OVERLAY TUNNEL IN A FABRIC SWITCH

• US 20130250951A1
• Filed: 03/13/2013
• Published: 09/26/2013
• Est. Priority Date: 03/22/2012
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Brocade Communications Systems, Inc. (Broadcom, Inc.)
• Inventors: Koganti, Phanidhar
• Granted Patent: US 9,154,416 B2
• Time in Patent Office: Days
• US Class Current: 370/390
• CPC Class Codes: H04L 12/18 for broadcast or conference , e.g. multicast
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 49/356 for storage area networks
• CPC Class Codes: H04L 49/70 Virtual switches
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses

Abstract

One embodiment of the present invention provides a switch. The switch includes a tunnel management module, a packet processor, and a forwarding module. The tunnel management module operates the switch as a tunnel gateway capable of terminating an overlay tunnel. During operation, the packet processor, which is coupled to the tunnel management module, identifies in a data packet a virtual Internet Protocol (IP) address associated with a virtual tunnel gateway. This virtual tunnel gateway is associated with the switch and the data packet is associated with the overlay tunnel. The forwarding module determines an output port for an inner packet in the data packet based on a destination address of the inner packet.

Claims

1. A switch, comprising:

a tunnel management module configurable to operate the switch as a tunnel gateway capable of terminating an overlay tunnel;

a packet processor coupled to the tunnel management module and configurable to identify in a data packet a virtual Internet Protocol (IP) address associated with a virtual tunnel gateway, wherein the virtual tunnel gateway is associated with the switch, and wherein the data packet is associated with the overlay tunnel; and

a forwarding module configurable to determine an output port for an inner packet in the data packet based on a destination address of the inner packet.

2. The switch of claim 1, wherein the tunnel management module is further configurable to identify a hypervisor controlling a virtual machine, wherein the virtual machine initiates the overlay tunnel by encapsulating the inner packet using the virtual IP address.

3. The switch of claim 1, wherein the packet processor is further configurable to identify in the data packet a virtual media access control (MAC) address corresponding to the virtual IP address.

4. The switch of claim 1, further comprising a device management module configurable to generate a configuration message comprising the virtual IP address as a tunnel gateway address in response to detecting a hypervisor.

5. The switch of claim 4, wherein the virtual IP address in the configuration message corresponds to a default gateway router.

6. The switch of claim 1, wherein the virtual IP address is further associated with a remote switch, wherein the remote switch operates as a tunnel gateway and is associated with the virtual tunnel gateway.

7. The switch of claim 1, wherein the data packet is encapsulated based on Transparent Interconnection of Lots of Links (TRILL) protocol;

wherein the packet processor is further configurable to identify a virtual routing bridge (RBridge) identifier in the data packet; and

wherein the virtual RBridge identifier is associated with the switch.

8. The switch of claim 1, further comprising a fabric switch management module configurable to maintain a membership in a fabric switch.

9. The switch of claim 8, wherein the packet processor is further configurable to identify the inner packet to be a broadcast, unknown unicast, or multicast packet;

and

wherein the tunnel management module is further configurable to select a multicast tree in the fabric switch to distribute the inner packet based on one or more of;

multicast group membership, virtual local area network (VLAN) membership, and network load.

10. The switch of claim 1, wherein the tunnel management module is further configurable to learn a MAC address of a virtual machine via a tunnel initiated by a first hypervisor associated with the virtual machine.

11. The switch of claim 10, wherein the tunnel management module is further configurable to operate in conjunction with the packet processor to construct a message for a second hypervisor comprising an IP address of the first hypervisor in response to receiving a data frame with unknown destination from a virtual machine associated with the second hypervisor.

12. A computer-executable method, comprising:

operating a switch as a tunnel gateway capable of terminating an overlay tunnel;

identifying in a data packet a virtual Internet Protocol (IP) address associated with a virtual tunnel gateway, wherein the virtual tunnel gateway is associated with the switch, and wherein the data packet is associated with the overlay tunnel; and

determining an output port for an inner packet in the data packet based on a destination address of the inner packet.

13. The method of claim 12, further comprising identifying a hypervisor controlling a virtual machine, wherein the virtual machine initiates the overlay tunnel by encapsulating the inner packet using the virtual IP address.

14. The method of claim 12, further comprising identifying in the data packet a virtual media access control (MAC) address corresponding to the virtual IP address.

15. The method of claim 12, further comprising generating a configuration message comprising the virtual IP address as a tunnel gateway address in response to detecting a hypervisor.

16. The method of claim 15, wherein the virtual IP address in the configuration message corresponds to a default gateway router.

17. The method of claim 12, wherein the virtual IP address is further associated with a remote switch, wherein the remote switch operates as a tunnel gateway and is associated with the virtual tunnel gateway.

18. The method of claim 12, wherein the data packet is encapsulated based on Transparent Interconnection of Lots of Links (TRILL) protocol;

wherein an egress routing bridge (RBridge) identifier in the data packet corresponds to a virtual RBridge identifier; and

wherein the virtual RBridge identifier is associated with the switch.

19. The method of claim 12, further comprising maintaining a membership in a fabric switch.

20. The method of claim 19, further comprising:

identifying the inner packet to be a broadcast, unknown unicast, or multicast packet; and

selecting a multicast tree in the fabric switch to distribute the inner packet based on one or more of;

multicast group membership, virtual local area network (VLAN) membership, and network load.

21. The method of claim 12, further comp rising learning a MAC address of a virtual machine via a tunnel initiated by a first hypervisor associated with the virtual machine.

22. The method of claim 21, constructing a message for a second hypervisor comprising an IP address of the first hypervisor in response to receiving a data frame with unknown destination from a virtual machine associated with the second hypervisor.