Patent ID: 9559950
Date: 2017-01-31
CPC Classifications: G06F,H04L

Claim:
1. A method, comprising: receiving, at a server of a data center network, a setup notification relating to setup of a virtual system on the server, wherein the setup notification indicates at least a function of the virtual system; allocating from a particular range of IP addresses an internet protocol (IP) address to the virtual system based on the function of the virtual system; in response to receipt of the setup notification, populating one or more entries in an access control data store, the one or more entries comprising the IP address allocated to the virtual system and at least one associated IP address of one or more communication endpoints; determining, by a packet forwarding function comprised within the server, whether to forward data packets based at least in part on the one or more entries that are populated in the access control data store; in the event the one or more entries that are populated in the access control data store indicate to forward the data packets, forwarding the data packets; and in the event the one or more entries that are populated in the access control data store do not indicate to forward the data packets, dropping the packet.