Controlling a network interface using virtual switch proxying

摘要

Methods and systems for permitting a controller within a virtualization environment to control access to devices virtualized within hardware are described herein. For example, a NIC may be able to request rules that define how network traffic is managed at the NIC's virtual switch. In some arrangements, the NIC may transmit a query for the matching rule to a proxy, which may determine whether it has a rule matching the request. If the proxy does not have a matching rule, the proxy may query a controller for the matching rule, which may transmit the rule to the proxy. The proxy may update its store of rules and transmit the matching rule to the NIC. Upon receipt of the matching rule, the NIC may update the rules stored in its virtual switch and may process the packet in accordance with the matching rule.

主权项

1. A method, comprising:
communicating, by a proxy, with one or more controllers using an OpenFlow protocol, wherein the proxy includes one or more rules defining how network traffic is managed at one or more virtual switches; communicating, by the proxy, with the one or more virtual switches, wherein the one or more virtual switches conform to an OpenFlow specification; receiving, by the proxy, a packet from a virtual switch of the one or more virtual switches; determining a rule matching the packet; and transmitting the rule matching the packet to the virtual switch.