DATA CENTER NETWORKS

摘要

Measures for controlling communication access in a data center network are provided. A packet forwarding function in a server in a data center network is configured to access an access control data store when making forwarding decisions for received data packets which are being routed to/from virtual systems hosted on that server. In response to receipt, at the server, of a setup notification relating to setup of a virtual machine on the server, one or more entries are populated in the access control data store. The entries comprise an internet protocol (IP) address of the virtual system and at least one associated IP address of one or more other communication endpoints.

主权项

1. A method of controlling communication access in a data center network, the method comprising:
receiving, at a server in the data center network, a setup notification relating to setup of a virtual system on the server; and in response to receipt of the setup notification, populating one or more entries in an access control data store, the one or more entries comprising an internet protocol (IP) address of the virtual system and at least one associated IP address of one or more communication endpoints, wherein the access control data store is accessed by a packet forwarding function comprised within the server when making forwarding decisions for data packets.