Routing messages between cloud service providers

Patent metadata

Field	Value
Publication number	US-11659035-B2
Application number	US-202217804903-A
Country	US
Kind code	B2
Filing date	Jun 1, 2022
Priority date	May 12, 2014
Publication date	May 23, 2023
Grant date	May 23, 2023

Abstract

Technology is disclosed for bridging clouds of computing devices for compute and data storage. The technology can receive a virtual routing table (VRT), wherein the VRT indicates an association with a virtual local area network (VLAN) and defines neighbors for each route wherein at least one neighbor is defined for each of the two different cloud service providers, wherein the route definition creates a private transitive network between the neighbors; receive from a first node a first message destined for a second node; determine that the first message employs the route specified by the VRT; forward the first message to the second node; receive from a third node a second message destined for the second node; determine that the second message does not employ the route specified by the VRT; and fail to forward the second message to the second node.

First claim

The invention claimed is:

1. A method performed by a storage node in a colocation facility in a data center, the method comprising:
receiving, by the storage node over a first virtual local area network (VLAN), a message from a first cloud service provider at the data center to a second cloud service provider, the message including a header indicating that the second cloud service provider is to receive the message, wherein a physical interface of the storage node includes a port of the first VLAN, and wherein the physical interface is connected to a physical port of a switch communicating with the first cloud service provider and the second cloud service provider, further wherein the header included in the message from the first cloud service provider includes a field with an identifier for the first VLAN; and
routing the message to the second cloud service provider using a first virtual routing table (VRT) associated with the first VLAN, wherein the first cloud service provider and the second cloud service provider are identified in the first VRT.

2. The method of claim 1 , wherein the storage node hosts a virtual storage server.

3. The method of claim 1 , wherein the storage node comprises an item selected from a list consisting of: a storage cluster and a storage controller.

4. The method of claim 1 , wherein the port of the first VLAN is associated with a logical interface that is assigned to an item selected from a list consisting of: a virtual storage server and a target port.

5. The method of claim 1 , wherein the first VRT is identified as a labeled portion of a virtual routing and forwarding (VRF) table.

6. The method of claim 1 , wherein the first VLAN is associated with a first tenant, the method further comprising: isolating a second tenant within a second VLAN associated with a second VRT, wherein the second VRT is partitioned from the first VRT.

7. The method of claim 1 , further comprising creating a second VLAN associated with a second tenant to communicate with a third cloud service provider, wherein the third cloud service provider shares a common internet protocol network address with the first cloud service provider.

8. The method of claim 1 , wherein the first VRT indicates an association with the first VLAN, and wherein the first VRT is one of a plurality of VRTs associated with a plurality of VLANs.

9. A method performed by a computing device in a colocation facility in a data center, the method comprising:
communicating, between a storage node operating on the computing device and a first cloud service provider, via a logical interface that is assigned to the storage node and associated with a port of a first virtual local area network (VLAN) on a physical interface of the computing device, wherein the physical interface is coupled to a switch that is coupled to the first cloud service provider; and
sending a message from the first cloud service provider to a second cloud service provider over the logical interface according to a first virtual routing table (VRT) associated with the first VLAN, wherein the first cloud service provider and the second cloud service provider are identified in the first VRT, and the message includes a header indicating that the second cloud service provider is to receive the message, wherein the header includes an identifier for the first VLAN.

10. The method of claim 9 , wherein a first tenant is associated with the first VLAN, the method further comprising isolating a second tenant within a second VLAN associated with a second VRT, wherein the second VRT is partitioned from the first VRT.

11. The method of claim 9 , further comprising creating a second VLAN, wherein a third cloud service provider shares a common internet protocol network address with the first cloud service provider.

12. The method of claim 9 , wherein the first VRT indicates an association with the first VLAN.

13. The method of claim 9 , wherein the first VRT indicates an association with the first VLAN, and wherein the first VRT is one of a plurality of VRTs associated with a plurality of VLANs.

14. The method of claim 9 , wherein the first VLAN is associated with a first tenant corresponding to the storage node.

15. A computing device comprising:
a memory containing machine-readable medium comprising machine executable code having stored thereon instructions for performing a method of exchanging data across different cloud service providers; and
a processor coupled to the memory, the processor configured to execute the machine executable code to cause the processor to:
communicate, between a storage node operating on the computing device and a first cloud service provider, via a logical interface that is assigned to the storage node and associated with a port of a first virtual local area network (VLAN) on a physical interface of the computing device, wherein the physical interface is coupled to a switch that is coupled to the first cloud service provider; and
send a message from the first cloud service provider to a second cloud service provider over the logical interface according to a first virtual routing table (VRT) associated with the first VLAN, wherein the first cloud service provider and the second cloud service provider are identified in the first VRT, and the message includes a header indicating that the second cloud service provider is to receive the message, wherein the header includes an identifier for the first VLAN.

16. The computing device of claim 15 , wherein the first VRT is identified as a labeled portion of a virtual routing and forwarding (VRF) table.

17. The computing device of claim 15 , wherein the first VLAN is associated with a first tenant, the computing device further comprising machine executable code to isolate a second tenant within a second VLAN associated with a second VRT, wherein the second VRT is partitioned from the first VRT.

18. The computing device of claim 15 , wherein the first VLAN is associated with a first tenant, the computing device further comprising machine executable code to create a second VLAN comprising a second tenant, wherein a third cloud service provider shares a common internet protocol network address with the first cloud service provider.

19. The computing device of claim 15 , wherein the first VRT indicates an association with the first VLAN.

20. The computing device of claim 15 , wherein the first VRT indicates an association with the first VLAN, and wherein the first VRT is one of a plurality of VRTs associated with a plurality of VLANs.

Assignees

• Netapp Inc

Inventors

• Fullbright John Keith
• Beaupre Mark
• Gates Lee

Classifications

• H04L45/02

  Topology update or discovery · CPC title

• H04L45/14

  Routing performance; Theoretical aspects · CPC title

• H04L67/1097 Primary

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title

• H04L12/4641

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• H04L45/64

  using an overlay routing layer · CPC title