Anycast edge service gateways

• US 10,341,236 B2
• Filed: 02/28/2017
• Issued: 07/02/2019
• Est. Priority Date: 09/30/2016
• Status: Active Grant

• Current Assignee: Nicira Incorporated (Broadcom, Inc.)
• Original Assignee: Nicira Incorporated (Broadcom, Inc.)
• Inventors: Boutros, Sami, Sengupta, Anirban, Ravinoothala, Sreeram, Wu, Liwen
• Primary Examiner(s): Khirodhar, Maharishi V
• Application Number:
  US15/445,922
• Publication Number:
  US 20180097734A1
• Time in Patent Office: 854 Days
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/64 using an overlay routing layer
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 49/70 Virtual switches

Abstract

Some embodiments provide a method for managing traffic in a virtualized environment. The method, in some embodiments, configures multiple edge service gateways (ESGs) executing on multiple host machines (e.g., on a hypervisor) to use a same anycast inner internet protocol (IP) address and a same anycast inner media access control (MAC) address. In some embodiments, ESGs of a logical network facilitate communication between machines connected to the logical network and machines on external networks. In some embodiments, the method configures a set of virtual extensible local area network tunnel endpoints (VTEPs) connected to an ESG to use a same anycast VTEP IP address. The method, in some embodiments, configures a distributed logical router (DLR or DR) to send data packets with destinations outside the logical network from sources belonging to the logical network to the anycast VTEP IP address.

Claims

1. A method for managing network traffic in a virtualized environment comprising:

configuring a plurality of edge gateways connected to a logical switching element to use a same anycast internet protocol (IP) address and a same anycast media access control (MAC) address, the edge gateways for facilitating communication between sources on a logical network and destinations on an external network, said logical network comprising the logical switching element;

configuring a set of virtual extensible local area network tunnel end points (VTEPs) to use a same anycast VTEP IP address, each VTEP in the set of VTEPs connected to at least one edge gateway in the plurality of edge gateways, wherein each VTEP in the set of VTEPs advertises the availability of the anycast VTEP IP address to a set of one or more forwarding elements connecting the VTEP to an underlay network; and

configuring a distributed router to send data packets with destinations outside the logical network from sources belonging to the logical network to the set of forwarding elements by using the anycast VTEP IP address,

wherein, for each packet flow that a particular forwarding element receives with an anycast VTEP IP address, the particular forwarding element selects a VTEP from a plurality of the VTEPs associated with a set of the edge gateways that are closest to the particular forwarding element according to a best route calculation, and forwards the packet flow to the selected VTEP to forward the packet flow to an edge gateway associated with the selected VTEP for forwarding outside the logical network.

2. The method of claim 1 wherein configuring the distributed router further comprises:

configuring the default gateway of the distributed router to be associated with the anycast VTEP IP address.

3. The method of claim 2, wherein the distributed router is configured to use the edge gateway anycast IP address as a default gateway;

and

wherein the edge gateway anycast IP address is associated with the anycast MAC address which is further associated with the anycast VTEP IP address.

4. The method of claim 1, wherein an edge gateway in the plurality of edge gateways advertises the availability of the anycast VTEP IP address to a forwarding element connecting the edge gateway to an underlay network.

5. The method of claim 4, wherein advertising the availability of the anycast VTEP IP address is accomplished by a dynamic routing protocol executing on the edge gateway.

6. The method of claim 5, wherein, when multiple edge gateways are closest according to the best route calculation, the forwarding element performs a load balancing operation for selecting the VTEP from the plurality of VTEPs.

7. The method of claim 1, wherein the best route calculation is according to an internal gateway protocol (IGP).

8. The method of claim 1, wherein the logical network is an overlay network and an underlay network for the logical network comprises forwarding elements performing the best route calculation.

9. The method of claim 1 further comprising:

configuring the distributed router to perform a load balancing operation for multiple edge gateways that operate on a same host as the distributed router.

10. The method of claim 1, wherein the edge gateway anycast IP address is an overlay anycast IP address.

11. A non-transitory machine readable medium storing a program which when executed by at least one processing unit manages network traffic in a virtualized environment, the program comprising sets of instruction for:

configuring a plurality of edge gateways connected to a logical switching element to use a same anycast internet protocol (IP) address and a same anycast media access control (MAC) address, the edge gateways for facilitating communication between sources on a logical network and destinations on an external network, said logical network comprising the logical switching element;

configuring a set of virtual extensible local area network tunnel end points (VTEPs) to use a same anycast VTEP IP address, each VTEP in the set of VTEPs connected to at least one edge gateway in the plurality of edge gateways, wherein each VTEP in the set of VTEPs advertises the availability of the anycast VTEP IP address to a set of one or more forwarding elements connecting the VTEP to an underlay network; and

configuring a distributed router to send data packets with destinations outside the logical network from sources belonging to the logical network to the set of forwarding elements by using the anycast VTEP IP address,

wherein, for each packet flow that a particular forwarding element receives with an anycast VTEP IP address, the particular forwarding element selects a VTEP from a plurality of the VTEPs associated with a set of the edge gateways that are closest to the particular forwarding element according to a best route calculation, and forwards the packet flow to the selected VTEP to forward the packet flow to an edge gateway associated with the selected VTEP for forwarding outside the logical network.

12. The non-transitory machine readable medium of claim 11 wherein the set of instructions for configuring the distributed router further comprises a set of instruction for:

configuring the default gateway of the distributed router to be associated with the anycast VTEP IP address.

13. The non-transitory machine readable medium of claim 12, wherein the distributed router is configured to use the edge gateway anycast IP address as a default gateway;

and

wherein the edge gateway anycast IP address is associated with the anycast MAC address which is further associated with the anycast VTEP IP address.

14. The non-transitory machine readable medium of claim 11, wherein an edge gateway in the plurality of edge gateways advertises the availability of the anycast VTEP IP address to a forwarding element connecting the edge gateway to an underlay network.

15. The non-transitory machine readable medium of claim 14, wherein advertising the availability of the anycast VTEP IP address is accomplished by a dynamic routing protocol executing on the edge gateway.

16. The non-transitory machine readable medium of claim 15, wherein, when multiple edge gateways are closest according to the best route calculation, the forwarding element performs a load balancing operation for selecting the VTEP from the plurality of VTEPs.

17. The non-transitory machine readable medium of claim 11, wherein the best route calculation is according to an internal gateway protocol (IGP).

18. The non-transitory machine readable medium of claim 11, wherein the logical network is an overlay network and an underlay network for the logical network comprises forwarding elements performing the best route calculation.

19. The non-transitory machine readable medium of claim 11 further comprising sets of instructions for:

configuring the distributed router to perform a load balancing operation for multiple edge gateways that operate on a same host as the distributed router.

20. The non-transitory machine readable medium of claim 11, wherein the edge gateway anycast IP address is an overlay anycast IP address.