Providing services to virtual overlay network traffic

    公开(公告)号:GB2521572A

    公开(公告)日:2015-06-24

    申请号:GB201506949

    申请日:2013-09-26

    Applicant: IBM

    Abstract: In one embodiment, a method for applying security policy in an overlay network includes receiving a request, including a packet, for a communication path through an overlay network, determining whether a security policy is to be applied to the packet based on at least one of: contents of the packet, first information, and second information, selecting a communication path between a source physical switch and a destination physical switch, wherein the selected communication path directly connects the source physical switch to the destination physical switch when it is determined to not apply the security policy to the packet, and the selected communication path connects the source physical switch to the destination physical switch via a security appliance when it is determined to apply the security policy to the packet, and sending the selected communication path to the source physical switch.

    Network adapter hardware state migration discovery in a stateful environment

    公开(公告)号:GB2510508A

    公开(公告)日:2014-08-06

    申请号:GB201407146

    申请日:2012-09-26

    Applicant: IBM

    Abstract: An approach is provided in which a discovery system receives a migration request to move a virtual machine that executes on a first system. The discovery system identifies a first network adapter corresponding to the first system, and identifies hardware state data used by the first network adapter to process data packets generated by the virtual machine. In turn, the discovery system identifies a second network adapter that is compatible with a native format of the hardware state data, and migrates the virtual machine to a second system corresponding to the identified second network adapter.

    Dynamic network adapter memory resizing and bounding for virtual function translation entry storage

    公开(公告)号:GB2508747A

    公开(公告)日:2014-06-11

    申请号:GB201403417

    申请日:2012-07-13

    Applicant: IBM

    Abstract: An approach is provided which a system selects a first virtual function from a plurality of virtual functions executing on a network adapter that includes a memory area. Next, the system allocates, in the memory area, a memory corresponding to the first virtual function. The system then stores one or more translation entries in the allocated memory partition, which are utilized to send data traversing through the first virtual function. As such, the system sends, utilizing one or more of the translation entries, the data packets from the network adapter to one or more destinations. In turn, the system dynamically resizes the memory partition based upon an amount of the memory partition that is utilized to store the one or more translation entries.

    44.
    发明专利
    未知

    公开(公告)号:BRPI0720327A2

    公开(公告)日:2013-12-24

    申请号:BRPI0720327

    申请日:2007-12-13

    Applicant: IBM

    Abstract: A method, computer program product, and data processing system for efficiently discovering and storing path MTU information in a sending host are disclosed. In a preferred embodiment, two path MTU tables are maintained. One path MTU table contains MTU values corresponding to the first-hop routers associated with the sending host. The other path MTU table contains MTU values corresponding to individual destination hosts. When the sending host needs to send information to a destination, it first consults the MTU table associated with individual destination hosts. If an entry for that destination host is found in the table, the sending host uses that MTU value. If not, the sending host consults the MTU table for the first-hop router on the path to the destination host and uses that MTU value. If that MTU value is too high, a new entry is made in the host-specific MTU table for the destination host.

    45.
    发明专利
    未知

    公开(公告)号:AT369692T

    公开(公告)日:2007-08-15

    申请号:AT04766648

    申请日:2004-08-31

    Applicant: IBM

    Abstract: A graphic user interface of a network client (106) includes a stock ticker from a stock server (110) and a news sidebar from a news server (112) over the IP addresses advertised to the client (106) in its list of multi-homed addresses from the video server (104) specified under Stream Control Transmission Protocol (SCTP). The client accepts real-time data from the stock exchange server and the news agency server on the multi-homed IP addresses designated in the association with the video server (104) without knowing that the data is coming from a different source than the video server (104). The real-time data feeds from the video, stock and news servers are aggregated on the client (106) with enhanced speed because the feeds come directly to the client and not via the video server. The operating systems of the home server and remote servers utilize SCTP and specialized commands to implement the enhanced speed of real-time data aggregation being streamed to network clients without requiring modifications to existing client systems.

    46.
    发明专利
    未知

    公开(公告)号:DE60205952T2

    公开(公告)日:2006-05-18

    申请号:DE60205952

    申请日:2002-10-28

    Applicant: IBM

    Abstract: A data processing network and system in which a network connection is enabled to migrate among a multitude of available servers and/or clients to provide the connection using the most efficient available set of resources. Typically a server and client would indicate their respective support of this connection migration feature when the connection is established. An operating system or application program would monitor existing connections for characteristics including basic functionality and performance. If an existing connection were found to be faulty or low performing and the client and sever associated with the connection supported connection migration, the software would then determine if an alternative and more effective connection existed. Upon discovering such a connection, the parameters that define the connection would be altered to migrate the connection to the preferred hardware. In an embodiment in which the network connections are established with a transmission control protocol (TCP), each connection includes a four-tuple that completely defines the connection, namely, a source IP address, a source port number, a destination IP address, and a destination port number. By altering one or more of the connection's defining four-tuple, the invention is configured to migrate the connection to a NIC or system that is functioning more efficiently.

Patent Agency Ranking