Sharing common L2 segment in a virtual distributed router environment

Patent metadata

Field	Value
Publication number	US-10348625-B2
Application number	US-201514840277-A
Country	US
Kind code	B2
Filing date	Aug 31, 2015
Priority date	Jun 30, 2015
Publication date	Jul 9, 2019
Grant date	Jul 9, 2019

Abstract

A LRE (logical routing element) that have LIFs that are active in all host machines spanned by the LRE as well as LIFs that are active in only a subset of those spanned host machines is provided. A host machine having an active LIF for a particular L2 segment would perform the L3 routing operations for network traffic related to that L2 segment. A host machine having an inactive LIF for the particular L2 segment would not perform L3 routing operations for the network traffic of the L2 segment.

First claim

What is claimed is:

1. A system comprising:
a plurality of host machines that are configured to operate a first LRE (logical routing element) for routing packets between a first set of network segments in a first logical network and a second LRE for routing packets between a second set of network segments in a second logical network, wherein each host machine executes a first MPRE (managed physical routing element) as a local instance of the first LRE and a second MPRE as a local instance of the second LRE,
wherein at least one particular network segment connects the first and second LREs with at least one edge gateway that executes on a particular host machine and serves as a gateway node at an edge boundary of each logical network and an external network,
wherein the first LRE comprises a first backplane conduit and the second LRE comprises a second backplane conduit,
wherein for the edge gateway to process packets, the particular host machine receives packets addressed to a shared network address (1) from the first logical network through the first backplane conduit at the particular host machine's first MPRE and (2) from the second logical network through the second backplane conduit at the particular host machine's second MPRE.

2. The system of claim 1 , wherein each host machine operates a MPSE (managed physical switching element) for handling L2 switching for both the first logical network and the second logical network, wherein the MPSE performs switching of a packet between a plurality of ports based on a MAC address and a network segment identifier.

3. The system of claim 2 , wherein the first MPRE and the second MPRE share a same port at the MPSE on the particular host machine, wherein the particular host machine determines which MPRE receives a particular packet based on at least one of (1) a network segment identifier associated with the packet and (2) an identity of the backplane conduit used to transport the packet.

4. The system of claim 3 , wherein the particular packet is destined for the particular network segment having a particular network segment identifier, wherein the first MPRE on the particular host machine receives the particular packet when the identity of the backplane conduit belongs to the first backplane conduit, wherein the second MPRE on the particular host machine receives the particular packet when the identity of the backplane conduit belongs to the second backplane conduit.

5. The system of claim 2 , wherein the network identifier is a VNI (virtual network identifier) of a VLAN network that is accessible by both the first logical network and the second logical network.

6. The system of claim 1 , wherein the particular network segment is an IP subnet that is accessible by both the first logical network and the second logical network.

7. The system of claim 1 , wherein the first MPRE of the particular host machine receives a first packet from the first backplane conduit based on a MAC address associated with the particular host machine, wherein the second MPRE of the particular host machine receives a second packet from the second backplane conduit based on the same MAC address.

8. The system of claim 1 , wherein the edge gateway is an edge service gateway that provides edge services at the edge boundary between each logical network and the external network.

9. A non-transitory machine readable medium storing a program for operating a logical network over a plurality of host machines, the program comprising sets of instructions for:
at a particular host machine of the plurality of host machines, operating a first MPRE (managed physical routing element) and a second MPRE, wherein the first MPRE is a local instance of a first LRE (logical routing element) for routing packets between a first set of segments of a first logical network and the second MPRE is a local instance of a second LRE for routing packets between a second set of segments of a second logical network,
wherein at least one particular network segment connects the first and second LREs with at least one edge gateway that executes on the particular host machine and serves as a gateway node at an edge boundary of each logical network and an external network,
wherein the first LRE comprises a first backplane conduit and the second LRE comprises a second backplane conduit; and
for the edge gateway to process packets, receiving, at the particular host machine, packets addressed to a shared network address (1) from the first logical network through the first backplane conduit at the first MPRE and (2) from the second logical network through the second backplane conduit at the second MPRE.

10. The non-transitory machine readable medium of claim 9 , wherein the particular host machine operates a MPSE (managed physical switching element) for handling L2 switching for both the first logical network and the second logical network, wherein the MPSE performs switching of a packet between a plurality of ports based on a MAC address and a network segment identifier.

11. The non-transitory machine readable medium of claim 10 , wherein the first MPRE and the second MPRE share a same port at the MPSE, wherein the particular host machine determines which MPRE receives a particular packet based on at least one of (1) a network segment identifier associated with the packet and (2) an identity of the backplane conduit used to transport the packet.

12. The non-transitory machine readable medium of claim 11 , wherein the particular packet is destined for the particular network segment having a particular network segment identifier, wherein the first MPRE receives the particular packet when the identity of the backplane conduit belongs to the first backplane conduit, wherein the second MPRE receives the particular packet when the identity of the backplane conduit belongs to the second backplane conduit.

13. The non-transitory machine readable medium of claim 9 , wherein the particular network segment is an IP subnet that is accessible by both the first logical network and the second logical network.

14. The non-transitory machine readable medium of claim 9 , wherein the network identifier is a VNI (virtual network identifier) of a VLAN network that is accessible by both the first logical network and the second logical network.

15. The non-transitory machine readable medium of claim 9 , wherein the first MPRE of the particular host machine receives a first packet from the first backplane conduit based on a MAC address associated with the particular host machine, wherein the second MPRE of the particular host machine receives a second packet from the second backplane conduit based on the same MAC address.

16. The non-transitory machine readable medium of claim 9 , wherein the edge gateway is an edge service gateway that provides edge services at the edge boundary between each logical network and the external network.

17. A method of operating a plurality of logical networks over a network virtualization infrastructure that comprises a plurality of host machines operating a set of virtual machines (VMs), the method comprising:
defining a first LRE (logical routing element) for routing packets between a first set of network segments in a first logical network and a second LRE for routing packets between a second set of network segments in a second logical network, wherein each host machine executes a first MPRE (managed physical routing element) as a local instance of the first LRE and a second MPRE as a local instance of the second LRE,
wherein at least one particular network segment connects the first and second LRE

Assignees

• Nicira Inc

Inventors

• Agarwal Vivek
• Chandrashekhar Ganesan
• Subramaniyam Rahul Korivi
• Wang Howard
• Singh Ram Dular

Classifications

• H04L45/44

  Distributed routing · CPC title

• H04L41/0893

  Assignment of logical groups to network elements · CPC title

• H04L12/4641

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• H04L45/66

  Layer 2 routing, e.g. in Ethernet based MAN's · CPC title

• H04L49/70

  Virtual switches · CPC title