Wei Xia

US Patent:

20200092299, Mar 19, 2020

Filed:

Dec 27, 2018

Appl. No.:

16/233981

Inventors:

- Redmond WA, US
Neha AGGARWAL - Seattle WA, US
Deven JAGASIA - Kirkland WA, US
Fengfen LIU - Sammamish WA, US
Karthik ANANTHAKRISHNAN - Redmond WA, US
Avijit GUPTA - Redmond WA, US
Ganesh SRINIVASAN - Redmond WA, US
Nisheeth SRIVASTAVA - Redmond WA, US
Rishabh TEWARI - Sammamish WA, US
Michal Czeslaw ZYGMUNT - Bellevue WA, US
Harish Kumar CHANDRAPPA - Bothell WA, US
Gabriel SILVA - Redmond WA, US
Naveen PRABHAT - Redmond WA, US
Sumit Sharad DHOBLE - Redmond WA, US
Xinyan ZAN - Sammamish WA, US
Maitrey KUMAR - Redmond WA, US
Wei XIA - Redmond WA, US

International Classification:

H04L 29/06
G06F 9/455
G06F 9/54
H04L 29/08

Abstract:

The disclosed system implements techniques to enable a tenant of a cloud-based platform to effectively and efficiently apply a policy that copies data packets communicated to or from a virtual machine in the tenant's own virtual network. When applied, the policy mirrors data traffic associated with a workload executing on a virtual machine in the tenant's virtual network. To mirror the data traffic, a copy of a data packet is streamed to another virtual machine so that network analytics can be performed (e.g., performance analytics, security analytics, etc.). In various examples, the policy can be a role-based mirroring policy that defines a plurality of roles in association with a role-based access model that scales operations and that provides improved security for a tenant's virtual network.