Intelligent non-stop software upgrade

• US 8,943,490 B1
• Filed: 09/28/2012
• Issued: 01/27/2015
• Est. Priority Date: 09/28/2012
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Jain, Amit, Sivaramakrishnan, Rajagopalan, Madasamy, Siva, Yashpala Karkera, Abhiman
• Primary Examiner(s): Chen, Xi D
• Application Number:
  US13/631,752
• Time in Patent Office: 851 Days
• Field of Search: None
• US Class Current: 717/168
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04Q 3/54516 Initialization, software or data downloading G06F9/445 takes precedence

Abstract

In general, techniques are described for performing a controlled non-stop software upgrade (NSSU) of a network device. In some examples, a method includes receiving, by a first network device included in a virtual network device, a non-stop software upgrade (NSSU) request. The first network device is communicatively coupled to each of a computing device and a second network device. The method includes, in response to receiving the NSSU request, forwarding to the second network device, network packets that are received at the first network device and destined to the computing device. The method also includes sending a message to the computing device that instructs the computing device to stop sending network packets to the first network device. The method includes updating one or more software components within the first network device, after sending the message to the computing device and based at least in part on the NSSU request.

Claims

1. A method comprising:

receiving, by a first network device included in a virtual network device, a non-stop software upgrade (NSSU) request, wherein the first network device is communicatively coupled to each of a computing device and a second network device in the virtual network device, wherein the computing device is multi-homed to the first network device by a first communication link and the second network device by a second communication link, the first and second communication links included in a multi-link aggregation group using a multi-link protocol;

in response to receiving the NSSU request, forwarding, by the first network device and to the second network device, network packets that are received at the first network device and destined to the computing device;

sending, by the first network device using the multi-link protocol, a link-aggregation message to the computing device that instructs the computing device to stop sending network packets to the first network device using the first communication link, such that the computing device redirects network packets to the second network device using the second communication link in the multi-link aggregation group before one or more software components within the first network device are updated; and

after sending the link-aggregation message to the computing device, updating the one or more software components within the first network device based at least in part on the NSSU request.

2. The method of claim 1, further comprising:

determining, by the first network device, the first communication link that communicatively couples the first network device to the computing device, wherein the first communication link is configured in the multi-link aggregation group that is configured by the first network device; and

generating, by the first network, the link aggregation message to instruct the computing device to stop using the first communication link to send network packets to the first network device.

3. The method of claim 1, wherein updating one or more software components within the first network device based at least in part on the NSSU request, further comprises:

determining, by the first network device, whether any of a plurality of interfaces included in the first network device are at least sending or receiving network packets; and

in response to determining that none of the plurality of interfaces are sending or receiving network packets, installing in at least one of a control plane and a forwarding plane of the first network device the software update.

4. The method of claim 1, wherein installing in the control plane of the first network device a software update based at least in part on the NSSU request, further comprises:

determining, by the first network device, a first time that is based at least in part on when the first network device received the NSSU request; and

in response to determining at a second time that a predetermined time period has elapsed between the first time and the second time, installing in at least one of the control plane and the forwarding plane of the first network device the NSSU.

5. The method of claim 2, wherein the link aggregation message is a Link Aggregation Control Protocol message that comprises a setting to disable the first communication link from being used in the multi-link aggregation group by the computing device to send network packets from the computing device to the first network device.

6. The method of claim 2, further comprising:

determining, by the first network device, a network route that does not include the first communication link to forward network packets that are received at the first network and destined to the computing device, wherein the network route includes the second network device; and

updating, by the first network device, at least one of a forwarding plane and a control plane of the first network device to forward to the second network device, network packets that are received at the first network device and destined to the computing device.

7. The method of claim 2, further comprising:

determining, by the first network device, an interface of the first network device that is operatively coupled to the first communication link that is configured in the multi-link aggregation group,

wherein the interface is configured to receive network packets at the first network device from the computing device that are destined to a third network device, and

wherein the interface is configured to send network packets received at the first network device that are from the third network device and destined to the computing device; and

configuring, by the first network device, the interface not to send network packets received from the third network device to the computing device.

8. The method of claim 7, wherein the interface is a first interface, the method further comprising:

determining, by the first network device, a second interface of the first network device that is operatively coupled to a third communication link, wherein the third communication link communicatively couples the first network device and the second network device; and

configuring, by the first network device, the second interface to send to the second network device, network packets received at the first network device that are from the third network device and destined to the computing device.

9. The method of claim 7, wherein configuring the interface not to send network packets received from the third network device to the computing device, further comprises:

removing, by the first network device, the interface from the multi-link aggregation group configured by the first network device, wherein the interface receives network packets from the computing device, and wherein the interface does not send network packets to the computing device.

10. The method of claim 2, wherein the multi-link aggregation group is a first multi-link aggregation group and wherein the computing device is a first computing device, the method further comprising:

determining, by the first network device, a third communication link that communicatively couples the first network device to a second computing device, wherein the third communication link is configured in a second multi-link aggregation group that is configured by the first network device; and

sending, by the first network device and to the second computing device, a link aggregation message to instruct the second computing device to stop sending network packets to the first network device.

11. The method of claim 10, further comprising:

determining, by the first network device, an interface of the first network device that is operatively coupled to the third communication link that is configured in the second multi-link aggregation group,

wherein the interface is configured to receive network packets at the first network device from the second computing device that are destined to the first computing device, and

wherein the interface is configured to send network packets received at the first network device that are from first computing device and destined to the second computing device; and

configuring, by the first network device, the interface not to send network packets received from the first computing device to the second computing device.

12. The method of claim 11, wherein configuring the interface not to send network packets received from the first computing device to the second computing device, further comprises:

removing, by the first network device, the interface from the second multi-link aggregation group configured by the first network device, wherein the interface receives network packets from the first computing device, and wherein the interface does not send network packets to the second computing device.

13. A network device comprising:

an interface that receives a non-stop software upgrade (NSSU) request, wherein the network device is a first network device included in a virtual network device, wherein the first network device is communicatively coupled to each of a computing device and a second network device in the virtual network device, wherein the computing device is multi-homed to the first network device by a first communication link and the second network device by a second communication link, the first and second communication links included in a multi-link aggregation group using a multi-link protocol;

a forwarding unit that, in response to receiving the NSSU request, forwards, by the first network device and to the second network device, network packets that are received at the first network device and destined to the computing device;

wherein the forwarding unit sends, by the first network device using the multi-link protocol, a link-aggregation message to the computing device that instructs the computing device to stop sending network packets to the first network device using the first communication link, such that the computing device redirects network packets to the second network device using the second communication link in the multi-link aggregation group before one or more software components within the first network device are updated; and

an update module that, after sending the link-aggregation message to the computing device, updates one or more software components within the first network device based at least in part on the NSSU request.

14. The network device of claim 13, further comprising:

a link aggregation module that determines the first communication link that communicatively couples the first network device to the computing device, wherein the first communication link is configured in the multi-link aggregation group that is configured by the first network device; and

wherein the link aggregation module generates the link aggregation message to instruct the computing device to stop using the first communication link to send network packets to the first network device.

15. The network device of claim 13,

wherein the forwarding unit determines whether any of a plurality of interfaces included in the first network device are at least sending or receiving network packets;

and

wherein the update module, in response to determining that none of the plurality of interfaces are sending or receiving network packets, installs in at least one of a control plane and a forwarding plane of the first network device the software update.

16. The network device of claim 13,

wherein the update module determines a first time that is based at least in part on when the first network device received the NSSU request;

and

wherein, in response to determining at a second time that a predetermined time period has elapsed between the first time and the second time, the update module installs in at least one of the control plane and the forwarding plane of the first network device the NSSU.

17. The network device of claim 14, wherein the link aggregation message is a Link Aggregation Control Protocol message that comprises a setting to disable the first communication link from being used in the multi-link aggregation group by the computing device to send network packets from the computing device to the first network device.

18. The network device of claim 14,

a control unit that determines a network route that does not include the first communication link to forward network packets that are received at the first network and destined to the computing device, wherein the network route includes the second network device;

and

wherein the update module updates at least one of a forwarding plane and a control plane of the first network device to forward to the second network device, network packets that are received at the first network device and destined to the computing device.

19. The network device of claim 14,

wherein the forwarding unit determines an interface of the first network device that is operatively coupled to the first communication link that is configured in the multi-link aggregation group;

wherein the forwarding unit configures the interface to receive network packets at the first network device from the computing device that are destined to a third network device;

wherein the forwarding unit configures the interface to send network packets received at the first network device that are from the third network device and destined to the computing device; and

wherein the forwarding unit configures the interface not to send network packets received from the third network device to the computing device.

20. The network device of claim 19,

wherein the interface is a first interface;

wherein the forwarding unit determines a second interface of the first network device that is operatively coupled to a second communication link, wherein the third communication link communicatively couples the first network device and the third network device; and

wherein the forwarding unit configures the second interface to send to the second network device, network packets received at the first network device that are from the third network device and destined to the computing device.

21. The network device of claim 19,

wherein configuring the interface not to send network packets received from the third network device to the computing device;

wherein the link aggregation module removes the interface from the multi-link aggregation group configured by the first network device, wherein the interface receives network packets from the computing device, and wherein the interface does not send network packets to the computing device.

22. The network device of claim 14,

wherein the multi-link aggregation group is a first multi-link aggregation group and wherein the computing device is a first computing device;

wherein the link aggregation module determines a third communication link that communicatively couples the first network device to a second computing device, wherein the third communication link is configured in a second multi-link aggregation group that is configured by the first network device; and

wherein the forwarding unit sends, to the second computing device, a link aggregation message to instruct the second computing device to stop sending network packets to the first network device.

23. The network device of claim 22,

wherein the link aggregation module determines an interface of the first network device that is operatively coupled to the third communication link that is configured in the second multi-link aggregation group;

wherein the forwarding unit configures the interface to receive network packets at the first network device from the second computing device that are destined to the first computing device, and

the forwarding unit configures the interface to send network packets received at the first network device that are from first computing device and destined to the second computing device; and

wherein the forwarding unit configures the interface not to send network packets received from the first computing device to the second computing device.

24. The network device of claim 23,

wherein the link aggregation module removes the interface from the second multi-link aggregation group configured by the first network device, wherein the interface receives network packets from the first computing device, and wherein the interface does not send network packets to the second computing device.

25. A non-transitory computer-readable storage medium comprising instructions for causing a programmable processor of a network device to:

receive a non-stop software upgrade (NSSU) request, wherein the network device is a first network device included in a virtual network device, wherein the first network device is communicatively coupled to each of a computing device and a second network device in the virtual network device, wherein the computing device is multi-homed to the first network device by a first communication link and the second network device by a second communication link, the first and second communication links included in a multi-link aggregation group using a multi-link protocol;

forward, in response to receiving the NSSU request and to the second network device, network packets that are received at the first network device and destined to the computing device;

send a link-aggregation message to the computing device that instructs the computing device to stop sending network packets to the first network device using the first communication link, such that the computing device redirects network packets to the second network device using the second communication link in the multi-link aggregation group before one or more software components within the first network device are updated; and

update, after sending the link-aggregation message to the computing device, one or more software components within the first network device based at least in part on the NSSU request.

26. A data center comprising:

a plurality of servers; and

a virtual network device that includes a first network device and a second network device that each provide multi-homed access to the plurality of servers in accordance with a link aggregation protocol, wherein at least one of the plurality of servers is multi-homed to the first network device by a first communication link and the second network device by a second communication link, the first and second communication links included in a multi-link aggregation group using a multi-link protocol,

wherein the first network device comprises a control unit that, in response to receiving a non-stop software upgrade (NSSU) request, redirects network packets to the second network device that are received at the first network device and destined to the plurality of servers that includes the at least one server, and sends link-aggregation messages to the plurality of computing devices using the link aggregation protocol to instruct each of the plurality of computing devices to stop sending network packets to the first network device, such that the plurality of network devices redirect network packets to the second network device before one or more software components within the first network device are updated, and

wherein, after sending the link-aggregation messages to the computing devices, the control unit updates one or more software components within the first network device based at least in part on the NSSU request.