Enabling virtual private network (VPN) support in a virtualized environment
Technologies are disclosed for enabling virtual private network (VPN) support in a virtualized environment. The presence or creation of a host VPN adapter on a host processing system providing a virtualized environment is detected and, in response thereto, a virtual network adapter is created in the virtualized environment. A guest operating system (OS) creates a guest VPN adapter in the virtualized environment. A software component is inserted between the guest VPN adapter and the virtual network adapter. The software component adds Ethernet frames to point-to-point protocol (PPP) packets received from the guest VPN adapter and removes Ethernet frames from packets received from the virtual network adapter.
1. A computer-implemented method, comprising:
causing a virtual network adapter to be created within a guest operating system (OS), wherein the virtual network adapter mirrors a host virtual private network (VPN) adapter;
causing the guest OS to create a guest VPN adapter within the guest OS; and
causing a VPN bridge to be inserted between the guest VPN adapter and the virtual network adapter within the guest OS, the VPN bridge configured to:
add Ethernet frames to point-to-point protocol (PPP) packets received from the guest VPN adapter, and
remove Ethernet frames from packets received from the virtual network adapter.
2. The computer-implemented method of claim 1 , wherein a first software component executing on a host detects creation of the host VPN adapter on the host and, in response thereto, generates a notification to a second software component executing in the guest OS.
3. The computer-implemented method of claim 2 , wherein the first software component is further configured to cause the virtual network adapter to be created within the guest OS.
4. The computer-implemented method of claim 3 , wherein the second software component executing in the guest OS receives the notification from the first software component and, in response thereto, causes the guest OS executing in the guest OS to create the guest VPN adapter.
5. The computer-implemented method of claim 4 , wherein the second software component executing in the guest OS is further configured to cause the VPN bridge to be inserted between the guest VPN adapter and the virtual network adapter.
6. The computer-implemented method of claim 2 , wherein creation of the host VPN adapter is detected using one or more heuristics.
7. The computer-implemented method of claim 1 , wherein the virtual network adapter comprises a virtual Ethernet adapter.
8. A computer-readable storage medium having computer-executable instructions stored thereupon which, when executed by a host processing system, cause the host processing system to:
create a virtual network adapter and a guest virtual private network (VPN) adapter within a guest operating system (OS) provided by the host processing system, wherein the virtual network adapter mirrors a host virtual private network (VPN) adapter; and
cause a VPN bridge to be inserted between the guest VPN adapter and the virtual network adapter within the guest OS, the VPN bridge configured to:
add Ethernet frames to point-to-point protocol (PPP) packets received from the guest VPN adapter for communication to the virtual network adapter in the guest OS; and
remove Ethernet frames from packets received from the virtual network adapter for communication to the guest VPN adapter in the guest OS.
9. The computer-readable storage medium of claim 8 , wherein a first software component executing on the host processing system detects the host VPN adapter on the host processing system and, in response thereto, generates a notification to a second software component executing in the guest OS.
10. The computer-readable storage medium of claim 9 , wherein the first software component is further configured to cause the virtual network adapter to be created within the guest OS.
11. The computer-readable storage medium of claim 9 , wherein the second software component executing in the guest OS receives the notification from the first software component and, in response thereto, causes the guest OS to create the guest VPN adapter.
12. The computer-readable storage medium of claim 11 , wherein the second software component executing in the guest OS is further configured to insert the VPN bridge between the guest VPN adapter and the virtual network adapter in response to the notification.
13. The computer-readable storage medium of claim 8 , wherein the virtual network adapter comprises a virtual Ethernet adapter.
14. A host processing system, comprising:
a processor; and
a computer-readable storage medium having computer-executable instructions stored thereupon that, when executed by the processor, cause the processor to:
create a virtual network adapter and a guest virtual private network (VPN) adapter within a guest operating system (OS) provided by the host processing system, wherein the virtual network adapter mirrors a host virtual private network (VPN) adapter; and
cause a VPN bridge to be inserted between the guest VPN adapter and the virtual network adapter within the guest OS, the VPN bridge configured to:
add Ethernet frames to point-to-point protocol (PPP) packets received from the guest VPN adapter for communication to the virtual network adapter in the guest OS; and
remove Ethernet frames from packets received from the virtual network adapter for communication to the guest VPN adapter in the guest OS.
15. The host processing system of claim 14 , wherein a first software component executing on the host processing system detects the host VPN adapter on the host processing system and, in response thereto, generates a notification to a second software component executing in the guest OS.
16. The host processing system of claim 15 , wherein the first software component is further configured to cause the virtual network adapter to be created within the guest OS.
17. The computer-implemented method of claim 2 , wherein a first implementation used by the first software component executed on the host and a second implementation used by the second software component executed in the guest OS are useable together via the host VPN adapter and the guest VPN adapter.
18. The computer-implemented method of claim 1 , wherein the guest VPN adapter is created for program components executing on the guest OS to access a VPN.
19. The computer-implemented method of claim 1 , wherein adding the Ethernet frames to the PPP packets received from the guest VPN adapter facilitates transmission of the PPP packets through the virtual network adapter, a guest-host communication channel, a hypervisor, and a flow steering engine.
20. The computer-implemented method of claim 1 , further comprising creating a VPN connection for the guest OS by instantiating a VPN provider and instructing the guest OS to connect to the VPN provider to enable communications with a host OS associated with the host VPN adapter.