Virtualization gateway between virtualized and non-virtualized networks

摘要

Methods and apparatus are provided for controlling communication between a virtualized network and non-virtualized entities using a virtualization gateway. A packet is sent by a virtual machine in the virtualized network to a non-virtualized entity. The packet is routed by the host of the virtual machine to a provider address of the virtualization gateway. The gateway translates the provider address of the gateway to a destination address of the non-virtualized entity and sends the packet to the non-virtualized entity. The non-virtualized entity may be a physical resource, such as a physical server or a storage device. The physical resource may be dedicated to one customer or may be shared among customers.

主权项

1. A method for controlling communication between a virtualized network and a non-virtualized entity, the method comprising:
receiving, by a host executing a hypervisor managing a virtual machine, a packet sent by the virtual machine to a customer network address of the non-virtualized entity; responding to receipt of the packet by the hypervisor, the hypervisor:
accesses a first mapping policy from a plurality of mapping policies that comprise mappings of host addresses to virtual machine addresses and maintained to reflect migrations of the virtual machines, the plurality of mapping policies further comprising a gateway mapping indicating that addresses in a customer address space map to a provider network address of a first physical network interface of a gateway,encapsulates the packet in an encapsulation packet based on the gateway mapping in the first mapping policy, the encapsulation packet indicating that it was sent to the provider network address of the first physical network interface of the gateway and indicating that it was sent from a provider network address of the host, andtransmits the encapsulation packet by the host to the gateway via a provider physical network, the gateway configured to, based on a second mapping policy from the plurality of mapping policies, decapsulate and transmit the received packet to the customer network address of the non-virtualized entity.