Overlay tunnel in a fabric switch

• US 9,887,916 B2
• Filed: 10/01/2015
• Issued: 02/06/2018
• Est. Priority Date: 03/22/2012
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Brocade Communications Systems, LLC (Broadcom, Inc.)
• Inventors: Koganti, Phanidhar
• Primary Examiner(s): Huq, Obaidul
• Application Number:
  US14/872,966
• Publication Number:
  US 20160028626A1
• Time in Patent Office: 859 Days
• Field of Search: 370351, 370389, 370390
• CPC Class Codes: H04L 12/18 for broadcast or conference , e.g. multicast
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 49/356 for storage area networks
• CPC Class Codes: H04L 49/70 Virtual switches
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses

Abstract

One embodiment of the present invention provides a switch. The switch includes a tunnel management module, a packet processor, and a forwarding module. The tunnel management module operates the switch as a tunnel gateway capable of terminating an overlay tunnel. During operation, the packet processor, which is coupled to the tunnel management module, identifies in a data packet a virtual Internet Protocol (IP) address associated with a virtual tunnel gateway. This virtual tunnel gateway is associated with the switch and the data packet is associated with the overlay tunnel. The forwarding module determines an output port for an inner packet in the data packet based on a destination address of the inner packet.

Claims

1. A switch, comprising:

a packet processor configured to;

decapsulate a first header of a first packet to obtain a second packet in response to identifying that a destination switch identifier in the first header is a switch identifier assigned to the switch, wherein the first header is forwardable in a routed network identified by a fabric identifier, and

decapsulate a second header of the second packet to obtain a third packet in response to identifying that a destination Internet Protocol (IP) address of the second header is an IP address assigned to the switch, wherein the IP address is further assigned to a second switch; and

forwarding circuitry configured to determine an output port for the third packet based on a destination address of the third packet.

2. The switch of claim 1, further comprising tunnel management circuitry configured to construct a configuration message destined for a hypervisor, wherein the configuration message indicates the IP address to be a tunnel gateway address.

3. The switch of claim 2, wherein the configuration message further comprises a mapping between the IP address and a media access control (MAC) address assigned to the switch.

4. The switch of claim 2, wherein the packet processor is further configured to identify a join or leave request for a multicast group in a notification message from the hypervisor, wherein a destination address of the notification message is the IP address.

5. The switch of claim 1, wherein the switch and the second switch operate as a virtual switch associated with the IP address.

6. The switch of claim 1, wherein the packet processor is further configured to identify an Address Resolution Protocol (ARP) request in a notification message from a hypervisor, wherein a destination address of the notification message is the IP address;

and

wherein the switch further comprises tunnel management circuitry configured to select a multicast tree for distributing the ARP request.

7. The switch of claim 1, wherein the packet processor is further configured to identify information associated with a hypervisor from a notification message from a third switch.

8. The switch of claim 1, further comprising tunnel management circuitry configured to age out an overlay tunnel associated with the IP address in response to not receiving packets with the IP address as the destination address over a period of time.

9. The switch of claim 1, wherein the packet processor is further configured to, prior to identifying the IP address, identify a MAC address in the second packet as a MAC address assigned to the switch, wherein the switch maintains a mapping between the MAC address and the IP address.

10. The switch of claim 1, wherein the first packet is one of:

an outer IP packet, wherein a destination IP address of the outer IP packet is assigned to the switch; and

an outer Transparent Interconnection of Lots of Links (TRILL) packet, wherein an egress TRILL routing bridge (RBridge) identifier of the outer TRILL packet is assigned to the switch.

11. A computer-executable method, comprising:

decapsulating a first header of a first packet to obtain a second packet in response to identifying that a destination switch identifier in the first header is a switch identifier assigned to a switch, wherein the first header is forwardable in a routed network identified by a fabric identifier;

decapsulating a second header of the second packet to obtain a third packet in response to identifying that a destination Internet Protocol (IP) address of the second header is an IP address assigned to a switch, wherein the IP address is further assigned to a second switch; and

determining an output port for the third packet based on a destination address of the third packet.

12. The method of claim 11, further comprising constructing a configuration message destined for a hypervisor, wherein the configuration message indicates the IP address to be a tunnel gateway address.

13. The method of claim 12, wherein the configuration message further comprises a mapping between the IP address and a media access control (MAC) address assigned to the switch.

14. The method of claim 12, further comprising identifying a join or leave request for a multicast group in a notification message from the hypervisor, wherein a destination address of the notification message is the IP address.

15. The method of claim 11, wherein the switch and the second switch operate as a virtual switch associated with the IP address.

16. The method of claim 11, further comprising identifying an Address Resolution Protocol (ARP) request in a notification message from a hypervisor, wherein a destination address of the notification message is the IP address;

and

selecting a multicast tree for distributing the ARP request.

17. The method of claim 11, further comprising identifying information associated with a hypervisor from a notification message from a third switch.

18. The method of claim 11, further comprising aging out an overlay tunnel associated with the IP address in response to not receiving packets with the IP address as the destination address over a period of time.

19. The method of claim 11, further comprising, prior to identifying the IP address, identifying a MAC address in the second packet as a MAC address assigned to the switch, wherein the switch maintains a mapping between the MAC address and the IP address.

20. The method of claim 11, wherein the first packet is one of:

an outer IP packet, wherein a destination IP address of the outer IP packet is assigned to the switch; and

an outer Transparent Interconnection of Lots of Links (TRILL) packet, wherein an egress TRILL routing bridge (RBridge) identifier of the outer TRILL packet is assigned to the switch.

21. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method, the method comprising:

decapsulating a first header of a first packet to obtain a second packet in response to identifying that a destination switch identifier in the first header is a switch identifier assigned to a switch, wherein the first header is forwardable in a routed network identified by a fabric identifier;

decapsulating a second header of the second packet to obtain a third packet in response to identifying that a destination Internet Protocol (IP) address of the second header is an IP address assigned to a switch, wherein the IP address is further assigned to a second switch; and

determining an output port for the third packet based on a destination address of the third packet.