gateway that use the advertised external network addresses as destination addresses, as requiring the encapsulating operations to forward the packet using the identified internal network address.

10. The method of claim 9 , wherein the NAT record is received from a controller computer of the first network.

11. A non-transitory machine readable medium storing a program which when executed by at least one processing unit facilitates a network address translation (NAT) operation in a first network of a first datacenter that comprises a plurality of host computers each of which executes a set of one or more machines, the program comprising sets of instructions for:

at a router of the first network:

receiving advertisement of different external network addresses that different host computers use to send data messages from the machines that they execute to at least one external second network separate from the first network;

identifying, for each received flow that has a header storing a destination network address that is a particular advertised external network address, an internal network address associated with a host computer that used the particular advertised external network address, using a cache storing information regarding forwarding decisions made for previously received packets and NAT records;

collecting performance metrics associated with the NAT operations;

storing the performance metrics in a time-series database for access by a controller;

accessing the performance metrics from the time-series database to generate aggregated metrics related to the NAT operations;

encapsulating packets of each received flow with an encapsulating header that uses the identified internal network address as a destination address;

forwarding the encapsulated packets along the first network for NAT instances executing on the host computers to decapsulate, to translate the destination addresses in the packet headers from the external network addresses to internal network addresses used by the machines, and to use the translated destination addresses to forward the packets to machines on the host computers.

12. The non-transitory machine readable medium of claim 11 , wherein the set of instructions for receiving the advertisements comprises a set of instructions for receiving the advertisements from a set of one or more route reflectors within the first network.

13. The non-transitory machine readable medium of claim 12 , wherein the route reflector set receives the advertisements from routing modules executing on the host computers.

14. The non-transitory machine readable medium of claim 11 , wherein the internal and external network addresses are layers 3 and 4 network addresses.

15. The non-transitory machine readable medium of claim 14 , wherein the layer 3 external network addresses are internet protocol version 4 (IPv4) addresses, while the layer 3 internal network addresses are internet protocol version 6 (IPv6) addresses.

16. The non-transitory machine readable medium of claim 13 , wherein the advertisements comprise advertised IPv6 addresses each of which is an IPv6 address prefix based on an external IPv4 address used by NAT instances on host computers to replace source addresses of packets sent from within the first network to the external second network.

17. The non-transitory machine readable medium of claim 11 , wherein the set of instructions for said identifying is based on a routing entry in a routing table of the router that is created based on the received advertisements.

18. The non-transitory machine readable medium of claim 11 , wherein the NAT instances on the host computers implement a distributed NAT operation, and each NAT instance is assigned a non-overlapping range of IP and port addresses to perform its NAT operation.

19. The non-transitory machine readable medium of claim 11 , wherein the set of instructions for said identifying comprises a set of instructions for using a NAT record that identifies packets received at a gateway that use the advertised external network addresses as destination addresses, as requiring the encapsulating operations to forward the packet using the identified internal network address.

20. The non-transitory machine readable medium of claim 19 , wherein the NAT record is received from a controller computer of the first network.

Assignments (2)

Continuity (2)

References Cited (319)