Tracing network packets through logical and physical networks

Patent metadata

Field	Value
Publication number	US-9860151-B2
Application number	US-201615097245-A
Country	US
Kind code	B2
Filing date	Apr 12, 2016
Priority date	Jul 12, 2013
Publication date	Jan 2, 2018
Grant date	Jan 2, 2018

Abstract

Some embodiments provide a method for a first network controller that manages a set of logical forwarding elements implemented in several managed forwarding elements. The method receives a request to trace a specified packet having a particular source on a logical forwarding element. The method generates the packet according to the packet specification. The generated packet includes an indicator that the packet is for a trace operation. The method sends the packet to a second network controller that manages a managed forwarding element associated with the particular source. The method receives a first set of messages regarding operations performed on the packet from a set of network controllers that receives a second set of messages regarding operations performed on the packet from a set of managed forwarding elements that process the packet.

First claim

We claim:

1. For a network controller that manages a network comprising a set of managed forwarding elements (MFEs), a method comprising:
receiving a request to trace a packet having a particular source corresponding to a particular logical port of a logical forwarding element;
at the network controller, defining packet data for the requested packet, the packet data comprising an indicator that the packet is for a trace operation;
inserting the defined packet data into a particular MFE associated with the particular logical port in order for the MFE to process the packet data as though receiving a packet from the particular source; and
from a set of MFEs that includes the particular MFE, receiving a set of messages regarding both logical processing operations and physical forwarding operations that each MFE in the set of MFEs performs on the packet data.

2. The method of claim 1 , wherein inserting the defined packet data into the particular MFE comprises sending a command that modifies registers of the particular MFE to specify that the packet was received through an ingress port of the particular MFE that connects to the particular source.

3. The method of claim 1 , wherein the particular logical port corresponds to a media access control (MAC) address of a virtual interface of a virtual machine that connects to the logical forwarding element.

4. The method of claim 1 , wherein the particular logical port corresponds to an external network to which the logical forwarding element connects, wherein a plurality of different MFEs are associated with the particular logical port, the method further comprising selecting one of the plurality of different MFEs associated with the particular logical port as the particular MFE into which to insert the defined packet data.

5. The method of claim 1 , wherein the particular logical port corresponds to a remote domain to which the logical forwarding element connects, wherein a plurality of different MFEs are associated with the particular logical port, the method further comprising selecting one of the plurality of different MFEs associated with the particular logical port as the particular MFE into which to insert the defined packet data.

6. The method of claim 1 , wherein the received set of messages comprises a plurality of messages regarding logical processing operations performed by the particular MFE associated with the particular source, wherein the messages received from other managed forwarding elements comprise only messages regarding physical forwarding operations.

7. The method of claim 1 , wherein the logical processing operations comprise a logical forwarding operation for forwarding the packet data to a logical egress port of a logical switch, wherein a received message associated with the logical forwarding operation comprises at least an identifier for the logical switch and a port identifier for the logical egress port.

8. The method of claim 1 , wherein the logical processing operations comprise a logical L2 access control list (ACL) decision for the packet data, wherein a received message associated with the decision comprises at least an identifier for a logical switch that implements the ACL decision and an ACL entry matched by the packet data.

9. The method of claim 1 , wherein the set of logical processing operations comprises a logical forwarding operation for forwarding the packet data to a logical egress port of a logical router, wherein a received message associated with the logical forwarding operation comprises at least an identifier for the logical router and a port identifier for the logical egress port.

10. The method of claim 9 , wherein the received message associated with the logical processing operation further comprises a routing entry matched by the packet.

11. A non-transitory machine readable medium storing a network controller application which when executed by at least one processing unit manages a network comprising a set of managed forwarding elements (MFEs), the network controller application comprising sets of instructions for:
receiving a request to trace a packet having a particular source corresponding to a particular logical port of a logical forwarding element;
at the network controller, defining packet data for the requested packet, the packet data comprising an indicator that the packet is for a trace operation;
inserting the defined packet data into a particular MFE associated with the particular logical port in order for the MFE to process the packet data as though receiving a packet from the particular source; and
from a set of MFEs that includes the particular MFE, receiving a set of messages regarding both logical processing operations and physical forwarding operations that each MFE in the set of MFEs performs on the packet data.

12. The non-transitory machine readable medium of claim 1 , wherein the set of instructions for inserting the defined packet data into the particular MFE comprises a set of instructions for sending a command that modifies registers of the particular MFE to specify that the packet was received through an ingress port of the particular MFE that connects to the particular source.

13. The non-transitory machine readable medium of claim 11 , wherein the particular logical port corresponds to a media access control (MAC) address of a virtual interface of a virtual machine that connects to the logical forwarding element.

14. The non-transitory machine readable medium of claim 11 , wherein the particular logical port corresponds to an external network to which the logical forwarding element connects, wherein a plurality of different MFEs are associated with the particular logical port, the method further comprising selecting one of the plurality of different MFEs associated with the particular logical port as the particular MFE into which to insert the defined packet data.

15. The non-transitory machine readable medium of claim 11 , wherein the particular logical port corresponds to a remote domain to which the logical forwarding element connects, wherein a plurality of different MFEs are associated with the particular logical port, the method further comprising selecting one of the plurality of different MFEs associated with the particular logical port as the particular MFE into which to insert the defined packet data.

16. The non-transitory machine readable medium of claim 11 , wherein the received set of messages comprises a plurality of messages regarding logical processing operations performed by the particular MFE associated with the particular source, wherein the messages received from other managed forwarding elements comprise only messages regarding physical forwarding operations.

17. The non-transitory machine readable medium of claim 11 , wherein the logical processing operations comprise a logical forwarding operation for forwarding the packet data to a logical egress port of a logical switch, wherein a received message associated with the logical forwarding operation comprises at least an identifier for the logical switch and a port identifier for the logical egress port.

18. The non-transitory machine readable medium of claim 11 , wherein the logical processing operations comprise a logical L2 access control list (ACL) decision for the packet data, wherein a received message associated with the decision comprises at least an identifier for a logical switch that implements the ACL decision and an ACL entry matched by the packet data.

19. The non-transitory machine readable medium of claim 11 , wherein the set of logical

Assignees

• Nicira Inc

Inventors

• Ganichev Igor
• Thakkar Pankaj
• Koponen Teemu
• Dong Mo

Classifications

• H04L49/70

  Virtual switches · CPC title

• G06F11/07

  Responding to the occurrence of a fault, e.g. fault tolerance · CPC title

• H04L45/42

  Centralised routing · CPC title

• H04L43/10 Primary

  Active monitoring, e.g. heartbeat, ping or trace-route · CPC title

• H04L45/586

  of virtual routers · CPC title