Architecture and method having redundancy in active/active stateful devices based on symmetric global load balancing protocol (sGLBP)

• US 20060092950A1
• Filed: 05/31/2005
• Published: 05/04/2006
• Est. Priority Date: 10/28/2004
• Status: Abandoned Application

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Golshan, Ali, Portolani, Maurizio, Monclus, Pere, Arregoces, Mauricio
• Application Number:
  US11/141,808
• Publication Number:
  US 20060092950A1
• Time in Patent Office: Days
• US Class Current: 370/396
• CPC Class Codes: G06F 11/2007 using redundant communication media
• CPC Class Codes: G06F 11/2038 with a single idle spare processing component
• CPC Class Codes: H04L 45/24 Multipath
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 63/0254 Stateful filtering

Abstract

An architecture, arrangement, system, and method for or controlling traffic flow into and out of a server farm having active-active stateful devices. A symmetric Gateway Load Balancing Protocol (sGLBP) eliminates asymmetric traffic flow for out-bound traffic. Load distribution for in-bound traffic is balanced between a redundant pair of aggregation switches using either static host routes, Route Health Injection or in a more general manner, with external routes with a mask longer than the connected subnet advertised by the routing protocol. The return traffic is symmetric because it returns through the same aggregation switch that it came from. Similarly, traffic originating from a server farm exits from one of the redundant aggregation switches and returns from the same aggregation switch.

Claims

1. In a server farm, method for directing traffic to achieve a symmetrical traffic flow, said method comprising:

Controlling in-bound traffic from a client to a server along a selected traffic path; and

Controlling out-bound traffic from said server to said client by supplying a gateway MAC address that corresponds to said selected traffic path.

2. The method of claim 1, wherein said server farm is divided into at least two artificial subnets to partition traffic.

3. The method of claim 2 wherein said in-bound traffic is controlled by injecting a route into a gateway for partitioning traffic to a subnet of said server farm.

4. The method of claim 3 wherein said outbound traffic is controlled with symmetrical Global Load Balancing Protocol (sGLBP).

5. The method of claim 4 wherein said sGLBP advertises said least two artificial subnets and resolves MAC requests based on the source IP address of said requestor.

6. The method of claim 5, wherein at least one stateful device is in the path for both said controlled inbound traffic and said outbound traffic.

7. The method of claim 6 wherein said stateful devices comprise a redundant pair each of which operates in an active mode.

8. The method of claim 7 wherein said active/active redundant pair comprises a load balancer configured in a transparent mode.

9. The method of claim 7 wherein said active/active redundant pair comprises firewall contexts configured in a transparent mode.

10. The method of claim 9 wherein said active/active redundant pair comprises firewall contexts and load balancers configured in a chained transparent mode.

11. A method for symmetrically directing traffic to a server farm comprising:

Dividing said server farm into at least two artificial subnets;

Associating servers in each of said artificial subnets with an aggregation router;

Installing a route on said aggregation router for inbound client to server traffic; and

Advertising the associated subnet from an aggregation router to at least one core router.

12. The method of claim 11 wherein said controlling step further comprises the step of selecting at least one of the following for controlling in-bound client to server traffic:

a. Configuring a host route for each subnet on an aggregation router;

b. Selecting external routes with a mask longer than the connected subnet advertised by the routing protocol at said aggregation router.

13. The method of claim 11 further comprising controlling out-bound routes from said server farm by assigning a MAC address corresponding to the aggregation routers associated with said requesting server.

14. The method of claim 12 wherein said assigning step further comprises the step of associating a source IP address on the ARP request from the requesting server to the Mac address of the gateway such that both inbound and outbound routes are symmetric.

15. The method of claim 14, wherein said server farm is divided into at least two artificial subnets to partition traffic.

16. The method of claim 14 wherein said out-bound traffic is controlled with symmetrical Global Load Balancing Protocol (sGLBP).

17. The method of claim 14, wherein at least one stateful device is in the path for both said controlled inbound traffic and said outbound traffic.

18. The method of claim 17 wherein said stateful devices comprise a redundant pair each of which operates in an active mode.

19. A server farm comprising:

means for artificially partitioning said server farm into a plurality of subnets;

a plurality of peer aggregation routers adapted to advertise one of a plurality of virtual IP addresses for each subnet of said server farm, said addresses installed by injecting an inbound route;

each of said peer aggregation routers having a protocol for responding to a gateway request from a server in one of said subnets with a MAC address of one of said peer aggregation routers corresponding to the advertised address; and

at least one stateful device coupled between said aggregation routers and said server farm in transparent mode such that both the inbound traffic path and the outbound traffic path pass through said at least one stateful device.

20. The server farm of claim 19 wherein said stateful device comprises a redundant pair each of which operates in an active mode.