Granted Patent B2

US 12,341,680 · App. 18/227,303 · Granted Jun 24, 2025

Inventors: Sami Boutros (Union City, CA); Pere Monclus (Union City, CA); Philip Kippen (Fall City, WA); Dharma Rajan (North Miami Beach, FL); Yashika Narang (Fall City, WA)

Assignee: VMWare LLC

H04L43/20H04L12/4633H04L41/5041H04L43/028H04L45/00H04L47/2408H04L47/2483H04L67/1014H04L67/567G06F2009/45595H04L45/76H04L63/0209H04L63/123H04L67/10H04L69/22H04L2212/00

Abstract

Claims (28)

1. A method of specifying service operations for a data message associated with a particular machine executing on a host computer, the method comprising:

at the host computer:

storing, in a tunnel header for encapsulating a data message, a plurality of service identifiers associated with a plurality of service machines for performing a plurality of service operations on the data message, the plurality of service identifiers stored in a variable sized option field of the tunnel header that allows different number of service machines to be specified for performing different number of service operations for different data message flows;

forwarding the data message encapsulated with the tunnel header along a tunnel to a first service machine to perform a first service operation identified by the plurality of service identifiers; and

storing in the tunnel header a tenant identifier identifying a particular tenant associated with the particular machine;

wherein the method is implemented in a multi-tenant datacenter, the tunnel header is a Geneve tunnel header, the tenant identifier is stored in a Geneve base header, and the plurality of service identifiers stored in the variable sized option field comprises the plurality of service identifiers stored in an option TLV (Type, Length, Value) of the Geneve header.

2. The method of claim 1 , wherein storing the plurality of service identifiers comprises storing in the tunnel header a plurality of network addresses of the plurality of service machines.

3. The method of claim 2 , wherein storing the plurality of service identifiers further comprises storing in the tunnel header a service operation descriptor for each service machine identified by a network address stored in the tunnel header, in order to explain the type of service operation that the service machine performs.

4. The method of claim 1 , wherein

the service identifiers are stored in a reverse order in the tunnel header such that the first service operation is stored last while the last service operation is stored first.

5. The method of claim 1 further comprising storing a service index value in the tunnel header that identifies one of the stored service identifiers as a next service operation that is to be performed.

6. The method of claim 1 further comprising based on a set of one or more attributes associated with the data message, selecting a set of at least two service operations from a plurality of candidate sets of service operations that are different viable operation sets for performing on the data message.

7. The method of claim 6 , wherein selecting comprises:

for a first data message flow from a first machine to a second machine, selecting a first set of service operations based on a first type of content carried in the first data message flow; and

for a second data message flow from the first machine to the second machine, selecting a second set of service operations based on a second type of content carried in the second data message flow, said second set of service operations comprising at least one service operation not in the first set of service operations.

8. The method of claim 1 , wherein the tunnel connects to a first service node that connects to the first service machine without having to utilize any intervening hardware router or hardware switch.

9. The method of claim 8 , wherein the first service machine is one of a standalone computer, a service module executing on a host computer, and a standalone service appliance.

10. The method of claim 8 , wherein the first service node and first service machine are modules executing on a host computer along with other machines.

11. The method of claim 8 , wherein the first service node removes the tunnel header, provides the data message to the first service machine, receives the processed data message from the first service machine, encapsulates the processed data message with another tunnel header generated from information obtained from the removed tunnel header, and sends the encapsulated processed data message along another tunnel to another service node that is connected to a second service machine to perform a first service operation identified by the plurality of service identifiers.

12. The method of claim 1 , wherein the service operations are middlebox service operations.

13. A non-transitory machine readable medium storing a program for execution by at least one processing unit of a host computer, the program specifying service operations for a data message associated with a particular machine executing on the host computer, the program comprising sets of instructions for:

storing, in a tunnel header for encapsulating a data message, a plurality of service identifiers associated with a plurality of service machines for performing a plurality of service operations on the data message, the plurality of service identifiers stored in a variable sized option field of the tunnel header that allows different number of service machines to be specified for performing different number of service operations for different data message flows; and

forwarding the data message encapsulated with the tunnel header along a tunnel to a first service machine to perform a first service operation identified by the plurality of service identifiers;

wherein the program is implemented in a multi-tenant datacenter, the program further comprising a set of instructions for storing in the tunnel header a tenant identifier identifying a particular tenant associated with the particular machine, the tunnel header is a Geneve tunnel header, the tenant identifier is stored in a Geneve base header, and the plurality of service identifiers stored in the variable sized option field comprises the plurality of service identifiers stored in an option TLV (Type, Length, Value) of the Geneve header.

14. The non-transitory machine readable medium of claim 13 , wherein the set of instructions for storing the plurality of service identifiers comprises a set of instructions for storing in the tunnel header a plurality of network addresses of the plurality of service machines.

15. The non-transitory machine readable medium of claim 14 , wherein the set of instructions for storing the plurality of service identifiers further comprises a set of instructions for storing in the tunnel header a service operation descriptor for each service machine identified by a network address stored in the tunnel header, in order to explain the type of service operation that the service machine performs.

16. The non-transitory machine readable medium of claim 13 , wherein

the service identifiers are stored in a reverse order in the tunnel header such that the first service operation is stored last while the last service operation is stored first.

Assignments (2)

Continuity (4)

References Cited (400)