US 12,284,113 B2
Layer-2 networking using access control lists in a virtualized cloud environment
Jagwinder Singh Brar, Bellevue, WA (US); Lucas Michael Kreger-Stickles, Seattle, WA (US); Bryce Eugene Bockman, Seattle, WA (US); Peter Croft Jones, Lexington, MA (US); and Shane Baker, Bellevue, WA (US)
Assigned to ORACLE INTERNATIONAL CORPORATION, Redwood Shores, CA (US)
Filed by Oracle International Corporation, Redwood Shores, CA (US)
Filed on Dec. 20, 2023, as Appl. No. 18/390,384.
Application 18/390,384 is a continuation of application No. 17/494,720, filed on Oct. 5, 2021, granted, now 11,909,636.
Claims priority of provisional application 63/132,377, filed on Dec. 30, 2020.
Prior Publication US 2024/0121186 A1, Apr. 11, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 45/586 (2022.01); G06F 9/455 (2018.01); G06F 9/50 (2006.01); H04L 9/40 (2022.01); H04L 45/00 (2022.01); H04L 45/16 (2022.01); H04L 47/12 (2022.01); H04L 47/2483 (2022.01); H04L 49/00 (2022.01); H04L 61/103 (2022.01); H04L 61/2517 (2022.01); H04L 67/10 (2022.01); H04L 69/324 (2022.01); H04L 101/622 (2022.01)
CPC H04L 45/586 (2013.01) [G06F 9/45558 (2013.01); G06F 9/5077 (2013.01); H04L 45/16 (2013.01); H04L 45/66 (2013.01); H04L 47/12 (2013.01); H04L 47/2483 (2013.01); H04L 49/70 (2013.01); H04L 61/103 (2013.01); H04L 61/2517 (2013.01); H04L 63/101 (2013.01); H04L 69/324 (2013.01); G06F 2009/4557 (2013.01); G06F 2009/45595 (2013.01); H04L 67/10 (2013.01); H04L 2101/622 (2022.05)] 20 Claims
OG exemplary drawing
 
1. A network virtualization device comprising:
one or more processors; and
one or more computer-readable storage media storing instructions that, upon execution by the one or more processors, configure the network virtualization device to:
host a Layer 2 virtual network interface for a Layer 2 compute instance that belongs to a Layer 2 virtual network,
the Layer 2 compute instance is hosted on a host machine of a physical network that comprises the network virtualization device, the host machine and the network virtualization device being communicatively coupled, and
the Layer 2 virtual network is hosted on the physical network and comprises a plurality of Layer 2 compute instances and a plurality of Layer 2 virtual network interfaces;
store access control list (ACL) information associated with the Layer 2 virtual network interface;
receive a frame having header information;
determine that the ACL information is applicable to a flow of the frame between the Layer 2 virtual network interface and a destination; and
include at least a portion of the ACL information in the frame.