Logical L3 routing with DHCP

• US 9,356,906 B2
• Filed: 02/01/2013
• Issued: 05/31/2016
• Est. Priority Date: 08/17/2011
• Status: Active Grant

• Current Assignee: Nicira Incorporated (Broadcom, Inc.)
• Original Assignee: Nicira Incorporated (Broadcom, Inc.)
• Inventors: Thakkar, Pankaj, Zhang, Ronghua, Koponen, Teemu
• Primary Examiner(s): Chu, Wutchung
• Application Number:
  US13/757,678
• Publication Number:
  US 20130151676A1
• Time in Patent Office: 1,215 Days
• Field of Search: 370/389, 370/392
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/54 Organization of routing tables
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 47/12 Avoiding congestion; Recovering from congestion
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/256 NAT traversal
• CPC Class Codes: H04L 61/2592 using tunnelling or encapsulation

Abstract

For a network controller for managing a set of hosts, a method for configuring a host to provide a Dynamic Host Configuration Protocol (DHCP) service is described. The method configures a DHCP module in a first host to provide a DHCP service. The method configures a managed forwarding element in the first host to (1) use the DHCP module to obtain network addresses and (2) forward packets using the obtained network addresses. The method configures a second managed forwarding element in a second host to (1) use the DHCP module to obtain network addresses and (2) forward packets using the obtained network addresses.

Claims

1. For a network controller for managing a set of hosts, a method for configuring a physical machine to provide Dynamic Host Configuration Protocol (DHCP) service, the method comprising:

configuring a DHCP module in a first physical machine to provide DHCP service for a plurality of logical networks by providing network addresses to machines belonging to the plurality of logical networks, wherein each logical network comprises a logical router having logical ports to which the network addresses provided for the machines of the logical network map, each logical network logically connecting a set of machines operating on a plurality of host machines, wherein the set of machines of a first logical network are isolated from the sets of machines of the other logical networks;

configuring a first managed forwarding element (MFE) operating in the first physical machine to (i) forward to the DHCP module requests to obtain network addresses, received from a plurality of other MFEs, for machines of the plurality of logical networks, and (ii) forward data packets for the plurality of logical networks; and

configuring a second MFE operating in a second physical machine to (i) forward to the first MFE requests to obtain network addresses received by the second MFE from a set of machines for which the second MFE is a first-hop MFE and (ii) forward data packets received from the machines of the set of machines for which the second MFE is the first-hop MFE according to the respective logical networks of the machines from which the packets are received, wherein the set of machines for which the second MFE is the first-hop MFE comprises machines from at least two of the logical networks.

2. The method of claim 1, wherein the DHCP module and the first managed forwarding element are separate software applications configured in the first physical machine.

3. The method of claim 1, wherein a set of virtual machines (VMs) are provisioned in the first physical machine and directly connect to the first MFE, wherein the first MFE is configured to forward to the DHCP module requests to obtain network addresses received from the set of VMs.

4. The method of claim 3, wherein at least one VM of the set of VMs is managed by one user and at least one other VM of the set of VMs is managed by another user.

5. The method of claim 1, wherein the set of machines for which the second MFE is a first-hop MFE comprises a set of virtual machines (VMs) provisioned in the second physical machine.

6. The method of claim 1, wherein the plurality of host machines comprises the first and second physical machines.

7. The method of claim 1, wherein at least one of the logical networks comprises a plurality of logical switches that connect to the logical ports of the logical router.

8. A non-transitory machine readable medium storing a program which when executed by at least one processing unit manages a plurality of machines for a plurality of logical networks, each logical network comprising a set of logical forwarding elements that logically connect a plurality of machines, the program comprising sets of instructions for:

for each of a plurality of physical machines, configuring a local DHCP module in the physical machine to provide DHCP service for a set of machines, for which an edge managed forwarding element operating in the physical machine is a first-hop managed forwarding element, by providing network addresses to the set of machines in response to requests for the network addresses, wherein the set of machines to which a particular local DHCP module provides service comprises machines that belong to two or more of the logical networks;

configuring a managed forwarding element in a particular physical machine, separate from the plurality of physical machines, as a second-level managed forwarding element that (i) processes packets for the plurality of logical networks and (ii) is not a first-hop MFE for machines of any of the logical networks; and

configuring a central DHCP module in the particular physical machine to manage allocation of the network addresses to the local DHCP modules in order for the local DHCP modules to provide DHCP service to their respective sets of machines without separate local DHCP modules assigning a same network address to separate machines that belong to a same logical network.

9. The machine readable medium of claim 8, wherein the second-level managed forwarding element facilitates communications between two of the edge managed forwarding elements.

10. The machine readable medium of claim 8, wherein the program further comprises sets of instructions for configuring the edge managed forwarding elements in each of the physical machines of the plurality of physical machines to forward packets received from and sent to the set of machines for which the edge managed forwarding element is the first-hop managed forwarding element.

11. The machine readable medium of claim 10, wherein the central DHCP module manages allocation of the network addresses to the local DHCP modules by sending a set of available network addresses to a particular local DHCP module when the particular local DHCP module requests additional network addresses.

12. The machine readable medium of claim 11, wherein the program further comprises a set of instructions for configuring the particular local DHCP module to request available network addresses from the central DHCP module when the particular local DHCP module runs out of available network addresses.

13. The machine readable medium of claim 8, wherein the program further comprises a set of instructions for establishing a tunnel between the second-level managed forwarding element and at least a plurality of the edge managed forwarding elements.

14. A method for managing a plurality of machines for a plurality of logical networks, each logical network comprising a set of logical forwarding elements that logically connect a plurality of machines, the method comprising:

for each of a plurality of physical machines, configuring a local DHCP module in the physical machine to provide DHCP service for a set of machines, for which an edge managed forwarding element operating in the physical machine is a first-hop managed forwarding element, by providing network addresses to the set of machines in response to requests for the network addresses, wherein the set of machines to which a particular local DHCP module provides service comprises machines that belong to two or more of the logical networks;

configuring a managed forwarding element in a particular physical machine, separate from the plurality of physical machines, as a second-level managed forwarding element that (i) processes packets for the plurality of logical networks and (ii) is not a first-hop MFE for machines of any of the logical networks; and

configuring a central DHCP module in the particular physical machine to manage allocation of the network addresses to the local DHCP modules in order for the local DHCP modules to provide DHCP service to their respective sets of machines without separate local DHCP modules assigning a same network address to separate machines that belong to a same logical network.

15. The machine readable medium of claim 14, wherein the central DHCP module manages allocation of the network addresses to the local DHCP modules by sending a set of available network addresses to a particular DHCP module when the particular local DHCP module requests additional network addresses.

16. The machine readable medium of claim 15 further comprising configuring the particular local DHCP module to request available network addresses from the central DHCP module when the particular local DHCP module runs out of available network addresses.

17. The method of claim 14 further comprising configuring the edge managed forwarding elements in each of the physical machines of the plurality of physical machines to forward packets received from and sent to the set of machines for which the edge managed forwarding element is the first-hop managed forwarding element.

18. A non-transitory machine readable medium storing a program which when executed by at least one processing unit configures a physical machine to provide Dynamic Host Configuration Protocol (DHCP) service, the program comprising sets of instructions for:

configuring a DHCP module in a first physical machine to provide DHCP service for a plurality of logical networks by providing network addresses to machines belonging to the plurality of logical networks, wherein each logical network comprises a logical router having logical ports to which the network addresses provided for the machines of the logical network map, each logical network logically connecting a set of machines operating on a plurality of host machines, wherein the set of machines of a first logical network are isolated from the sets of machines of the other logical networks;

configuring a first managed forwarding element (MFE) operating in the first physical machine to (i) forward to the DHCP module requests to obtain network addresses, received from a plurality of other MFEs, for machines of the plurality of logical networks, and (ii) forward data packets for the plurality of logical networks; and

configuring a second MFE operating in a second physical machine to (i) forward to the first MFE requests to obtain network addresses received by the second MFE from a set of machines for which the second MFE is a first-hop MFE and (ii) forward data packets received from the machines of the set of machines for which the second MFE is the first-hop MFE according to the respective logical networks of the machines from which the packets are received, wherein the set of machines for which the second MFE is the first-hop MFE comprises machines from at least two of the logical networks.

19. The machine readable medium of claim 18, wherein a set of virtual machines (VMs) are provisioned in the first physical machine and directly connect to the first MFE, wherein the first MFE is configured to forward to the DHCP module requests to obtain network addresses received from the set of VMs.

20. The machine readable medium of claim 19, wherein at least one VM of the set of VMs is managed by one user and at least one other VM of the set of VMs is managed by another user.

21. The machine readable medium of claim 18, wherein the set of machines for which the second MFE is a first-hop MFE comprises a set of virtual machines (VMs) provisioned in the second host.

22. The machine readable medium of claim 21, wherein the DHCP module and the first managed forwarding element are separate software applications configured in the first physical machine.