In general, techniques are described for configuring and managing virtual networks. For example, a distributed virtual network controller is described that configures and manages an overlay network within a physical network formed by plurality of switches. A plurality of servers are interconnected by the switch fabric, each of the servers comprising an operating environment executing one or more virtual machines in communication via the overlay networks. The servers comprises a set of virtual switches that extends the overlay network as a virtual network to the operating environment of the virtual machines. The controller may instruct the servers and the virtual switches to perform various operations, such as determining a physical network path taken by packets of a network packet flow, determining latency through the network, re-routing traffic in the virtual network due to network events, replicating traffic for multicasting, providing multi-tenant services to support multiple virtual networks, monitoring and logging traffic characteristics within the virtual networks and other operations.

Physical path determination for virtual network packet flows

In one embodiment, a method includes detecting a virtual resource hosted by a host device, selecting a configuration template associated with the virtual resource, and providing a provisioning instruction to a virtual switch module hosted by the host device based on the configuration template. The host device is operatively coupled to a network device. The detecting is at the network device; the selecting is at the network device; and the providing is at the network device. The virtual switch module is in communication with the virtual resource. The configuration template associated with the virtual resource is selected from a library of configuration templates accessible to the network device.

Methods and apparatus for distributed dynamic network provisioning

A surgical fastener applying apparatus for applying fasteners to body tissue. The apparatus includes a cartridge receiving half-section defining an elongated channel member, an anvil half-section, and a clamping lever. The cartridge receiving half-section releasably receives a cartridge and a firing assembly. The clamping lever includes a protrusion in a sidewall which is receivable in a bifurcated depression formed in a sidewall of the cartridge receiving half-section to releasably retain the clamping lever in a non-clamped position and in a clamped position. The apparatus includes a disposable firing assembly and SULU.

Surgical fastener applying apparatus

In one embodiment, an apparatus includes a processor configured for operation in a control plane in a distributed virtual switch in communication with a plurality of virtual machines each having a virtual interface. The processor is operable to identify other control planes in the distributed virtual switch, assign a virtual interface identifier to one of the virtual interfaces, receive a configuration for the virtual interface, and share the configuration with the other control planes in the distributed virtual switch. The virtual interface identifier provides a unique identifier for the virtual interface across all of the control planes. The apparatus further includes memory for storing the configuration of the virtual interface. A method for operating a network device associated with a control in the distributed virtual switch is also disclosed.

Distributed data center access switch

A novel method for logically routing a packet between a source machine that is in a first logical domain and a destination machine that is in a second logical domain is described. The method configures a managed switching element as a second-level managed switching element. The method configures a router in a host that includes the second-level managed switching element. The method communicatively couples the second-level managed switching element with the router. The method causes the router to route a packet when the router receives a packet from the first logical domain that is addressed to the second logical domain.

Distributed logical l3 routing

In one embodiment, a method includes performing, at a host device on a first side of a single-hop link, packet classification associated with hairpin routing of a first data packet between a first virtual resource and a second virtual resource that are logically defined at the host device. The first virtual resource can be different than the second virtual resource. The also includes transmitting a second data packet to a network device on a second side of the single-hop link so that packet classification associated with hairpin routing of the second data packet between at least two virtual resources logically defined at the host device is performed at the network device.

Methods and apparatus for routing between virtual resources based on a routing location policy

In one embodiment, a method includes receiving a provisioning instruction including a device identifier from an external management entity, receiving the device identifier from a network device, associating the provisioning instruction the network device, and sending a portion of the provisioning instruction to the network device. The device identifier being associated with a virtual resource. The associating is based on the device identifier of the virtual resource and a device identifier of a network device. The portion of the provisioning instruction is sent to the network device based on the associating.

Method and apparatus for determining a network topology during network provisioning

In general, techniques are described for flooding VPLS traffic with a network device according to flood groups. The network device resides within a layer 3 (L3) network and includes a control unit that executes a virtual private LAN service (VPLS) protocol that enables a VPLS domain to operate over the L3 network. The network device further includes a plurality of packet forwarding engines, each of which include a plurality of interface cards that receive a layer 2 (L2) message originating from the L2 network. The packet forwarding engines associate the L2 packet with a configurable flood group, wherein the flood group defines criteria to determine which messages to associate to the flood group and indicates a set of the interface cards for forwarding the associated messages. The packet forwarding engines further flood the L2 packet via each interface card indicated by the associated flood group.

Router using internal flood groups for flooding VPLS traffic

In one embodiment, a method includes receiving on a network side of a data center network a migration notification related to migration of a virtual resource from a source host device to a target host device. The source host device and the target host device can be on a server side of the data center network different than the network side of the data center network. The virtual resource can be logically defined at the source host device. The method can also include defining, before migration of the virtual resource is completed, an identifier representing a mapping of the virtual resource to the target host device in response to the migration notification. The defining can be performed on the network side of the data center network.

Amit Shukla

Papers

Methods and apparatus for distributed dynamic network provisioning

Methods and apparatus for routing between virtual resources based on a routing location policy

Method and apparatus for determining a network topology during network provisioning

Router using internal flood groups for flooding VPLS traffic

Methods and apparatus for provisioning at a network device in response to a virtual resource migration notification