Sharing common L2 segment in a virtual distributed router environment

• US 10,348,625 B2
• Filed: 08/31/2015
• Issued: 07/09/2019
• Est. Priority Date: 06/30/2015
• Status: Active Grant

• Current Assignee: Nicira Incorporated (Broadcom, Inc.)
• Original Assignee: Nicira Incorporated (Broadcom, Inc.)
• Inventors: Agarwal, Vivek, Chandrashekhar, Ganesan, Subramaniyam, Rahul Korivi, Wang, Howard, Singh, Ram Dular
• Primary Examiner(s): Daniel, Jr., Willie J
• Application Number:
  US14/840,277
• Publication Number:
  US 20170005918A1
• Time in Patent Office: 1,408 Days
• Field of Search: None
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/38 Flow based routing
• CPC Class Codes: H04L 45/44 Distributed routing
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/66 Layer 2 routing, e.g. in Ethernet based MAN's
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 47/33 using forward notification
• CPC Class Codes: H04L 49/70 Virtual switches
• CPC Class Codes: H04L 69/325 in the network layer [OSI layer 3], e.g. X.25 H04L69/16 takes precedence

Abstract

A LRE (logical routing element) that have LIFs that are active in all host machines spanned by the LRE as well as LIFs that are active in only a subset of those spanned host machines is provided. A host machine having an active LIF for a particular L2 segment would perform the L3 routing operations for network traffic related to that L2 segment. A host machine having an inactive LIF for the particular L2 segment would not perform L3 routing operations for the network traffic of the L2 segment.

Claims

1. A system comprising:

a plurality of host machines that are configured to operate a first LRE (logical routing element) for routing packets between a first set of network segments in a first logical network and a second LRE for routing packets between a second set of network segments in a second logical network, wherein each host machine executes a first MPRE (managed physical routing element) as a local instance of the first LRE and a second MPRE as a local instance of the second LRE,

wherein at least one particular network segment connects the first and second LREs with at least one edge gateway that executes on a particular host machine and serves as a gateway node at an edge boundary of each logical network and an external network,

wherein the first LRE comprises a first backplane conduit and the second LRE comprises a second backplane conduit,

wherein for the edge gateway to process packets, the particular host machine receives packets addressed to a shared network address (1) from the first logical network through the first backplane conduit at the particular host machine'"'"'s first MPRE and (2) from the second logical network through the second backplane conduit at the particular host machine'"'"'s second MPRE.

2. The system of claim 1, wherein each host machine operates a MPSE (managed physical switching element) for handling L2 switching for both the first logical network and the second logical network, wherein the MPSE performs switching of a packet between a plurality of ports based on a MAC address and a network segment identifier.

3. The system of claim 2, wherein the first MPRE and the second MPRE share a same port at the MPSE on the particular host machine, wherein the particular host machine determines which MPRE receives a particular packet based on at least one of (1) a network segment identifier associated with the packet and (2) an identity of the backplane conduit used to transport the packet.

4. The system of claim 3, wherein the particular packet is destined for the particular network segment having a particular network segment identifier, wherein the first MPRE on the particular host machine receives the particular packet when the identity of the backplane conduit belongs to the first backplane conduit, wherein the second MPRE on the particular host machine receives the particular packet when the identity of the backplane conduit belongs to the second backplane conduit.

5. The system of claim 2, wherein the network identifier is a VNI (virtual network identifier) of a VLAN network that is accessible by both the first logical network and the second logical network.

6. The system of claim 1, wherein the particular network segment is an IP subnet that is accessible by both the first logical network and the second logical network.

7. The system of claim 1, wherein the first MPRE of the particular host machine receives a first packet from the first backplane conduit based on a MAC address associated with the particular host machine, wherein the second MPRE of the particular host machine receives a second packet from the second backplane conduit based on the same MAC address.

8. The system of claim 1, wherein the edge gateway is an edge service gateway that provides edge services at the edge boundary between each logical network and the external network.

9. A non-transitory machine readable medium storing a program for operating a logical network over a plurality of host machines, the program comprising sets of instructions for:

at a particular host machine of the plurality of host machines, operating a first MPRE (managed physical routing element) and a second MPRE, wherein the first MPRE is a local instance of a first LRE (logical routing element) for routing packets between a first set of segments of a first logical network and the second MPRE is a local instance of a second LRE for routing packets between a second set of segments of a second logical network,

wherein at least one particular network segment connects the first and second LREs with at least one edge gateway that executes on the particular host machine and serves as a gateway node at an edge boundary of each logical network and an external network,

wherein the first LRE comprises a first backplane conduit and the second LRE comprises a second backplane conduit; and

for the edge gateway to process packets, receiving, at the particular host machine, packets addressed to a shared network address (1) from the first logical network through the first backplane conduit at the first MPRE and (2) from the second logical network through the second backplane conduit at the second MPRE.

10. The non-transitory machine readable medium of claim 9, wherein the particular host machine operates a MPSE (managed physical switching element) for handling L2 switching for both the first logical network and the second logical network, wherein the MPSE performs switching of a packet between a plurality of ports based on a MAC address and a network segment identifier.

11. The non-transitory machine readable medium of claim 10, wherein the first MPRE and the second MPRE share a same port at the MPSE, wherein the particular host machine determines which MPRE receives a particular packet based on at least one of (1) a network segment identifier associated with the packet and (2) an identity of the backplane conduit used to transport the packet.

12. The non-transitory machine readable medium of claim 11, wherein the particular packet is destined for the particular network segment having a particular network segment identifier, wherein the first MPRE receives the particular packet when the identity of the backplane conduit belongs to the first backplane conduit, wherein the second MPRE receives the particular packet when the identity of the backplane conduit belongs to the second backplane conduit.

13. The non-transitory machine readable medium of claim 9, wherein the particular network segment is an IP subnet that is accessible by both the first logical network and the second logical network.

14. The non-transitory machine readable medium of claim 9, wherein the network identifier is a VNI (virtual network identifier) of a VLAN network that is accessible by both the first logical network and the second logical network.

15. The non-transitory machine readable medium of claim 9, wherein the first MPRE of the particular host machine receives a first packet from the first backplane conduit based on a MAC address associated with the particular host machine, wherein the second MPRE of the particular host machine receives a second packet from the second backplane conduit based on the same MAC address.

16. The non-transitory machine readable medium of claim 9, wherein the edge gateway is an edge service gateway that provides edge services at the edge boundary between each logical network and the external network.

17. A method of operating a plurality of logical networks over a network virtualization infrastructure that comprises a plurality of host machines operating a set of virtual machines (VMs), the method comprising:

defining a first LRE (logical routing element) for routing packets between a first set of network segments in a first logical network and a second LRE for routing packets between a second set of network segments in a second logical network, wherein each host machine executes a first MPRE (managed physical routing element) as a local instance of the first LRE and a second MPRE as a local instance of the second LRE,

wherein at least one particular network segment connects the first and second LREs with at least one edge gateway that executes on a particular host machine and serves as a gateway node at an edge boundary of each logical network and an external network;

defining a first backplane conduit for the first LRE and a second backplane conduit for the second LRE,

wherein for the edge gateway to process packets, the particular host machine receives packets addressed to a shared network address (1) from the first logical network through the first backplane conduit at the particular host machine'"'"'s first MPRE and (2) from the second logical network through the second backplane conduit at the particular host machine'"'"'s second MPRE; and

generating configuration data based on the defined LREs and the defined backplane conduits and configuring the plurality of host machines by using the generated configuration data.

18. The method of claim 17, wherein each host machine operates a MPSE (managed physical switching element) for handling L2 switching for both the first logical network and the second logical network, wherein the MPSE performs switching of a packet between a plurality of ports based on a MAC address and a network segment identifier.

19. The method of claim 18, wherein the first MPRE and the second MPRE share a same port at the MPSE on the particular host machine, wherein the particular host machine determines which MPRE receives a particular packet based on at least one of (1) a network segment identifier associated with the packet and (2) an identity of the backplane conduit used to transport the packet.

20. The method of claim 19, wherein the particular packet is destined for the particular network segment having a particular network segment identifier, wherein the first MPRE on the particular host machine receives the particular packet when the identity of the backplane conduit belongs to the first backplane conduit, wherein the second MPRE on the particular host machine receives the particular packet when the identity of the backplane conduit belongs to the second backplane conduit.

21. The method of claim 17, wherein the particular network segment is an IP subnet that is accessible by both the first logical network and the second logical network.

22. The method of claim 18, wherein the network identifier is a VNI (virtual network identifier) of a VLAN network that is accessible by both the first logical network and the second logical network.

23. The method of claim 17, wherein the first MPRE of the particular host machine receives a first packet from the first backplane conduit based on a MAC address associated with the particular host machine, wherein the second MPRE of the particular host machine receives a second packet from the second backplane conduit based on the same MAC address.

24. The method of claim 17, wherein the edge gateway is an edge service gateway that provides edge services at the edge boundary between each logical network and the external network.