Adaptive rate limiting of flow probes
地域：
CA
CA Palo Alto
摘要
A technique for performing adaptive rate limiting of flow probes is described. The technique includes sending a plurality of flow probes from a first service engine to at least one other service engine. The flow probes are sent at a rate that does not exceed a rate limit. A flow probe of the plurality of flow probes is generated in response to the first service engine receiving a mid-flow packet for a flow that is not recognized by the first service engine. A recipient service engine of the flow probe responds with a success indicator if the recipient service engine recognizes the flow. The technique also includes determining a success rate associated with success indicators received from the at least one other service engine and comparing the success rate with a first threshold. The rate limit is adjusted in response to a comparison result.
說明書
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
Benefit is claimed under 35 U.S.C. 119(a)-(d) to Foreign Application Serial No. 201941033979 filed in India entitled “ADAPTIVE RATE LIMITING OF FLOW PROBES”, on Aug. 23, 2019, by VMWARE, INC., which is herein incorporated in its entirety by reference for all purposes.
Computer networks are increasingly used to provide access to software applications. In large-scale networks such as data centers and enterprise networks, high volumes of traffic can be transmitted and received. To accommodate a large volume of traffic, the traffic for an application may be routed through and processed by multiple virtual machines and/or servers. To facilitate this flow of traffic through the network, connections between network components are established. For example, a connection between a client and a server may be established to allow the client to communicate with and utilize services provided by the server. This communication is via a flow of packets corresponding to the connection. Once the connection is created, mid-flow packets for the flow are sent through the network between the components.
權(quán)利要求
What is claimed is:1. A method comprising:sending a plurality of flow probes from a first service engine to at least one other service engine, wherein:the plurality of flow probes are sent at a rate not exceeding a rate limit; a flow probe of the plurality of flow probes is generated in response to the first service engine receiving a mid-flow packet for a flow that is not recognized by the first service engine; and a recipient service engine of the flow probe responds with a success indicator if the recipient service engine recognizes the flow; determining a success rate associated with success indicators received from the at least one other service engine; comparing the success rate with a first threshold; and adjusting the rate limit in response to a comparison result. 2. The method of claim 1 , wherein the adjusting the rate limit in response to the comparison result comprises increasing the rate limit in response to the success rate exceeding or meeting a first threshold. 3. The method of claim 2 , wherein the adjusting the rate limit further includes:reducing the rate limit if the success rate is less than a second threshold. 4. The method of claim 2 , wherein the adjusting the rate limit further includes:reducing the rate limit after a predetermined interval if the success rate is less than a second threshold. 5. The method of claim 1 , wherein the success rate corresponds to a number of success indicators received from the at least one other service engine in a time interval and the rate limit corresponds to a particular number of flow probes for the time interval. 6. The method of claim 5 , wherein the success rate is a real time success rate. 7. The method of claim 1 , further comprising:initially setting a value of the rate limit in response to an event. 8. The method of claim 1 , further comprising:mapping the flow for the mid-flow packet from the first service engine to the recipient service engine providing the success indicator. 9. A system, comprising:one or more processors configured to:send a plurality of flow probes from a first service engine to at least one other service engine, wherein the plurality of flow probes are sent at a rate not exceeding a rate limit, a flow probe of the plurality of flow probes is generated in response to the first service engine receiving a mid-flow packet for a flow that is not recognized by the first service engine, and a recipient service engine of the flow probe responds with a success indicator if the recipient service engine recognizes the flow; determine a success rate associated with success indicators received from the at least one other service engine; compare the success rate with a first threshold; and adjust the rate limit in response to a comparison result; and one or more memories coupled to the one or more processors and configured to provide the one or more processors with instructions. 10. The system of claim 9 , wherein to adjust the rate limit in response to the comparison result the processor is further configured to increase the rate limit in response to the success rate exceeding or meeting a first threshold. 11. The system of claim 10 , wherein to adjust the rate limit the processor is further configured to:reduce the rate limit if the success rate is less than a second threshold. 12. The system of claim 10 , wherein to adjust the rate limit, the processor is further configured to:reduce the rate limit after a predetermined interval if the success rate is less than a second threshold. 13. The system of claim 9 , wherein the success rate corresponds to a number of success indicators received from the at least one other service engine in a time interval and the rate limit is a particular number over the time interval. 14. The system of claim 13 , wherein the success rate is a real time success rate. 15. The system of claim 9 , wherein the processor is further configured to:initially set a value of the rate limit in response to an event. 16. The system of claim 9 , wherein the processor is further configured to:map the flow for the mid-flow packet from the first service engine to the recipient service engine providing the success indicator. 17. A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:sending a plurality of flow probes from a first service engine to at least one other service engine, the plurality of flow probes being sent at a rate not exceeding a rate limit, a flow probe of the plurality of flow probes being generated in response to the first service engine receiving a mid-flow packet for a flow that is not recognized by the first service engine, a recipient service engine of the flow probe responding with a success indicator if the recipient service engine recognizes the flow; determining a success rate associated with success indicators received from the at least one other service engine; comparing the success rate with a first threshold; and increasing the rate limit in response to the success rate exceeding the first threshold. 18. The computer program product of claim 17 , wherein the computer instructions for adjusting the rate limit in response to the comparison result comprises computer instructions for increasing the rate limit in response to the success rate exceeding or meeting a first threshold. 19. The computer program product of claim 18 , wherein the computer instructions for adjusting the rate limit further include computer instructions for:reducing the rate limit if the success rate is less than a second threshold. 20. The computer program product of claim 19 , wherein the computer instructions for adjusting the rate limit further include computer instructions for:reducing the rate limit after a predetermined interval if the success rate is less than the second threshold. 21. The computer program product of claim 19 , wherein the success rate is a real time success rate. 22. The computer program product of claim 17 , wherein the success rate corresponds to a number of success indicators received from the at least one other service engine in a time interval and the rate limit is a particular number over the time interval. 23. The computer program product of claim 17 , wherein the computer instructions further include computer instructions for:initially setting a value of the rate limit in response to an event.
意見反饋
使用該功能遇到問題
該功能需要專業(yè)版企業(yè)版VIP權(quán)限，您可以：
您也可以聯(lián)系官方QQ: 2157717237 電話: 13264338900