发明名称 Handling reverse NAT in logical L3 routing
摘要 A non-transitory machine readable medium storing a program that configures first and second managed forwarding elements to perform logical L2 switching and L3 routing is described. The program generates a first set of flow entries for configuring the first managed forwarding element to (1) perform a network address translation (NAT) processing on a first packet and (2) send, to a second managed switching element. The first packet and information indicate that the NAT processing has been performed on the first packet. The program generates a second set of flow entries for configuring the second managed forwarding element to (1) skip performing a logical L3 processing on a second packet to be sent to the first managed forwarding element in response to receiving the first packet and (2) send the second packet to the first managed switching element.
申请公布号 US9185069(B2) 申请公布日期 2015.11.10
申请号 US201313757659 申请日期 2013.02.01
申请人 NICIRA, INC. 发明人 Koponen Teemu;Casado Martin;Thakkar Pankaj;Zhang Ronghua
分类号 H04L12/24;H04L12/28;H04L12/26;H04L12/741;H04L29/12;H04L12/801;H04L12/803 主分类号 H04L12/24
代理机构 Adeli LLP 代理人 Adeli LLP
主权项 1. A non-transitory machine readable medium storing a program which when executed by at least one processing unit configures a plurality of managed forwarding elements (MFEs) to implement a logical topology that comprises a logical L3 router and at least one logical L2 switch that logically couples to a plurality of machines, the program comprising sets of instructions for: for a first MFE that implements the logical topology and couples directly to a particular one of the plurality of machines, generating a first set of data records for configuring the first MFE to install a first set of flow entries that (i) implement the logical L2 switch and logical L3 router, (ii) perform source network address translation (NAT) processing on a first packet received from the particular machine and addressed to a particular destination, (iii) send, to a second MFE, the first packet with information indicating that the NAT processing has been performed on the first packet, and (iv) perform reverse source NAT processing on a second packet sent by the particular destination in response to the first packet; for a second MFE that implements the logical topology, generating a second set of data records for configuring the second MFE to install a second set of flow entries that (i) implement the logical L2 switch and logical L3 router for a subset of packets for which the second MFE is the initial MFE to process the packets and (ii) send the second packet, received from the particular destination in response to the first packet and for which the second MFE is the initial MFE to process the packet, to the first MFE without performing processing for the logical L3 router and the logical L2 switch on the second packet based on the information indicating that NAT processing was performed on the first packet.
地址 Palo Alto CA US