Flow generation from second level controller to first level controller to managed switching element

Patent metadata

Field	Value
Publication number	US-2021184898-A1
Application number	US-202117175548-A
Country	US
Kind code	A1
Filing date	Feb 12, 2021
Priority date	Aug 17, 2011
Publication date	Jun 17, 2021
Grant date	—

Abstract

A network system that includes a first set of network hosts in a first domain and a second set of network hosts in a second domain. Within each of the domains, the system includes several edge switching elements (SEs) that each couple to the network hosts and forward network data to and from the set of network hosts. Within the first domain, the system includes (i) an interior SE that couples to a particular edge SE in order to receive network data for forwarding from the edge SE when the edge SE does not recognize a destination location of the network data and (ii) an interconnection SE that couples to the interior SE, the edge SE, and the second domain through an external network. When the edge SE receives network data with a destination address in the second domain, it forwards the network data directly to the interconnection SE.

First claim

1 - 20 . (canceled)

21 . A network control system comprising:
a first set of network controllers for (i) receiving a definition of a logical forwarding element to which both a first set of machines in a first domain and a second set of machines in a second domain are coupled, (ii) translating the definition of the logical forwarding element into a first set of rules in a first logical layer, and (iii) translating the first set of rules into a second set of rules in a second logical layer; and a second set of network controllers in the first domain for (i) receiving a portion of the second set of rules from the first set of network controllers and (ii) translating the portion of the second set of rules into a third set of rules that are for distribution to a set of physical forwarding elements in the first domain managed by the second set of network controllers.

22 . The network control system of claim 21 further comprising a third set of network controllers for (i) receiving a second portion of the second set of rules from the first set of network controllers and (ii) translating the second portion of the second set of rules into a fourth set of rules that are for distribution to a set of physical forwarding elements in the second domain managed by the third set of network controllers.

23 . The network control system of claim 21 , wherein the first set of network controllers comprises a plurality of controller instances acting as a distributed controller cluster.

24 . The network control system of claim 21 , wherein the first set of network controllers comprises a single controller instance.

25 . The network control system of claim 24 , wherein the single controller instance is a controller computer that executes:
a user interface for receiving the definition of the logical forwarding element; a virtualization application for translating the definition of the logical forwarding element into the first set of rules; and a control application for translating the first set of rules into the second set of rules.

26 . The network control system of claim 25 , wherein:
the control application uses a first rules engine to translate the definition of the logical forwarding element into the first set of rules; and the virtualization application uses a second rules engine to translate the first set of rules into the second set of rules.

27 . The network control system of claim 26 , wherein the first and second rules engines are the same rules engine.

28 . The network control system of claim 21 , wherein (i) the definition of the logical forwarding element, (ii) the first set of rules, and (iii) the second set of rules are each represented as different sets of nLog tables at the first set of network controllers.

29 . The network control system of claim 21 , wherein a machine with a particular address is coupled to a particular logical port of the logical forwarding element, wherein the first set of rules comprises a first rule for logically forwarding a packet with a destination address that matches the particular address to the particular logical port.

30 . The network control system of claim 29 , wherein the second set of rules comprises a second flow entry for logically forwarding a packet that (i) is associated with the logical forwarding element and (ii) has a destination address matching the particular address, wherein the association of the packet with the logical forwarding element is based on a physical port at which a physical forwarding element receives the packet.

31 . The network control system of claim 30 , wherein:
the logical forwarding element is a first logical forwarding element; the third set of rules comprises a third rule for logically forwarding a packet that (i) is associated with a second logical forwarding element and the first logical forwarding element, and (ii) has a destination address matching the particular address; the association of the packet with the second logical forwarding element is based on the physical port at which the physical switching element receives the packet; the association of the packet with the first logical forwarding element is based on a logical port of the second logical forwarding element that corresponds to the physical port, and to which a particular port of the first logical forwarding element corresponds.

32 . The network control system of claim 31 , wherein the second logical forwarding element couples to (i) the first set of machines in the first domain and (ii) the second domain.

33 . The network control system of claim 21 , wherein:
the definition of the logical forwarding element is a logical control plane definition; the first set of rules are a first set of flow entries in a first logical forwarding plane layer; the second set of rules are a second set of flow entries in a second logical forwarding plane layer; and the third set of rules are a third set of flow entries in a physical control plane layer.

34 . The network control system of claim 21 , wherein the logical forwarding element is a first logical switch having a plurality of logical ports to which the machines in the first and second sets of machines couple.

35 . The network control system of claim 34 , wherein:
a second logical switch defined for the first domain has a first set of logical ports to which the machines in the first set of machines couple; and a third logical switch defined for the second domain has a second set of logical ports to which the machines in the second set of machines couple.

36 . The network control system of claim 35 , wherein:
a first logical port in the first set of logical ports couples to the third logical switch; and a second logical port in the second set of logical ports couples to the second logical switch.

37 . The network control system of claim 21 , wherein the first domain is located in a first datacenter and the second domain is located in a second, different datacenter.

38 . The network control system of claim 37 , wherein the first and second sets of network controllers are both located in the first datacenter.

39 . The network control system of claim 37 , wherein the second set of network controllers is located in the first datacenter and the first set of network controllers is located external to both the first and second datacenters.

40 . The network control system of claim 21 , wherein the first and second domains are both located in a same datacenter.

Assignees

• Nicira Inc

Inventors

• Koponen Teemu
• Casado Martin
• Thakkar Pankaj
• Zhang Ronghua
• Wendlandt Daniel J

Classifications

• H04L41/122

  of virtualised topologies, e.g. software-defined networks [SDN] or network function virtualisation [NFV] · CPC title

• H04L41/40

  using virtualisation of network functions or resources, e.g. SDN or NFV entities · CPC title

• H04L12/66 Primary

  Arrangements for connecting between networks having differing types of switching systems, e.g. gateways · CPC title

• H04L45/04

  Interdomain routing, e.g. hierarchical routing · CPC title

• H04L41/044

  comprising hierarchical management structures · CPC title