METHODS AND SYSTEMS FOR CONTROLLING COMMUNICATION IN A VIRTUALIZED NETWORK ENVIRONMENT

摘要

Methods and related systems for controlling communication between Network Virtualization Edges (NVEs) in a network virtualization domain are provided. The methods generally involves generating and transmitting, by a Network Virtualization Authority (NVA), a list of participating NVEs to the NVEs comprised in the list, and the selective processing by the NVEs of messages received from other NVEs. By limiting NVE to NVE communication only to NVEs comprised in the list, attacks on the network can be mitigated.

主权项

1. A method to control communication in a network virtualization domain, the method comprising, at a network virtualization authority (NVA):
determining a virtual network (VN) in the network virtualization domain and network virtualization edges (NVEs) associated with the VN; generating a list of participating NVEs, the list comprising an identification of each of the participating NVEs; transmitting the list of participating NVEs to each of the NVEs comprised in the list.