Extended subnets

• US 8,532,116 B2
• Filed: 07/21/2009
• Issued: 09/10/2013
• Est. Priority Date: 07/21/2009
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Portolani, Maurizio, Elsen, Christian
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): HAMPTON, TARELL A
• Application Number:
  US12/460,614
• Publication Number:
  US 20110019676A1
• Time in Patent Office: 1,512 Days
• Field of Search: 370/254, 370/389, 370/392, 370/395.53, 709/238
• US Class Current: 370/395.53
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2212/00 Encapsulation of packets
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/66 Layer 2 routing, e.g. in Ethernet based MAN's
• CPC Class Codes: H04L 45/74 Address processing for routing

Abstract

There is provided a router for use in a datacenter, the router including a frame receiving module operative to receive a traffic frame and a frame forwarding module operative to forward the traffic frame to a second router in a second datacenter if a Destination Media Access Control (DMAC) address included in the traffic frame is different from all of the following:

• • a Burned in Address of the router;
  • a Burned in Address of at least one server associated with the router;
  • a Media Access Control (MAC) address of one of a Hot Standby Routing Protocol (HSRP) group and a Virtual Router Redundancy Protocol (VRRP) group of the router; and
  • a MAC address of one of a HSRP group and a VRRP group of a subnet hosted by the router.

Claims

1. A router for use in a datacenter, comprising:

detection means for detecting at least one of a gratuitous Address Resolution Protocol (ARP) message and a reverse ARP message, sent by a virtual address which migrated from another datacenter to said datacenter and is foreign thereto;

validation means for validating the presence of said virtual address by sending an ARP message to said virtual address and by receiving a response message from said virtual address which response includes as a destination address a Media Access Control (MAC) address of a router in said another datacenter.

2. A router according to claim 1 and also comprising notification means operative to notify at least one other router of a host route for accessing said virtual address.

3. A router according to claim 2 and wherein said host route comprises a /32 route.

4. A router according to claim 2 and wherein said at least one other router comprises another router in said datacenter.

5. A router according to claim 2 and wherein said at least one other router comprises a router in at least one other datacenter.

6. A method for transmitting data in a communications system including a plurality of datacenters, the method comprising:

connecting Virtual Local Area Networks (VLANs) of the plurality of datacenters using a tunneling module;

in a first datacenter, detecting the presence of virtual address which previously resided in a second datacenter but has migrated to said first datacenter, said detecting including;

at said first datacenter, receiving from said virtual address at least one of a gratuitous Address Resolution Protocol (ARP) message and a reverse ARP message;

employing said at least one of a gratuitous ARP message and a reverse ARP message to determine the presence of said virtual address in said first datacenter; and

validating the presence of said virtual address in said first datacenter, said validation comprising sending from said first datacenter an ARP message to said virtual address and, at said first datacenter, receiving a response from said virtual address identifying said second datacenter;

notifying said plurality of datacenters of the presence of said virtual machine in said first datacenter; and

following said notifying, at each of said plurality of datacenters, directing requests for said virtual address directly to a server in said first datacenter.

7. A method according to claim 6 and wherein said validating comprises:

sending from said first datacenter an ARP message to said virtual address; and

at said first datacenter, receiving a response from said virtual address including a Media Access Control (MAC) address belonging to said second datacenter.

8. A method according to claim 7 and wherein said sending comprises sending an ARP message, including, as its source address, an IP address of a Switch Virtual Interface (SVI) associated with said second datacenter.

9. A method according to claim 6 and wherein said notifying comprises providing a notification of a host route for accessing said virtual address from said first datacenter to said plurality of datacenters via a routed connection interconnecting said plurality of datacenters.

10. A method according to claim 9 and wherein said host route comprises a /32 route.

11. A method according to claim 6 and also comprising:

at said second datacenter, receiving said at least one of a gratuitous ARP message and a reverse ARP message; and

updating at least one ARP cache table in said second datacenter to indicate the migration of said virtual address.

12. A method according to claim 6 and wherein said detecting is carried out by a Switch Virtual Interface (SVI) associated with said first datacenter.

13. A method according to claim 6 and wherein said directing comprises:

at a given router in one of said plurality of datacenters, receiving a traffic frame designating said virtual address; and

forwarding said traffic frame to a router in said first datacenter via said tunneling module if a Destination Media Access Control (DMAC) address included in said frame is different from all of the following;

a Burned in Address of said given router;

a Burned in Address of at least one server associated with said given router;

a Media Access Control (MAC) address of one of a Hot Standby Routing Protocol (HSRP) group and a Virtual Router Redundancy Protocol (VRRP) group of said given router; and

a MAC address of one of a HSRP group and a VRRP group of a subnet hosted by said given router.

14. A method according to claim 6, and also comprising employing said tunneling module for providing communication between servers, which reside in different ones of said plurality of datacenters, but which belong to a single high availability cluster.