Enablement of multi-path routing in virtual edge systems

Patent metadata

Field	Value
Publication number	US-11296978-B2
Application number	US-202016890238-A
Country	US
Kind code	B2
Filing date	Jun 2, 2020
Priority date	Nov 17, 2016
Publication date	Apr 5, 2022
Grant date	Apr 5, 2022

Abstract

The technology disclosed herein enables multi-path routing in virtual edge systems of a virtual network environment. In a particular embodiment, a method provides establishing a connection for a communication with a client outside of the virtual network environment through a first virtual edge system of a plurality of virtual edge systems. The method further provides generating state information about the connection that indicates properties of the connection with respect to the first virtual edge system and updating a state information base of the first virtual edge system with the state information. Also, the method provides transferring the state information to one or more other virtual edge systems of the plurality of virtual edge systems and updating respective state information bases of the one or more other virtual edge systems with the state information.

First claim

What is claimed is:

1. A method of enabling multi-path routing in stateful services of a virtual network environment, the method comprising:
establishing a first connection between a first edge and a client, wherein the first edge provides a first stateful service of a plurality of stateful services and wherein the first edge regulates communication traffic going into and coming out of the virtual network environment;
after generating state information about the connection, transferring the state information to a second edge that provides the stateful service;
in the second edge, using the state information to initiate establishment of a second connection with the client; and
routing traffic for a communication to the client through the first edge and the second edge over the first connection and the second connection.

2. The method of claim 1 , wherein the state information includes a source port, a destination port, and a network address of the client.

3. The method of claim 1 , wherein the first connection and the second connection are established for a communication with a destination within the virtual network environment, wherein the destination comprises a virtual application server, and wherein routing the traffic is performed by a virtual router.

4. The method of claim 1 , wherein using the state information to initiate the establishment of the second connection comprises:
using the state information to initiate a handshake between the second edge and the client.

5. The method of claim 1 , wherein the first connection and the second connection comprise Transmission Control Protocol (TCP) connections.

6. The method of claim 5 , wherein establishing the first connection comprises, in the first edge:
receiving a TCP synchronize (SYN) message from the client that indicates a source port and a destination port, wherein the source port and the destination port are included in the state information;
responding to the TCP SYN message with a TCP SYN-acknowledge (ACK) message; and
receiving a TCP ACK message from the client in response to the TCP SYN-ACK message.

7. The method of claim 1 , wherein transferring the state information comprises:
transferring the state information to a controller of a plurality of edges including the first edge and the second edge;
in the controller, identifying the second edge from the plurality of edges as an edge configured for multi-path routing; and
transferring the state information from the controller to the second edge.

8. The method of claim 7 , wherein the state information is transferred over a control plane channel employed by the controller and the first and second edges.

9. The method of claim 1 , wherein the traffic comprises packets transferred from a destination within the virtual network environment in response to a request received from the client over the first connection.

10. The method of claim 1 , wherein the first edge and the second edge comprise respective firewalls that identify the traffic from the state information and allow the traffic to pass.

11. A system hosting a first edge system of a plurality of edge systems of a virtual network environment to enable multi-path routing, the system comprising:
one or more computer readable storage media;
a processing system operatively coupled with the one or more computer readable storage media; and
program instructions stored on the one or more computer readable storage media that, when read and executed by the processing system, direct the processing system to:
establish a first connection between a first edge and a client, wherein the first edge provides a first stateful service of a plurality of stateful services and wherein the first edge regulates communication traffic going into and coming out of the virtual network environment;
after state information about the connection is generated, transfer the state information to a second edge that provides the stateful service, wherein the second edge uses the state information to initiate establishment of a second connection with the client; and
route traffic for a communication to the client through the first edge over the first connection, wherein the traffic is also routed through the second edge over the second connection.

12. The system of claim 11 , wherein the state information includes a source port, a destination port, and a network address of the client.

13. The system of claim 11 , wherein the first connection and the second connection are established for a communication with a destination within the virtual network environment, wherein the destination comprises a virtual application server, and wherein routing the traffic is performed by a virtual router.

14. The system of claim 11 , wherein to use the state information to initiate the establishment of the second connection, the second edge:
uses the state information to initiate a handshake between the second edge and the client.

15. The system of claim 11 , wherein the first connection and the second connection comprise Transmission Control Protocol (TCP) connections.

16. The system of claim 15 , wherein to establish the first connection the program instructions direct the processing system to:
receive a TCP synchronize (SYN) message from the client that indicates a source port and a destination port, wherein the source port and the destination port are included in the state information;
respond to the TCP SYN message with a TCP SYN-acknowledge (ACK) message; and
receive a TCP ACK message from the client in response to the TCP SYN-ACK message.

17. The system of claim 11 , wherein to transfer the state information the program instructions direct the processing system to:
transfer the state information to a controller of a plurality of edges including the first edge and the second edge; and
wherein the controller identifies the second edge from the plurality of edges as an edge configured for multi-path routing and transfers the state information from the controller to the second edge.

18. The system of claim 17 , wherein the state information is transferred over a control plane channel employed by the controller and the first and second edges.

19. The system of claim 11 , wherein the traffic comprises packets transferred from a destination within the virtual network environment in response to a request received from the client over the first connection.

20. The system of claim 11 , wherein the first edge and the second edge include respective firewalls that identify the traffic from the state information and allow the traffic to pass.

Assignees

• Nicira Inc

Inventors

• Bangalore Krishnamurthy Sudheendra

Classifications

• H04L67/142

  Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms · CPC title

• H04L45/021

  Ensuring consistency of routing table updates, e.g. by using epoch numbers · CPC title

• H04L47/22

  Traffic shaping · CPC title

• H04L12/4641

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• H04L69/16

  Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] · CPC title