The disclosure herein describes a system, which provides service switching in a datacenter environment. The system can include a service switching gateway, which can identify a service tag associated with a received packet. During operation, the service switching gateway determines a source client, a requested service, or both for the packet based on the service tag, identifies a corresponding service portal based on the service tag, and forwards the packet toward the service portal. The service switching gateway can optionally maintain a mapping between the service tag and one or more of: a source client, a required service, the service portal, and a tunnel encapsulation. The service switching gateway can encapsulate the packet based on an encapsulation mechanism supported by the service portal and forward the packet based on the mapping.

Method and system for service switching using service tags

For a multi-tenant environment, some embodiments of the invention provide a novel method for (1) embedding a specific path for a tenant's data message flow through a network in tunnel headers encapsulating the data message flow, and then (2) using the embedded path information to direct the data message flow through the network. In some embodiments, the method selects the specific path from two or more viable such paths through the network for the data message flow.

Specifying and utilizing paths through a network

The invention provides a distributed computing resource allocation system and a task processing method. The distributed computing resource allocation system comprises a central server and a plurality of node servers. The central server is used for receiving video image tasks sent by a user and allocating the video image tasks to corresponding node servers through central ends of computing units based on the types of the video image tasks as well as the current task number and load conditions of the node servers. The node servers are used for processing the video image tasks through node ends of the computing units corresponding to the video image tasks. According to the distributed computing resource allocation system and the task processing method provided by the invention, different types of video image tasks can be processed by using multiple servers of one server cluster, and the utilization rate of the server cluster can be increased.

Distributed computing resource allocation system and task processing method

A method of enforcing security rules for a packet on a host is provided The method at a security service dispatcher, determines a dispatching action on a packet for each of a group of security services Each security service is for enforcing a set of security rules on each packet The method for each security service, sends the packet to the security service when the dispatch rule for the security service indicates that the set of security rules of the security service has to be enforced on the packet The method for each security service, bypasses the enforcement of the security rules of the security service when the dispatch rule for the security service indicates that the set of security rules of the security service has to be bypassed for the packet

Third-party service chaining using packet encapsulation in a flow-based forwarding element

Some embodiments provide a method for providing a layer 2 (L2) bump-in-the-wire service at a gateway device (e.g., a layer 3 (L3) gateway device) at the edge of a logical network. The method, in some embodiments, establishes a connection from a first interface of the gateway device to a service node that provides the L2 service. The method also establishes a connection from a second interface of the gateway device to the L2 service node. The method then sends data messages received by the gateway device that require the L2 service to the service node using the first interface. Some embodiments provide a method for applying different policies at the service node for different tenants of a datacenter. Data messages received for a particular tenant that require the L2 service are encapsulated or marked as belonging to the tenant before being sent to the service node. Based on the encapsulation or marking, the service node provides the service according to policies defined for the tenant.

Incorporating layer 2 service between two interfaces of gateway device

The invention discloses a cloud computing platform server load balancing system and method, so as to overcome the defect that the current static load balancing technology cannot carry out dynamic adjustment according to the real-time condition of a load and the defect that a dynamic load balancing technology needs to additionally occupy system resources. According to the method, when a service request is received, a cloud computing platform selects a target server according to the number of requests which are processed and are being processed by each server in a cluster in recent preset unit time and the number of generated logs, and forwards the service request to the target server for processing. According to the embodiment of the invention, the load balancing can be effectively improved.

Liu Di

Papers

Cloud computing platform server load balancing system and method