Receive packet steering for virtual networks

• US 9,356,866 B1
• Filed: 03/26/2014
• Issued: 05/31/2016
• Est. Priority Date: 01/10/2014
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Krishnan, Anand H., Sivaramakrishnan, Rajagopalan
• Primary Examiner(s): Javaid, Jamal
• Application Number:
  US14/226,549
• Time in Patent Office: 797 Days
• Field of Search: 370/392, 370/235, 370/401, 709/203, 709/238
• US Class Current: 1/1
• CPC Class Codes: H04L 45/38 Flow based routing
• CPC Class Codes: H04L 45/50 using label swapping, e.g. multi-protocol label switch [MPLS]
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/72 Routing based on the source address
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 45/7453 using hashing
• CPC Class Codes: H04L 47/31 by tagging of packets, e.g. using discard eligibility [DE] bits
• CPC Class Codes: H04L 49/70 Virtual switches

Abstract

In general, techniques are described for enhancing operations of virtual networks. In some examples, a network system includes a network interface card of a server configured to receive a tunnel packet associated with a virtual network. The tunnel packet comprises an outer header associated with the physical network, the outer header encapsulating an inner packet comprising an inner header associated with the virtual network and a payload. A first processing core of the server is configured to perform, based at least on one of the outer header and inner header of the tunnel packet, a first packet steering operation to identify the second processing core. The second processing core is configured to forward the inner packet to a virtual machine of the virtual machines.

Claims

1. A method comprising:

by a network interface card of a computing device, receiving a tunnel packet associated with a virtual network of a plurality of virtual networks operating over a physical network and interconnecting a plurality of virtual machines, wherein the tunnel packet comprises an outer header associated with the physical network, the outer header encapsulating an inner packet comprising an inner header associated with the virtual network and a payload;

performing, by a first processing core of a plurality of processing cores of the computing device and based at least on one of the outer header and inner header of the tunnel packet, a first packet steering operation to identify a second processing core of the plurality of processing cores; and

forwarding, by the second processing core, the inner packet to a virtual machine of the virtual machines.

2. The method of claim 1, wherein performing the first packet steering operation to identify the second processing core comprises:

applying, by the first processing core, a hash function to at least one field of the inner header to compute a hash value associated with the second processing core.

3. The method of claim 1, wherein performing the first packet steering operation to identify the second processing core comprises:

applying, by the first processing core, a hash function to at least one field of the outer header to compute a hash value associated with the second processing core.

4. The method of claim 1, wherein forwarding, by the second processing core, the inner packet to the virtual machine comprises:

determining, by the second processing core and using a virtual network identifier of the tunnel packet mapped to the virtual network, a routing instance associated with the virtual network;

forwarding, by the second processing core and in accordance with forwarding information for the routing instance, the inner packet to the virtual machine.

5. The method of claim 1, wherein forwarding, by the second processing core, the inner packet to the virtual machine comprises:

performing, by the second processing core, a second packet steering operation to identify a third processing core of the plurality of processing cores;

determining, by the third processing core and using a virtual network identifier of the tunnel packet mapped to the virtual network, a routing instance associated with the virtual network;

forwarding, by the third processing core and in accordance with forwarding information for the routing instance, the inner packet to the virtual machine.

6. The method of claim 5, wherein performing the second packet steering operation to identify the third processing core comprises:

applying, by the second processing core, a hash function to at least one field of the inner header to compute a hash value associated with the third processing core.

7. The method of claim 5, wherein performing the second packet steering operation to identify the third processing core comprises:

applying, by the second processing core, a hash function to at least one field of the inner header to compute a hash value associated with the third processing core.

8. The method of claim 1, further comprising:

designating the first processing core as a designated processing core for the network interface card to cause the network interface card to direct processing of all tunnel packets received by the network interface card to the first processing core.

9. The method of claim 1, wherein the computing device is a server of a plurality of servers interconnected by a switch fabric comprising a plurality of switches interconnected to form a physical network, the method further comprising:

receiving configuration information from a virtual network controller that configures and manages an overlay network within the physical network,

wherein the server comprises an operating environment executing the virtual machine in communication via the overlay network and further executes, by the plurality of processing cores, a virtual router that extends the overlay network as a virtual network to the virtual machine and forwards the inner packet to the virtual machine according to the virtual network.

10. The method of claim 1,

wherein the tunnel packet is a first tunnel packet,

wherein the network interface card is a first network interface card, and

wherein the plurality of processing cores are a first set of processing cores, the method further comprising:

designating the first processing core of the first set of processing cores as a designated processing core for the first network interface card to cause the first network interface card to direct processing of all tunnel packets received by the first network interface card to the first processing core of the first set of processing cores; and

designating a first processing core of the second set of processing cores, different from the first set of processing cores, as a designated processing core for a second network interface card of the computing device to cause the second network interface card to direct processing of all tunnel packets received by the second network interface card to the first processing core of the second set of processing cores;

by the second network interface card, receiving a second tunnel packet associated with a virtual network;

performing, by a first processing core of the second set of processing cores and based at least on one of an outer header and inner header of the second tunnel packet, a third packet steering operation to identify a second processing core of the second set of processing cores; and

forwarding, by the second processing core of the second set of processing cores, an inner packet of the second tunnel packet to one of the virtual machines.

11. A network system comprising:

a switch fabric comprising a plurality of switches interconnected to form a physical network;

a virtual network controller device configured to configure and manage one or more virtual networks within the physical network; and

a plurality of servers interconnected by the switch fabric, wherein each of the servers comprises an operating environment executing one or more virtual machines in communication via the one or more virtual networks, and wherein the servers execute at least one virtual router configured to extend the one or more virtual networks to the operating environments of the virtual machines;

a network interface card of a server of the plurality of servers configured to receive a tunnel packet associated with a virtual network of the plurality of virtual networks, wherein the tunnel packet comprises an outer header associated with the physical network, the outer header encapsulating an inner packet comprising an inner header associated with the virtual network and a payload;

a second processing core of a plurality of processing cores of the server;

a first processing core of the plurality of processing cores of the server configured to perform, based at least on one of the outer header and inner header of the tunnel packet, a first packet steering operation to identify the second processing core,

wherein the second processing core is configured to forward the inner packet to a virtual machine of the virtual machines.

12. The network system of claim 11, wherein to perform the first packet steering operation to identify the second processing core, the first processing core is configured to apply a hash function to at least one field of the inner header to compute a hash value associated with the second processing core.

13. The network system of claim 11, wherein to perform the first packet steering operation to identify the second processing core, the first processing core is configured to apply a hash function to at least one field of the outer header to compute a hash value associated with the second processing core.

14. The network system of claim 11, wherein to forward the inner packet to the virtual machine the second processing core is configured to:

determine, using a virtual network identifier of the tunnel packet mapped to the virtual network, a routing instance associated with the virtual network; and

forward, in accordance with forwarding information for the routing instance, the inner packet to the virtual machine.

15. The network system of claim 11, further comprising:

a third processing core of the plurality of processing cores,

wherein to forward the inner packet to the virtual machine the second processing core is configured to perform a second packet steering operation to identify a third processing core of the plurality of processing cores, and

wherein the third processing core is configured to determine, using a virtual network identifier of the tunnel packet mapped to the virtual network, a routing instance associated with the virtual network and forward, in accordance with forwarding information for the routing instance, the inner packet to the virtual machine.

16. The network system of claim 15, wherein to perform the second packet steering operation to identify the third processing core the second processing core is configured to apply a hash function to at least one field of the inner header to compute a hash value associated with the third processing core.

17. The network system of claim 15, wherein to perform the second packet steering operation to identify the third processing core the second processing core is configured to apply a hash function to at least one field of the inner header to compute a hash value associated with the third processing core.

18. The network system of claim 11, wherein the first processing core is a designated processing core for the network interface card to cause the network interface card to direct processing of all tunnel packets received by the network interface card to the first processing core.

19. The network system of claim 11,

wherein the tunnel packet is a first tunnel packet,

wherein the network interface card is a first network interface card, and

wherein the plurality of processing cores are a first set of processing cores, the server further comprising:

a second network interface card; and

a second set of processing cores,

wherein the first processing core of the first set of processing cores is a designated processing core for the first network interface card to cause the first network interface card to direct processing of all tunnel packets received by the first network interface card to the first processing core of the first set of processing cores,

wherein a first processing core of the second set of processing cores is a designated processing core for the second network interface card to cause the second network interface card to direct processing of all tunnel packets received by the second network interface card to the first processing core of the second set of processing cores,

wherein the second network interface card is configure to receive a second tunnel packet associated with a virtual network,

wherein the first processing core of the second set of processing cores is configured to perform, based at least on one of an outer header and inner header of the second tunnel packet, a third packet steering operation to identify a second processing core of the second set of processing cores, and

wherein the second processing core of the second set of processing cores is configured to forward an inner packet of the second tunnel packet to one of the virtual machines.

20. A non-transitory computer-readable medium comprising instructions for causing one or more programmable processors to:

by a network interface card of a computing device, receive a tunnel packet associated with a virtual network of a plurality of virtual networks operating over a physical network and interconnecting a plurality of virtual machines, wherein the tunnel packet comprises an outer header associated with the physical network, the outer header encapsulating an inner packet comprising an inner header associated with the virtual network and a payload;

perform, by a first processing core of a plurality of processing cores of the computing device and based at least on one of the outer header and inner header of the tunnel packet, a first packet steering operation to identify a second processing core of the plurality of processing cores; and

forward, by the second processing core, the inner packet to a virtual machine of the virtual machines.