Switch controller

摘要

According to an example, a switch controller is connected to a computer hosting a virtual machine (VM) and a virtual switch to provide packet forwarding for the VM. The switch controller restricts packet forwarding actions on the ports according to the assigned primary VLAN, the assigned secondary VLAN, and the assigned VDS to the ports and the stored rules.

主权项

1. A switch controller connected to a computer hosting a virtual machine (VM) and a virtual switch to provide packet forwarding for the VM, the switch controller comprising:
a memory to store assignments of ports in the virtual switch to a primary virtual local area network (VLAN), a secondary VLAN and a virtual distributed switch (VDS) and to store rules; and at least one processor to restrict packet forwarding actions on the ports according to at least one of the assigned primary VLAN, the assigned secondary VLAN, and the assigned VDS to the ports and the stored rules, wherein to restrict the packet forwarding actions, the at least one processor is to generate flow table entries for a flow table for the virtual switch based on the rules and the assignments of the ports, and send the flow table entries to the virtual switch, and wherein to generate the flow table entries, the at least one processor is to:
receive an event message including a packet from the virtual switch, wherein the virtual switch sends the event message to the switch controller in response to determining there is no match for the packet in the flow table,determine whether to discard the packet or generate a flow table entry based on the rules and the port assignments, andin response to determining to generate the flow table entry, generate a flow table entry for the packet, and send the flow table entry to the virtual switch.