Extended subnets

• US 20110019676A1
• Filed: 07/21/2009
• Published: 01/27/2011
• Est. Priority Date: 07/21/2009
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Portolani, Maurizio, Elsen, Christian
• Granted Patent: US 8,532,116 B2
• Time in Patent Office: Days
• US Class Current: 370/395.53
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2212/00 Encapsulation of packets
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/66 Layer 2 routing, e.g. in Ethernet based MAN's
• CPC Class Codes: H04L 45/74 Address processing for routing

Abstract

There is provided a router for use in a datacenter, the router including a frame receiving module operative to receive a traffic frame and a frame forwarding module operative to forward the traffic frame to a second router in a second datacenter if a Destination Media Access Control (DMAC) address included in the traffic frame is different from all of the following:

• • a Burned in Address of the router;
  • a Burned in Address of at least one server associated with the router;
  • a Media Access Control (MAC) address of one of a Hot Standby Routing Protocol (HSRP) group and a Virtual Router Redundancy Protocol (VRRP) group of the router; and
  • a MAC address of one of a HSRP group and a VRRP group of a subnet hosted by the router.

Claims

1. A router for use in a datacenter, comprising:

a frame receiving module operative to receive a traffic frame including a Destination Media Access Control (DMAC) address; and

a frame forwarding module operative to forward said traffic frame to a second router in a second datacenter if said DMAC address is different from all of the following;

a Burned in Address of said router;

a Burned in Address of at least one server associated with said router;

a Media Access Control (MAC) address of one of a Hot Standby Routing Protocol (HSRP) group and a Virtual Router Redundancy Protocol (VRRP) group of said router; and

a MAC address of one of a HSRP group and a VRRP group of a subnet hosted by said router.

2. A router according to claim 1 and wherein said frame forwarding module is operative to forward said traffic frame to said second router via a tunneling module connecting said datacenter with said second datacenter.

3. A router according to claim 1 and wherein said frame forwarding module is operative to not forward said traffic frame to said second router if said DMAC address is the same as one of the following:

a Burned in Address of said router;

a Burned in Address of at least one server associated with said router;

a Media Access Control (MAC) address of one of a Hot Standby Routing Protocol (HSRP) group and a Virtual Router Redundancy Protocol (VRRP) group of said router; and

a MAC address of one of a HSRP group and a VRRP group of a subnet hosted by said router.

4. A router according to claim 3 and wherein said frame forwarding module is associated with a routing table indicating a destination, and is operative, when not forwarding said traffic frame to said second router, to forward said traffic frame to said destination indicated in said routing table.

5. A router according to claim 1 and also comprising a detection module operative to detect migration of a virtual address from said datacenter to another datacenter by detecting at least one of a gratuitous Address Resolution Protocol (ARP) message and a reverse ARP message, sent by said virtual address.

6. A router according to claim 5, and also comprising:

an ARP cache table; and

an ARP cache table updating module which is operative to receive from said detection module at least one migration detection input and to update said ARP cache table based on said input.

7. A router for use in a datacenter, comprising:

detection means for detecting at least one of a gratuitous Address Resolution Protocol (ARP) message and a reverse ARP message, sent by a virtual address which migrated from another datacenter to said datacenter and is foreign thereto;

validation means for validating the presence of said virtual address by sending an ARP message to said virtual address and by receiving a response message from said virtual address which response includes as a destination address a Media Access Control (MAC) address of a router in said another datacenter.

8. A router according to claim 7 and also comprising notification means operative to notify at least one other router of a host route for accessing said virtual address.

9. A router according to claim 8 and wherein said host route comprises a /32 route.

10. A router according to claim 8 and wherein said at least one other router comprises another router in said datacenter.

11. A router according to claim 8 and wherein said at least one other router comprises a router in at least one other datacenter.

12. A method for transmitting data in a communications system including a plurality of datacenters, the method comprising:

connecting Virtual Local Area Networks (VLANs) of the plurality of datacenters using a tunneling module;

in a first datacenter, detecting the presence of virtual address which normally resides in a second datacenter but has migrated to said first datacenter, said detecting including;

at said first datacenter, receiving from said virtual address at least one of a gratuitous Address Resolution Protocol (ARP) message and a reverse ARP message;

employing said at least one of a gratuitous ARP message and a reverse ARP message to determine the presence of said virtual address in said first datacenter; and

validating the presence of said virtual address in said first datacenter;

notifying said plurality of datacenters of the presence of said virtual machine in said first datacenter; and

following said notifying, at each of said plurality of datacenters, directing requests for said virtual address directly to second server in said second datacenter.

13. A method according to claim 12 and wherein said validating comprises:

sending from said first datacenter an ARP message to said virtual address; and

at said first datacenter, receiving a response from said virtual address including a Media Access Control (MAC) address belonging to said second datacenter.

14. A method according to claim 13 and wherein said sending comprises sending an ARP message, including, as its source address, an IP address of a Switch Virtual Interface (SVI) associated with said second datacenter.

15. A method according to claim 12 and wherein said notifying comprises providing a notification of a host route for accessing said virtual address from said first datacenter to said plurality of datacenters via a routed connection interconnecting said plurality of datacenters.

16. A method according to claim 15 and wherein said host route comprises a /32 route.

17. A method according to claim 12 and also comprising:

at said second datacenter, receiving said at least one of a gratuitous ARP message and a reverse ARP message; and

updating at least one ARP cache table in said second datacenter to indicate the migration of said virtual address.

18. A method according to claim 12 and wherein said detecting is carried out by a Switch Virtual Interface (SVI) associated with said first datacenter.

19. A method according to claim 12 and wherein said directing comprises:

at a given router in one of said plurality of datacenters, receiving a traffic frame designating said virtual address; and

forwarding said traffic frame to a router in said second datacenter via said tunneling module if a Destination Media Access Control (DMAC) address included in said frame is different from all of the following;

a Burned in Address of said given router;

a Burned in Address of at least one server associated with said given router;

a Media Access Control (MAC) address of one of a Hot Standby Routing Protocol (HSRP) group and a Virtual Router Redundancy Protocol (VRRP) group of said given router; and

a MAC address of one of a HSRP group and a VRRP group of a subnet hosted by said given router.

20. A method according to claim 12, and also comprising employing said tunneling module for providing communication between servers, which reside in different ones of said plurality of datacenters, but which belong to a single high availability cluster.