Distributed gateways for overlay networks

• US 9,716,687 B2
• Filed: 06/19/2014
• Issued: 07/25/2017
• Est. Priority Date: 06/19/2014
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Bhide, Parag, Rao, Dhananjaya, Jain, Vipin
• Primary Examiner(s): DOAN, DUYEN MY
• Application Number:
  US14/308,790
• Publication Number:
  US 20150372869A1
• Time in Patent Office: 1,132 Days
• Field of Search: 709224
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/58 Caching of addresses or names

Abstract

Techniques provided herein enable a set of independent, unconnected devices in a network to support distributed Layer 3 (L3) gateway functionality for an overlay based virtual network by intelligently triggering proxy addressing information updates.

Claims

1. A method comprising:

at a first gateway node forming a virtual anycast gateway of an overlay network with one or more other gateway nodes, determining that one or more entries in an addressing information database stored on a second gateway node are inconsistent with corresponding entries in an addressing information database stored on the first gateway node;

identifying the one or more addressing information entries stored on the second gateway node that are inconsistent with corresponding addressing information entries stored on the first gateway node as inconsistent addressing entries; and

sending, for at least one inconsistent addressing entry, a proxy addressing information request on behalf of the second gateway node to a host node associated with the corresponding inconsistent addressing entry.

2. The method of claim 1, wherein sending a proxy addressing information request on behalf of the second gateway node comprises:

sending, for each inconsistent addressing entry, a proxy addressing information request on behalf of the second gateway node to a host node associated with the corresponding inconsistent addressing entry,

wherein each of the proxy addressing information requests is sent by one of the one or more gateway nodes that are part of the virtual anycast gateway and that are not the second gateway node.

3. The method of claim 1, wherein sending a proxy addressing information request on behalf of the second gateway node comprises:

including a unicast Media Access Control (MAC) address for the second gateway node in the proxy addressing information request.

4. The method of claim 3, further comprising:

in response to a received addressing information request, sending an addressing information response to the unicast MAC address of the second gateway node.

5. The method of claim 4, further comprising:

receiving the addressing information response at the second gateway node; and

updating the addressing information database stored on a second gateway node using addressing information in the addressing information response.

6. The method of claim 1, wherein sending a proxy addressing information request on behalf of the second gateway node comprises:

sending an Address Resolution Protocol (ARP) request configured to cause a receiving host node to generate an ARP response.

7. The method of claim 1, wherein sending a proxy addressing information request on behalf of the second gateway node comprises:

sending a Network Discovery Protocol (NDP) request configured to cause a receiving host node to generate an NDP response.

8. The method of claim 1, further comprising:

receiving, at the first gateway node, an addressing information request from a host node;

determining if the addressing information request is a unicast addressing information request or a multicast addressing information request; and

if the addressing information request is a unicast addressing request, generating an addressing information response that includes an anycast MAC address and an anycast Internet Protocol (IP) address for the virtual anycast gateway.

9. The method of claim 8, further comprising:

if the addressing information request is a multicast addressing information request, determining if the first gateway node is a designated responder for the host device;

if the first gateway node is the designated responder for the host device, generating an addressing information response that includes an anycast MAC address and an anycast Internet IP address for the virtual anycast gateway.

10. An apparatus comprising:

a plurality of network ports configured to operate as part of a virtual anycast gateway and to receive packets on an overlay network;

a memory configured to store an addressing information database; and

a processor configured to;

determine that one or more entries in an addressing information database stored on a peer gateway node are inconsistent with corresponding entries in the addressing information database stored in the memory;

identify the one or more addressing information entries stored on the peer gateway node that are inconsistent with corresponding addressing information database entries stored in the memory as inconsistent addressing entries; and

generate, for at least one inconsistent addressing entry, a proxy addressing information request to be sent via one of the network ports on behalf of the peer gateway node to a host node associated with the corresponding inconsistent addressing entry.

11. The apparatus of claim 10, wherein to generate a proxy addressing information request to be sent on behalf of the peer gateway node the processor is configured to:

generate, for each inconsistent addressing entry, a proxy addressing information request to be sent on behalf of the peer gateway node to a host node associated with the corresponding inconsistent addressing entry.

12. The apparatus of claim 10, wherein to generate a proxy addressing information request the processor is configured to:

include a unicast Media Access Control (MAC) address for the peer gateway node in the proxy addressing information request.

13. The apparatus of claim 10, wherein to generate a proxy addressing information request the processor is configured to:

generate an Address Resolution Protocol (ARP) request configured to cause a receiving host node to generate an ARP response.

14. The apparatus of claim 10, wherein to generate a proxy addressing information request the processor is configured to:

generate a Network Discovery Protocol (NDP) request configured to cause a receiving host node to generate an NDP response.

15. The apparatus of claim 10, wherein the processor is further configured to:

receive an addressing information request from a host node;

determine if the addressing information request is a unicast addressing information request or a multicast addressing information request; and

if the addressing information request is a unicast addressing request, generate an addressing information response that includes an anycast MAC address and an anycast Internet Protocol (IP) address for the virtual anycast gateway.

16. The apparatus of claim 15, wherein the processor is further configured to:

if the addressing information request is a multicast addressing information request, determine if the apparatus is a designated responder for the host device;

if the apparatus is the designated responder for the host device, generate an addressing information response that includes an anycast MAC address and an anycast Internet IP address for the virtual anycast gateway.

17. One or more non-transitory computer readable storage media encoded with software comprising computer executable instructions and when the software is executed operable to:

at a first gateway node forming a virtual anycast gateway of an overlay network with one or more other gateway nodes, determine that one or more entries in an addressing information database stored on a second gateway node are inconsistent with corresponding entries in an addressing information database stored on the first gateway node;

identify the one or more addressing information entries stored on the second gateway node that are inconsistent with corresponding addressing information entries stored on the first gateway node as inconsistent addressing entries; and

generate, for at least one inconsistent addressing entry, a proxy addressing information request to be sent on behalf of the second gateway node to a host node associated with the corresponding inconsistent addressing entry.

18. The non-transitory computer readable storage media of claim 17, further comprising instructions operable to:

generate, for each inconsistent addressing entry, a proxy addressing information request to be sent on behalf of the second gateway node to a host node associated with the corresponding inconsistent addressing entry,

wherein each of the proxy addressing information requests is generated by one of the one or more gateway nodes that are part of the virtual anycast gateway and that are not the second gateway node.

19. The non-transitory computer readable storage media of claim 17, wherein the instructions operable to generate a proxy addressing information request comprise instructions operable to:

include a unicast Media Access Control (MAC) address for the second gateway node in the proxy addressing information request.

20. The non-transitory computer readable storage media of claim 17, wherein the instructions operable to generate a proxy addressing information request comprise instructions operable to:

generate an Address Resolution Protocol (ARP) request configured to cause a receiving host node to generate an ARP response.

21. The non-transitory computer readable storage media of claim 17, wherein the instructions operable to generate a proxy addressing information request comprise instructions operable to:

generate a Network Discovery Protocol (NDP) request configured to cause a receiving host node to generate an NDP response.