Mechanisms for performing switch upgrades using remote containers

• US 9,870,219 B1
• Filed: 07/06/2016
• Issued: 01/16/2018
• Est. Priority Date: 07/06/2016
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Manthiramoorthy, Natarajan, Srinivasan, Venkatesh, Narayanan, Swaminathan, Singh, Anand Kumar, Mehta, Ambrish Niranjan, Chodey, Anulekha
• Primary Examiner(s): Zhen, Wei
• Assistant Examiner(s): LUU, BINH K
• Application Number:
  US15/203,583
• Publication Number:
  US 20180011699A1
• Time in Patent Office: 559 Days
• Field of Search: None
• CPC Class Codes: G06F 16/128 Details of file system snapshots on the file-level, e.g. snapshot creation, administration, deletion use of snapshots for error detection or correction G06F11/14, G06F11/16
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Mechanisms for switch upgrades using remote containers. An example system can export, to a server, a state of software processes associated with a first software container at the system. The system can generate a lightweight software container configured to forward traffic associated with the first software container to a second software container at the server, generated based on the state. The system can perform a switchover between the first software container and lightweight software container. The switchover can enable the lightweight software container to forward, to the second container, traffic associated with the first software container. The system can generate a fourth software container based on a snapshot of the second software container, and perform another switchover between the lightweight software container and fourth software container. The switchover can include enabling the fourth software container to handle traffic associated with the first software container, and disabling the lightweight software container.

Claims

1. A method comprising:

configuring system software of a network device to run inside of a first software container at the network device;

identifying a remote server for hosting the first software container during an update event;

exporting, from the network device to the remote server, a state of software processes associated with the first software container, the state being exported for a second software container at the remote server, the second software container being based on the state and the first software container, wherein the second software container comprises an updated version of the first software container;

generating, at the network device, a third software container configured to tunnel traffic associated with the first software container to the second software container, the third software container comprising a lightweight container having a lower memory footprint than the first software container;

performing a first switchover operation between the first software container and the third software container, the first switchover operation comprising enabling the third software container to tunnel, from the network device to the second container on the remote server, traffic associated with the first software container;

generating a fourth software container at the network device based on a snapshot of the second software container on the remote server; and

performing a second switchover operation between the third software container and the fourth software container, the second switchover operation comprising;

enabling the fourth software container to handle traffic associated with the first software container; and

disabling the third software container on the network device.

2. The method of claim 1, wherein the first switchover operation enables the third software container to tunnel traffic associated with the first software container to the second software container during the update event, the update event comprising a software update to the first software container.

3. The method of claim 1, further comprising configuring, at the network device, addressing information of the remote server, the addressing information comprising at least one of dynamic naming system (DNS) information or a network name.

4. The method of claim 1, wherein the third software container is configured to:

manage hardware resources at the network device; and

encapsulate and decapsulate control plane traffic from the network device to the second container on the remote server.

5. The method of claim 1, wherein the first switchover operation further comprises disabling the first software container on the network device, and wherein the second switchover operation comprises disabling the third software container on the network device.

6. The method of claim 1, further comprising:

performing a line card container upgrade at the network device for instructing the line card associated with the network device to route traffic associated with the first software container to the fourth software container; and

disabling the second software container on the remote server.

7. The method of claim 1, further comprising:

receiving, by the third software container during the update event, traffic associated with the first software container; and

tunneling the traffic to the second software container at the remote server.

8. A non-transitory computer-readable storage medium having stored therein instructions which, when executed by a processor, cause the processor to perform operations comprising:

configuring system software of a network device to run inside of a first software container at the network device;

identifying a remote server for hosting the first software container during an update event;

exporting, from the network device to the remote server, a state of software processes associated with the first software container, the state being exported for a second software container at the remote server, the second software container being based on the state and the first software container, wherein the second software container comprises an updated version of the first software container;

generating, at the network device, a third software container configured to tunnel traffic associated with the first software container to the second software container, the third software container comprising a lightweight container having a lower memory footprint than the first software container;

performing a first switchover operation between the first software container and the third software container, the first switchover operation comprising enabling the third software container to tunnel, from the network device to the second container on the remote server, traffic associated with the first software container;

generating a fourth software container at the network device based on a snapshot of the second software container on the remote server; and

performing a second switchover operation between the third software container and the fourth software container, the second switchover operation comprising;

enabling the fourth software container to handle traffic associated with the first software container; and

disabling the third software container on the network device.

9. The non-transitory computer-readable storage medium of claim 8, wherein the first switchover operation enables the third software container to tunnel traffic associated with the first software container to the second software container during the update event, the update event comprising a software update to the first software container.

10. The non-transitory computer-readable storage medium of claim 8, wherein the network device comprises a switch and the first software container is based on a network operating system of the switch, and wherein the second software container is based on an updated version of the network operating system of the switch.

11. The non-transitory computer-readable storage medium of claim 8, storing additional instructions which, when executed by the one or more processors, cause the one or more processors to perform operations further comprising:

prior to the exporting step, verifying a reachability of the remote server by sending one or more probes to the remote server.

12. The non-transitory computer-readable storage medium of claim 11, storing additional instructions which, when executed by the one or more processors, cause the one or more processors to perform operations further comprising:

prior to the exporting step, adding a network name of the remote server to a network setting associated with the first software container.

13. The non-transitory computer-readable storage medium of claim 11, wherein the third software container is configured to:

manage hardware resources at the network device; and

encapsulate and decapsulate control plane traffic from the network device to the second container on the remote server.

14. The non-transitory computer-readable storage medium of claim 11, storing additional instructions which, when executed by the one or more processors, cause the one or more processors to perform operations further comprising:

receiving, by the third software container during the update event, traffic associated with the first software container; and

tunneling the traffic to the second software container at the remote server.

15. A system comprising:

one or more processors; and

one or more computer-readable storage devices having stored therein instructions which, when executed by the one or more processors, cause the one or more processors to;

configure system software to run inside of a first software container at the system;

identify a remote server for hosting the first software container during an update event;

export, to the remote server, a state of software processes associated with the first software container, the state being exported for a second software container at the remote server, the second software container being based on the state and the first software container, wherein the second software container comprises an updated version of the first software container;

generate, at the system, a third software container configured to tunnel traffic associated with the first software container to the second software container, the third software container comprising a lightweight container having a lower memory footprint than the first software container;

perform a first switchover operation between the first software container and the third software container, the first switchover operation comprising enabling the third software container to tunnel, to the second container on the remote server, traffic associated with the first software container;

generate a fourth software container at the system based on a snapshot of the second software container on the remote server; and

perform a second switchover operation between the third software container and the fourth software container, the second switchover operation comprising;

enabling the fourth software container to handle traffic associated with the first software container; and

disabling the third software container on the system.

16. The system of claim 15, wherein the first switchover operation enables the third software container to tunnel traffic associated with the first software container to the second software container during the update event, the update event comprising a software update to the first software container.

17. The system of claim 15, wherein the third software container is configured to:

manage hardware resources at the system; and

encapsulate and decapsulate control plane traffic from the system to the second container on the remote server.

18. The system of claim 15, wherein the first switchover operation further comprises disabling the first software container on the system, and wherein the second switchover operation comprises disabling the third software container on the system.

19. The system of claim 15, the one or more computer-readable storage devices storing instructions which, when executed by the one or more processors, cause the one or more processors to:

perform a line card container upgrade for instructing the line card to route traffic associated with the first software container to the fourth software container; and

disable the second software container on the remote server.