Proxy forwarding of local traffic by edge devices in a multi-homed overlay virtual private network

• US 9,762,545 B2
• Filed: 11/03/2014
• Issued: 09/12/2017
• Est. Priority Date: 11/03/2014
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Badoni, Gaurav, Rao, Dhananjaya
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US14/531,187
• Publication Number:
  US 20160127320A1
• Time in Patent Office: 1,044 Days
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/162 at the data link layer

Abstract

A first provider edge network device that is configured in a multi-homed virtual private network for a data center in which there are one or more peer edge network devices including a second edge network device, receives from the second edge network device a message indicating that a link for a particular Ethernet segment of the second edge network device in the data center is down. Information is stored at the first edge network device indicating state of links for Ethernet segments associated with each of the one or more other edge network devices at the data center. The first edge network device forwards of traffic for the particular Ethernet segment locally on Ethernet segments in the data center on behalf of the second edge network device. The proxy forwarding is performed for traffic for the particular Ethernet segment that originates from the data center, that is, for “same-site” traffic.

Claims

1. A method comprising:

in a multi-homed virtual private network for a data center in which there are a plurality of peer edge network devices including a first edge network device and a second edge network device, at the first edge network device;

receiving from the second edge network device a message indicating that a link for a particular Ethernet segment of the second edge network device in the data center is down;

storing information indicating state of links for Ethernet segments associated with each of the one or more other edge network devices at the data center; and

performing proxy forwarding of traffic for the particular Ethernet segment locally on Ethernet segments in the data center on behalf of the second edge network device.

2. The method of claim 1, further comprising sending from the first edge network device to the second edge network device proxy forwarding responsibility information indicating to the second edge network device that the first edge network edge device is performing proxy forwarding of traffic for the particular Ethernet segment on behalf of the second edge network device.

3. The method of claim 1, wherein the first edge device and the second edge device perform multi-homed forwarding of virtual private network traffic for a plurality of Ethernet segments in the data center.

4. The method of claim 1, wherein the first edge device performs Ethernet virtual private network procedures in which the first edge device decapsulates and forwards traffic into the data center from a remote data center and drops traffic originating from the data center, and wherein performing proxy forwarding comprises forwarding of traffic for the particular Ethernet segment that originates from the data center.

5. The method of claim 1, wherein the information indicating state of links for Ethernet segments is generated based on Border Gateway Protocol Ethernet Segment Routes.

6. The method of claim 1, wherein sending comprises a Border Gateway Protocol update message that includes the proxy forwarding responsibility information.

7. The method of claim 1, further comprising receiving at the first edge network device a notification that the link for the particular Ethernet segment of second edge network device has been restored.

8. The method of claim 7, further comprising the first edge network device updating the information indicating state of links for Ethernet segments based on the notification received from the second edge network device.

9. The method of claim 8, further comprising the first edge network device:

terminating proxy forwarding of traffic for the particular Ethernet segment on behalf of the second edge network device; and

sending to the second edge network device updated proxy forwarding responsibility forwarding information that indicates that the first edge network device is no longer proxy forwarding traffic for the particular Ethernet segment on behalf of the second edge network device.

10. The method of claim 9, wherein the updated proxy forwarding responsibility forwarding information causes the second edge network device to resume forwarding of traffic on the link for the particular Ethernet segment.

11. A method comprising:

in a multi-homed virtual private network for a data center in which there are a plurality of peer edge network devices including a first edge network device and a second edge network device, at the second edge network device;

determining that a link for a particular Ethernet segment of the second edge network device in the data center is down;

sending to the first edge network device a notification that a link on the particular Ethernet segment is down at the second edge network device; and

receiving from the first edge network device a notification that the first edge network device is performing proxy forwarding of traffic for the particular Ethernet segment locally on Ethernet segments in the data center on behalf of the second edge network device.

12. The method of claim 11, wherein the notification from the first edge network device comprises a Border Gateway Protocol update message that includes proxy forwarding responsibility information indicating for which edge network devices and Ethernet segments the first edge network device is performing proxy forwarding in the data center.

13. The method of claim 11, further comprising:

determining that the link at the second edge network device for the particular Ethernet segment is restored;

sending to the first edge network device a notification that the link on the particular Ethernet segment is restored;

receiving a notification from the first edge network device that the first edge network device has stopped proxy forwarding traffic for the particular Ethernet segment on behalf of the second edge network device; and

upon receiving the notification that the first edge network device has stopped proxy forwarding, forwarding traffic for the particular Ethernet segment on the link that has been restored.

14. The method of claim 13, wherein the notification that the first edge network device has stopped proxy forwarding received from the first edge network device comprises a Border Gateway Protocol update message that includes updated proxy forwarding responsibility information indicating that the first edge network device is no longer proxy forwarding for the second edge network device on the particular Ethernet segment.

15. The method of claim 13, wherein the first edge device and the second edge device perform multi-homed forwarding of virtual private network traffic for a plurality of Ethernet segments in the data center.

16. The method of claim 13, wherein the first edge device performs Ethernet virtual private network procedures in which the first edge device decapsulates and forwards traffic into the data center from a remote data center and drops traffic originating from the data center, and wherein performing proxy forwarding comprises forwarding of traffic for the particular Ethernet segment that originates from the data center.

17. A non-transitory computer readable storage media encoded with instructions that, when executed by a processor of a first edge network device operating in a multi-homed virtual private network for a data center in which there are a plurality of peer edge network devices including the first edge network device and a second edge network device, the instructions causing the processor to perform operations comprising:

receiving from the second edge network device a message indicating that a link for a particular Ethernet segment of the second edge network device in the data center is down;

storing information indicating state of links for Ethernet segments associated with each of the one or more other edge network devices at the data center; and

performing proxy forwarding of traffic for the particular Ethernet segment locally on Ethernet segments in the data center on behalf of the second edge network device.

18. The non-transitory computer readable storage media of claim 17, further comprising instructions causing the processor to send from the first edge network device to the second edge network device proxy forwarding responsibility information indicating to the second edge network device that the first edge network edge device is performing proxy forwarding of traffic for the particular Ethernet segment on behalf of the second edge network device.

19. The non-transitory computer readable storage media of claim 17, wherein the first edge device performs Ethernet virtual private network procedures in which the first edge device decapsulates and forwards traffic into the data center from a remote data center and drops traffic originating from the data center, and wherein the instructions for performing proxy forwarding comprise instructions for forwarding of traffic for the particular Ethernet segment that originates from the data center.

20. The non-transitory computer readable storage media of claim 17, further comprising instructions causing the processor to receive at the first edge network device a notification that the link for the particular Ethernet segment of second edge network device has been restored.

21. The non-transitory computer readable storage media of claim 17, further comprising instructions causing the processor to:

update the information indicating state of links for Ethernet segments based on the notification received from the second edge network device;

terminate proxy forwarding of traffic for the particular Ethernet segment on behalf of the second edge network device; and

send to the second edge network device updated proxy forwarding responsibility forwarding information that indicates that the first edge network device is no longer proxy forwarding traffic for the particular Ethernet segment on behalf of the second edge network device, wherein the updated proxy forwarding responsibility forwarding information causes the second edge network device to resume forwarding of traffic on the link for the particular Ethernet segment.

22. An apparatus comprising:

a plurality of ports that send packets to and receive packets from a network on behalf of a first edge network device operating in a multi-homed virtual private network for a data center in which there are a plurality of peer edge network devices including the first edge network device and a second edge network device;

a memory;

a network processor unit that performs one or more network functions for packets received at the ports and to be sent from the ports; and

a processor coupled to the network processor unit and the memory, wherein the processor;

receives from the second edge network device a message indicating that a link for a particular Ethernet segment of the second edge network device in the data center is down;

stores in the memory information indicating state of links for Ethernet segments associated with each of the one or more other edge network devices at the data center; and

performs proxy forwarding of traffic for the particular Ethernet segment locally on Ethernet segments in the data center on behalf of the second edge network device.

23. The apparatus of claim 22, wherein the processor further sends from the first edge network device to the second edge network device proxy forwarding responsibility information indicating to the second edge network device that the first edge network edge device is performing proxy forwarding of traffic for the particular Ethernet segment on behalf of the second edge network device.

24. The apparatus of claim 22, wherein the first edge device and the second edge device perform multi-homed forwarding of virtual private network traffic for a plurality of Ethernet segments in the data center.

25. The apparatus of claim 22, wherein the first edge device performs Ethernet virtual private network procedures in which the first edge device decapsulates and forwards traffic into the data center from a remote data center and drops traffic originating from the data center, and wherein the processor is configured to perform proxy forwarding by forwarding of traffic for the particular Ethernet segment that originates from the data center.

26. The apparatus of claim 22, wherein the information indicating state of links for Ethernet segments is generated based on Border Gateway Protocol Ethernet Segment Routes.

27. The apparatus of claim 22, wherein the processor receives at the first edge network device a notification that the link for the particular Ethernet segment of second edge network device has been restored.

28. The apparatus of claim 22, wherein the processor updates the information indicating state of links for Ethernet segments based on the notification received from the second edge network device.

29. The apparatus of claim 28, wherein the processor further:

terminates proxy forwarding of traffic for the particular Ethernet segment on behalf of the second edge network device; and

sends to the second edge network device updated proxy forwarding responsibility forwarding information that indicates that the first edge network device is no longer proxy forwarding traffic for the particular Ethernet segment on behalf of the second edge network device, wherein the updated proxy forwarding responsibility forwarding information causes the second edge network device to resume forwarding of traffic on the link for the particular Ethernet segment.