EVPN host routed bridging (HRB) and EVPN cloud native data center

Patent metadata

Field	Value
Publication number	US-11902160-B2
Application number	US-202117452309-A
Country	US
Kind code	B2
Filing date	Oct 26, 2021
Priority date	Sep 30, 2021
Publication date	Feb 13, 2024
Grant date	Feb 13, 2024

Abstract

Techniques for EVPN Host Routed Bridging (HRB) and EVPN cloud-native data center with Host Routed Bridging (HRB) are described. A host computing device of a data center includes one or more containerized user-level applications. A cloud native virtual router is configured for dynamic deployment by the data center application orchestration engine and operable in a user space of the host computing device. Processing circuitry is configured for execution of the containerized user-level applications and the cloud native virtual router. The cloud native virtual router comprises a containerized routing protocol process configured to operate as a control plane, and a data plane for the containerized router. The data plane is configured to operate an ethernet virtual private network (EVPN) encapsulation/decapsulation data path of an overlay network for communicating layer two (L2) network traffic of the containerized user applications over a switch fabric of the data center.

First claim

The invention claimed is:

1. A host computing device of a data center, the host computing device comprising:
one or more containerized user-level applications configured for dynamic deployment by a data center orchestration engine;
a cloud native virtual router configured for dynamic deployment by the data center orchestration engine and operable in a user space of the host computing device;
processing circuitry configured for execution of the one or more containerized user-level applications and the cloud native virtual router;
wherein the cloud native virtual router comprises:
a containerized routing protocol process configured to operate as a control plane for the cloud native virtual router and to program a data plane for the cloud native virtual router to operate an ethernet virtual private network (EVPN) encapsulation/decapsulation data path of an overlay network for communicating layer two (L2) network traffic of the containerized user-level applications over a switch fabric of the data center, and
the data plane for the cloud native virtual router,

wherein the containerized routing protocol process of the cloud native virtual router is configured as one or more containers for dynamic deployment by the data center orchestration engine; and
a container network interface (CNI) configured to:
receive data specifying a high-level intent for the EVPN encapsulation/decapsulation data path for the containerized user-level application of the one or more containerized user-level applications configured for dynamic deployment by the data center orchestration engine,
translate the data specifying the high-level intent into configuration data, and
based on the configuration data, dynamically set up the EVPN encapsulation/decapsulation data path to provide a network connection between the containerized user-level application and a desired bridge domain of the EVPN encapsulation/decapsulation data path.

2. The host computing device of claim 1 ,
a first network interface and a second network interface, each of first network interface and the second network interface being attached to the cloud native virtual router,
wherein the first network interface is configured to communicate network traffic between the one or more containerized user-level applications executing on the host computing device and one or more containerized user-level applications executing on other host computing devices, and
wherein the second network interface is operable to configure the data plane for the cloud native virtual router in response to one or more communications from the data center orchestration engine.

3. The host computing device of claim 2 , further comprising:
a primary CNI operating as a control channel enabling the data center orchestration engine to manage the first network interface,
wherein the CNI comprises a secondary CNI operating as a control channel enabling the data center orchestration engine to manage the cloud native virtual router.

4. The host computing device of claim 1 , wherein the EVPN encapsulation/decapsulation data path of the cloud native virtual router is configured as a Host Routed Bridging (HRB) data path comprising:
a layer two (L2) virtual routing and forwarding table (VRF) storing media access control (MAC) addresses and L2 forwarding information for one or more L2 networks associated with the one or more containerized user-level applications executing on the host computing device;
one or more L2 bridge domains (BDs), each of the L2 bridge domains corresponding to a different one of the L2 networks; and
one or more internet routing and bridging (IRB) interfaces, each of the one or more IRB interfaces providing a data plane forwarding path between the layer three (L3) virtual routing and forwarding table and a different one of the one or more L2 bridge domains.

5. The host computing device of claim 1 , further comprising a plurality of pods configured as virtualized elements deployable by the data center orchestration engine to the host computing device for execution by the processing circuitry of the host computing device,
wherein the plurality of pods comprises:
a first pod comprising a data plane for the cloud native virtual router; and
a different, second pod comprising the containerized routing protocol process.

6. The host computing device of claim 5 , further comprising:
a physical network interface,
wherein the first pod is data plane development kit (DPDK)-enabled and configured that the cloud native virtual router can exchange packets with the physical network interface using DPDK.

7. The host computing device of claim 1 , wherein the containerized routing protocol process is configured to execute one or more routing protocols to exchange routing information with routers external to the host computing device.

8. The host computing device of claim 7 , wherein the containerized routing protocol process establishes routing protocol adjacencies with a plurality of containerized routers operating within other computing devices of the data center, and wherein the plurality of containerized routers are configured for management by the data center orchestration engine.

9. The host computing device of claim 8 ,
wherein the one or more routing protocols comprise an interior gateway protocol, and
wherein the routing information comprises underlay routing information for a network, the underlay routing information obtained via the interior gateway protocol.

10. The host computing device of claim 1 , wherein the containerized routing protocol process and the EVPN encapsulation/decapsulation data path of the cloud native virtual router are configured to provide EVPN Type-5 routing of network traffic for the one or more containerized user-level applications.

11. A data center network system comprising:
a plurality of host computing devices interconnected by a switch fabric comprising a plurality of physical network switches;
an orchestrator configured to deploy pods for executing one or more containerized user-level applications on processing circuitry of the host computing devices;
a plurality of cloud native virtual routers executing on the host computing devices,
wherein at least a containerized routing protocol process of each of the plurality of cloud native virtual routers is configured as a pod for deployment by the orchestrator as a containerized user-level application of the one or more containerized user-level applications;
wherein each of the cloud native virtual routers comprises:
the containerized routing protocol process configured to operate as a control plane for the cloud native virtual router, wherein the containerized routing protocol process is further configured to program a data plane to provide a set of one or more layer two (L2) bridging domains connected to a layer three (L3) virtual routing and forwarding (VRF) data structure for an ethernet virtual private network (EVPN) overlay network for communicating layer two (L2) network traffic between the one or more containerized user-level applications via the switch fabric of the data center, and
the data plane providing the set of one or more L2 bridging domains; and

a container network interface (CNI) configured to:
receive data specifying a high-level intent for an EVPN encapsulation/decapsulation data path for a containerized user-level application of the one or more containerized user-level applications configured for dynamic deployment by the orchestrator;
translate the data specifying the high-level intent into configuration data; and
based on the configuration data, dynamically set up the EVPN encapsulation/decapsulation data path to provide a network connection betwe

Assignees

• Juniper Networks Inc

Inventors

• Lin Wen
• Gupta Manish
• Channalli Shivakumar
• Nallamothu Vinay K

Classifications

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• H04L45/745 Primary

  Address table lookup; Address filtering · CPC title

• H04L12/4633

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L12/4641

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title