Virtual gateway router

• US 8,478,902 B1
• Filed: 02/06/2013
• Issued: 07/02/2013
• Est. Priority Date: 02/06/2012
• Status: Active Grant

• Current Assignee: Skytap Incorporated
• Original Assignee: Skytap Incorporated
• Inventors: Schick, Bradley M., Holland, Peter
• Primary Examiner(s): Maung, Zarni
• Application Number:
  US13/761,084
• Time in Patent Office: 146 Days
• Field of Search: 709/203, 709223-229, 709238-242, 709/250
• US Class Current: 709/238
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 12/6418 Hybrid transport
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A facility for configuring a virtual data center is described. A user such as an administrator uses a management interface to input information specifying a configuration for a virtual data center including virtual network nodes and virtual routers. In response, the facility instantiates each virtual network router needed for the configuration, such as by, for each, instantiating on commodity hardware a virtual machine running a general-purpose operating system used to provide routing services to the virtual network nodes.

Claims

1. A method performed by a computing system having at least one processor core, the method comprising:

receiving via a management interface information specifying a virtual data center configuration comprising at least one networking parameter specified for the virtual data center;

in response to the receiving;

with one or more of the processor cores of the at least one processor core, causing to be instantiated a plurality of virtual machines as nodes in the virtual data center;

with one or more of the processor cores of the at least one processor core, causing to be instantiated a virtual machine as a router for connecting at least a portion of the plurality of virtual machines instantiated as nodes;

with one or more of the processor cores of the at least one processor core, causing the virtual machine caused to be instantiated as a router to be loaded with a general-purpose operating system comprising a network routing component;

with one or more of the processor cores of the at least one processor core, configuring in accordance with the at least one networking parameter specified for the virtual data center the network routing component of the general-purpose operating system loaded with which the virtual machine caused to be instantiated as a router is caused to be loaded; and

with one or more of the processor cores of the at least one processor core, after the configuring, causing the virtual machine caused to be instantiated as a router to operate as a router for the at least a portion of the plurality of virtual machines instantiated as nodes.

2. The method of claim 1 wherein the management interface is a visual user interface.

3. The method of claim 1 wherein the management interface is a visual user interface provided by one or more web pages.

4. The method of claim 1 wherein the computing system comprises commodity hardware.

5. The method of claim 1 wherein the general-purpose operating system is an open-source general-purpose operating system.

6. The method of claim 1 wherein the general-purpose operating system is an open-source general-purpose operating system adapted for use in a virtual router.

7. The method of claim 1 wherein, in response to the receiving, a plurality of virtual machines are caused to be instantiated as routers.

8. The method of claim 7 wherein the instantiation of the plurality of virtual machines as routers is performed in parallel.

9. The method of claim 7 wherein the information specifying a virtual data center configuration specifies the number of virtual machines to be instantiated as routers.

10. The method of claim 7 wherein the information specifying a virtual data center configuration specifies a number of virtual machines to be instantiated as nodes.

11. The method of claim 7, further comprising causing to be connected a pair of virtual machines among the plurality of virtual machines caused to be instantiated as routers.

12. The method of claim 7, further comprising:

for each of the plurality of virtual machines caused to be instantiated as routers, causing the virtual machines caused to be instantiated as a router to be configured to route traffic for a distinct proper subset of the virtual machines caused to be instantiated as nodes; and

assigning network addresses to the virtual machines of each distinct proper subset, such that a virtual machine in one of the distinct proper subsets is assigned the same network address as a different virtual machine in another of the distinct proper subset.

13. The method of claim 7, further comprising:

for each of the plurality of virtual machines caused to be instantiated as routers, causing the virtual machine caused to be instantiated as a router to be configured to route traffic for a distinct proper subset of the virtual machines caused to be instantiated as nodes, such that traffic is routed for each distinct proper subset of the virtual machines caused to be instantiated as nodes in a manner that isolates these virtual machines from the other distinct proper subsets of the virtual machines caused to be instantiated as nodes except where such isolation is explicitly overridden.

14. The method of claim 1, further comprising, in response to the receiving:

causing to be instantiated a virtual machine as an IPSec endpoint for creating a secure tunnel to a network outside the virtual data center; and

causing the virtual machine caused to be instantiated as an IPSec endpoint to route traffic via the secure tunnel between nodes of the virtual data center and nodes of the network outside the virtual data center.

15. The method of claim 1, further comprising, in response to the receiving:

causing to be instantiated a virtual machine as a virtual edge router for connecting to an external network; and

causing the virtual machine caused to be instantiated as a virtual edge router to route traffic between nodes of the virtual data center and nodes outside the virtual data center.

16. The method of claim 15 wherein the external network is the Internet.

17. The method of claim 1 wherein the configuring is further in accordance with a default networking parameter not specified by the received information.

18. One or more computer-readable storage devices collectively having contents adopted to cause a computing system having at least one processor core to perform a method comprising:

receiving via a management interface information specifying a virtual data center configuration comprising at least one networking parameter specified for the virtual data center;

in response to the receiving;

with one or more of the processor cores of the at least one processor core, causing to be instantiated a plurality of virtual machines as nodes in the virtual data center;

with one or more of the processor cores of the at least one processor core, causing to be instantiated a virtual machine as a router for connecting at least a portion of the plurality of virtual machines instantiated as nodes;

with one or more of the processor cores of the at least one processor core, causing the virtual machine caused to be instantiated as a router to be loaded with a general-purpose operating system comprising a network routing component;

with one or more of the processor cores of the at least one processor core, configuring in accordance with the at least one networking parameter specified for the virtual data center the network routing component of the general-purpose operating system loaded with which the virtual machine caused to be instantiated as a router is caused to be loaded; and

with one or more of the processor cores of the at least one processor core, after the configuring, causing the virtual machine caused to be instantiated as a router to operate as a router for the at least a portion of the plurality of virtual machines instantiated as nodes.

19. The computer-readable storage devices of claim 18 wherein the computing system comprises commodity hardware.

20. The computer-readable storage devices of claim 18 wherein the general-purpose operating system is an open-source general-purpose operating system adapted for use in a virtual router.

21. The method computer-readable storage devices of claim 18 wherein, in response to the receiving, a plurality of virtual machines are caused to be instantiated as routers.

22. The computer-readable storage devices of claim 21, the method further comprising:

for each of the plurality of virtual machines caused to be instantiated as routers, causing the virtual machines caused to be instantiated as a router to be configured to route traffic for a distinct proper subset of the virtual machines caused to be instantiated as nodes; and

assigning network addresses to the virtual machines of each distinct proper subset, such that a virtual machine in one of the distinct proper subsets is assigned the same network address as a different virtual machine in another of the distinct proper subset.

23. The computer-readable storage devices of claim 18, the method further comprising, in response to the receiving:

causing to be instantiated a virtual machine as an IPSec endpoint for creating a secure tunnel to a network outside the virtual data center; and

causing the virtual machine caused to be instantiated as an IPSec endpoint to route traffic via the secure tunnel between nodes of the virtual data center and nodes of the network outside the virtual data center.

24. The computer-readable storage devices of claim 18, the method further comprising, in response to the receiving:

causing to be instantiated a virtual machine as a virtual edge router for connecting to an external network; and

causing the virtual machine caused to be instantiated as a virtual edge router to route traffic between nodes of the virtual data center and nodes outside the virtual data center.

25. The computer-readable storage devices of claim 18 wherein the configuring is further in accordance with a default networking parameter not specified by the received information.

26. A computing system, comprising:

a management interface configured to receive information specifying a virtual data center configuration comprising at least one networking parameter specified for the virtual data center; and

one or more processor cores configured to, in response to the receiving;

cause to be instantiated a plurality of virtual machines as nodes in the virtual data center,

cause to be instantiated a virtual machine as a router for connecting at least a portion of the plurality of virtual machines instantiated as nodes,

cause the virtual machine caused to be instantiated as a router to be loaded with a general-purpose operating system comprising a network routing component,

configure in accordance with the at least one networking parameter specified for the virtual data center the network routing component of the general-purpose operating system loaded with which the virtual machine caused to be instantiated as a router is caused to be loaded, and

after the configuring, cause the virtual machine caused to be instantiated as a router to operate as a router for the at least a portion of the plurality of virtual machines instantiated as nodes.

27. The computing system of claim 26 wherein the management interface is a visual user interface.

28. The computing system of claim 26 wherein the management interface is a visual user interface provided by one or more web pages.

29. The computing system of claim 26 wherein, in response to the receiving the processor cores, cause a plurality of virtual machines to be instantiated as routers, and wherein the instantiation of the plurality of virtual machines as routers is performed in parallel.

30. The computing system of claim 29 wherein the processor cores, for each of the plurality of virtual machines caused to be instantiated as routers, cause the virtual machine caused to be instantiated as a router to be configured to route traffic for a distinct proper subset of the virtual machines caused to be instantiated as nodes, such that traffic is routed for each distinct proper subset of the virtual machines caused to be instantiated as nodes in a manner that isolates these virtual machines from the other distinct proper subsets of the virtual machines caused to be instantiated as nodes except where such isolation is explicitly overridden.