Site aware policy-based proximity routing and policy-based proximity routing

Patent metadata

Field	Value
Publication number	US-11233824-B2
Application number	US-202016886575-A
Country	US
Kind code	B2
Filing date	May 28, 2020
Priority date	Apr 6, 2020
Publication date	Jan 25, 2022
Grant date	Jan 25, 2022

Abstract

In some embodiments, a method receives, by a first network device, a packet from a first workload that is located in first site. The first site includes stretched networks across a second site and a third site. The packet includes a destination IP address for a device in the second site. The method determines that the destination IP address does not match an eligible route in a routing table. The first workload was migrated from the second site to the first site and is located on a stretched network between the first site and the second site. A site identifier associated with the first workload is determined where the site identifier identifies the second site. The method selects a site policy based on the site identifier and uses the site policy to send the packet through a layer 2 channel to the second network device in the second site.

First claim

What is claimed is:

1. A method comprising:
receiving, by a first network device, a packet from a first workload that is located in a first site, wherein the first site includes a set of stretched networks across a second site and a third site, wherein the first network device includes an interface associated with an Internet Protocol (IP) address that is a same IP address as a second network device in the second site, and the packet includes a destination IP address for a device in the second site;
determining that the destination IP address of the packet does not match an eligible route in a routing table for the first network device, wherein the first workload was migrated from the second site to the first site and is located on a stretched network between the first site and the second site;
determining a site identifier associated with the first workload, wherein the site identifier identifies the second site;
selecting a site policy from a plurality of site policies based on the site identifier; and
using the site policy to send the packet through a layer 2 channel to the second network device in the second site based on the policy, wherein the second network device sends the packet to the device in the second site.

2. The method of claim 1 , wherein using the site policy comprises:
reviewing the site policy to determine that the destination IP address matches a route for a policy in the site policy, wherein the site policy includes routes to cover a set of IP addresses used in the second site; and
based on the determining the route in the site policy, sending the packet through the layer 2 channel to the second network device in the second site based on the policy, wherein the second network device sends the packet to the device in the second site.

3. The method of claim 1 , wherein determining the site identifier comprises:
determining the site identifier based on an interface in which the packet is received when a stretched network in the set of stretched networks in which the packet is received is stretched across only the first site and the second site.

4. The method of claim 1 , wherein determining the site identifier comprises:
determining the site identifier based on metadata associated with the packet when a stretched network in the set of stretched networks in which the packet is received is stretched across the first site, the second site, and the third site.

5. The method of claim 1 , wherein a third network device in the third site includes an interface associated with the Internet Protocol (IP) address as the first network device in the first site when the stretched network in which the first workload is located is stretched across the second site and the third site.

6. The method of claim 1 , further comprising:
when the first workload is migrated from the second site to the first site, adding a specific route for an IP address associated with the first workload in the routing table; and
when a second workload is migrated from the third site to the first site, adding a specific route for an IP address associated with the second workload in the routing table.

7. The method of claim 1 , wherein:
the site policy comprises a first site policy for the first site and covers a first set of IP addresses being used in the second site, and
a second site policy for the third site covers a second set of IP addresses being used in the third site.

8. A non-transitory computer-readable storage medium containing instructions, that when executed, control a computer system to be operable for:
receiving, by a first network device, a packet from a first workload that is located in a first site, wherein the first site includes a set of stretched networks across a second site and a third site, wherein the first network device includes an interface associated with an Internet Protocol (IP) address that is a same IP address as a second network device in the second site, and the packet includes a destination IP address for a device in the second site;
determining that the destination IP address of the packet does not match an eligible route in a routing table for the first network device, wherein the first workload was migrated from the second site to the first site and is located on a stretched network between the first site and the second site;
determining a site identifier associated with the first workload, wherein the site identifier identifies the second site;
selecting a site policy from a plurality of site policies based on the site identifier; and
using the site policy to send the packet through a layer 2 channel to the second network device in the second site based on the policy, wherein the second network device sends the packet to the device in the second site.

9. The non-transitory computer-readable storage medium of claim 8 , wherein using the site policy comprises:
reviewing the site policy to determine that the destination IP address matches a route for a policy in the site policy, wherein the site policy includes routes to cover a set of IP addresses used in the second site; and
based on the determining the route in the site policy, sending the packet through the layer 2 channel to the second network device in the second site based on the policy, wherein the second network device sends the packet to the device in the second site.

10. The non-transitory computer-readable storage medium of claim 8 , wherein determining the site identifier comprises:
determining the site identifier based on an interface in which the packet is received when a stretched network in the set of stretched networks in which the packet is received is stretched across only the first site and the second site.

11. The non-transitory computer-readable storage medium of claim 8 , wherein determining the site identifier comprises:
determining the site identifier based on metadata associated with the packet when a stretched network in the set of stretched networks in which the packet is received is stretched across the first site, the second site, and the third site.

12. The non-transitory computer-readable storage medium of claim 8 , wherein a third network device in the third site includes an interface associated with the Internet Protocol (IP) address as the first network device in the first site when the stretched network in which the first workload is located is stretched across the second site and the third site.

13. The non-transitory computer-readable storage medium of claim 8 , further operable for:
when the first workload is migrated from the second site to the first site, adding a specific route for an IP address associated with the first workload in the routing table; and
when a second workload is migrated from the third site to the first site, adding a specific route for an IP address associated with the second workload in the routing table.

14. The non-transitory computer-readable storage medium of claim 8 , wherein:
the site policy comprises a first site policy for the first site and covers a first set of IP addresses being used in the second site, and
a second site policy for the third site covers a second set of IP addresses being used in the third site.

15. An apparatus comprising:
one or more computer processors; and
a computer-readable storage medium comprising instructions for controlling the one or more computer processors to be operable for:
receiving, by a first network device, a packet from a first workload that is located in a first site, wherein the first site includes a set of stretched networks across a second site and a third site, wherein the first network device includes

Assignees

• Vmware Inc

Inventors

• Zhu Hongwei
• Devireddy Dileep
• Chandrashekhar Ganesan
• Gu Feng
• Duvvuri Sreenivas
• Raman Chidambareswaran

Classifications

• H04L2101/622

  Layer-2 addresses, e.g. medium access control [MAC] addresses · CPC title

• H04L61/5007

  Internet protocol [IP] addresses · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L67/148

  Migration or transfer of sessions · CPC title

• H04L45/74

  Address processing for routing · CPC title