Authorization for advertised routes among logical routers

• US 10,601,700 B2
• Filed: 08/26/2018
• Issued: 03/24/2020
• Est. Priority Date: 08/31/2015
• Status: Active Grant

• Current Assignee: Nicira Incorporated (Broadcom, Inc.)
• Original Assignee: Nicira Incorporated (Broadcom, Inc.)
• Inventors: Goliya, Abhishek, Masurekar, Uday, Agarwal, Minjal
• Primary Examiner(s): Shivers, Ashley
• Application Number:
  US16/112,746
• Publication Number:
  US 20180367442A1
• Time in Patent Office: 576 Days
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/342 between virtual entities, e.g. orchestrators, SDN or NFV entities
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 45/021 Ensuring consistency of routing table updates, e.g. by using epoch numbers
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/72 Routing based on the source address

Abstract

Some embodiments provide a method for configuring a set of logical routers in a logical network. The method receives a configuration of an advertised route for a first logical router and a set of allowable routes for a second logical router to which the first logical router connects. The method determines whether the set of allowable routes for the second logical router includes the advertised route as an allowed route from the first logical router. Only when the advertised route is an allowed route from the first logical router, the method adds the advertised route to a routing table for at least one component of the second logical router.

Claims

1. A method for advertising a route associated with a logical network, the method comprising:

receiving a plurality of routes that a gateway is allowed to advertise for the logical network;

receiving a first route associated with the logical network for the gateway to advertise;

determining whether the first route is part of the plurality of routes; and

when the first route is part of the plurality of routes, distributing the first route to the gateway to advertise to a set of routers outside of the logical network.

2. The method of claim 1, wherein the gateway implements a provider logical router (PLR) managed by a datacenter provider, while the logical network is associated with a tenant of the datacenter and includes a tenant logical router (TLR) for which the first route is advertised outside to a set of routers outside of the logical network.

3. The method of claim 2, wherein

the TLR connects to the PLR via a particular logical interface of the PLR;

and

determining whether the first route is one of the plurality of routes allowed for advertising comprises determining whether the first route is one of the allowed routes for advertising for the particular logical interface of the PLR.

4. The method of claim 2, wherein the set of routers comprise routers outside of the datacenter.

5. The method of claim 1, wherein the PLR comprises (i) a distributed routing component implemented by a plurality of physical machines and (ii) one or more centralized routing components each implemented by a single physical machine, wherein the centralized routing components advertise the first route to the set of routers outside of the logical network.

6. The method of claim 5, wherein at least a subset of the plurality of physical machines further implements the TLR.

7. The method of claim 5, wherein each of the routing components of the PLR has a corresponding routing table, the method further comprising

adding a route to a corresponding routing table for the distributed routing component, said added route for the distributed routing component having a next hop address corresponding to an interface of the TLR;

and

adding a route to a corresponding routing table for each of the centralized routing components, said added routes for the centralized routing components each having a next hop address corresponding to an interface of the distributed routing component internal to the PLR.

8. The method of claim 1, wherein distributing the first route comprises providing the first route to a controller to distribute the route to the gateway.

9. The method of claim 1, wherein the gateway uses a route advertising protocol to advertise the first route to the set of routers.

10. The method of claim 1, wherein the plurality of allowable routes for advertising specifies, for a particular route, a prefix for the route and a set of allowable prefix ranges of the specified prefix.

11. A non-transitory machine readable medium storing a program for advertising a route associated with a logical network, the program for execution by at least one processing unit, the program comprising sets of instructions for:

receiving a plurality of routes that a gateway is allowed to advertise for the logical network;

receiving a first route associated with the logical network for the gateway to advertise;

determining whether the first route is part of the plurality of routes; and

when the first route is part of the plurality of routes, distributing the first route to the gateway to advertise to a set of routers outside of the logical network.

12. The non-transitory machine readable medium of claim 11, wherein the gateway implements a provider logical router (PLR) managed by a datacenter provider, while the logical network is associated with a tenant of the datacenter and includes a tenant logical router (TLR) for which the first route is advertised outside to a set of routers outside of the logical network.

13. The non-transitory machine readable medium of claim 12, wherein

the TLR connects to the PLR via a particular logical interface of the PLR;

and

the set of instructions for determining whether the first route is one of the plurality of routes allowed for advertising comprises a set of instructions for determining whether the first route is one of the allowed routes for advertising for the particular logical interface of the PLR.

14. The non-transitory machine readable medium of claim 12, wherein the set of routers comprise routers outside of the datacenter.

15. The non-transitory machine readable medium of claim 11, wherein the PLR comprises (i) a distributed routing component implemented by a plurality of physical machines and (ii) one or more centralized routing components each implemented by a single physical machine, wherein the centralized routing components advertise the first route to the set of routers outside of the logical network.

16. The non-transitory machine readable medium of claim 15, wherein at least a subset of the plurality of physical machines further implements the TLR.

17. The non-transitory machine readable medium of claim 15, wherein

each of the routing components of the PLR has a corresponding routing table,

a route is added to a corresponding routing table for the distributed routing component, said added route for the distributed routing component having a next hop address corresponding to an interface of the TLR;

and

a route is added to a corresponding routing table for each of the centralized routing components, said added routes for the centralized routing components each having a next hop address corresponding to an interface of the distributed routing component internal to the PLR.

18. The non-transitory machine readable medium of claim 11, wherein the set of instructions for distributing the first route comprises a set of instructions for providing the first route to a controller to distribute the route to the gateway.

19. The non-transitory machine readable medium of claim 11, wherein the gateway uses a route advertising protocol to advertise the first route to the set of routers.

20. The non-transitory machine readable medium of claim 11, wherein the plurality of allowable routes for advertising specifies, for a particular route, a prefix for the route and a set of allowable prefix ranges of the specified prefix.