Bridging between network segments with a logical router

Patent metadata

Field	Value
Publication number	US-9910686-B2
Application number	US-201314137869-A
Country	US
Kind code	B2
Filing date	Dec 20, 2013
Priority date	Oct 13, 2013
Publication date	Mar 6, 2018
Grant date	Mar 6, 2018

Abstract

Some embodiments provide a system that includes a first set of virtual machines belonging to a first overlay network and a second set of virtual machines belonging to a second overlay network. The first and second sets of virtual machines operate in several host machines, each of which includes a managed physical routing element (MPRE) for routing data packet between virtual machines in different overlay networks. A particular MPRE is configured as a bridge for routing packets between virtual machines that are in different overlay networks but in a same IP (internet protocol) subnet.

First claim

What is claimed is:

1. A system comprising:
a first plurality of virtual machines belonging to a first overlay network;
a second plurality of virtual machines belonging to a second overlay network, wherein the first and second pluralities of virtual machines operate in a plurality of host machines, each host machine comprising a managed physical routing element (MPRE), each MPRE for forwarding data packets between virtual machines in different overlay networks,
wherein a particular MPRE is configured as a bridge for bridging packets between virtual machines that are in different overlay networks but in a same IP (internet protocol) subnet by using a pairing between an overlay network identifier and a link layer address,
wherein (i) a logical interface of the particular MPRE is configured as a bridge logical interface for interfacing with a particular overlay network and (ii) the bridge logical interface is identified by an overlay network identifier for the particular overlay network,
wherein a data message between virtual machines operating on a same host that are in different overlay networks but in a same IP subnet is forwarded by the particular MPRE to the data message's destination without exiting the host machine.

2. The system of claim 1 , wherein the first overlay network is a VLAN and the second overlay network is a VXLAN.

3. The system of claim 1 , wherein each MPRE comprises a plurality of logical interfaces, each logical interface for interfacing with a different overlay network.

4. The system of claim 3 ,
wherein logical interfaces not configured as bridge LIFs are configured as routing LIFs for routing data packets by using network layer IP address.

5. The system of claim 4 , wherein each routing LIF receives data packets having a destination MAC address that belongs to the MPRE.

6. The system of claim 4 , wherein each bridge LIF receives data packets that need bridging from the overlay network that it interfaces with, wherein a data packet from an overlay network needs bridging when its destination media access control (MAC) address is not in the overlay network.

7. The system of claim 6 , wherein, when an MPRE does not know which overlay network the destination MAC address belongs to, the MPRE sends the received data packet out on all bridge LIFs other than the bridge LIF from which the data packet is received.

8. The system of claim 6 , wherein the MPRE learns a pairing between a MAC address and an overlay network from the source MAC address and an identifier of the overlay work of the received data packet.

9. A system comprising:
a first plurality of virtual machines belonging to a first overlay network; and
a second plurality of virtual machines belonging to a second overlay network, wherein the first and second pluralities of virtual machines are operating in a plurality of host machines, each host machine comprising a managed physical routing element (MPRE) for forwarding data packets between virtual machines in different overlay networks, wherein at least one particular MPRE of the MPREs is configured as a bridge that learns pairings between link layer addresses and overlay network identifiers from the routed data packets and bridges packets by using the learned pairings to look up an overlay network identifier from a data link layer address, wherein a particular bridge logical interface (bridge LIF) of the particular MPRE that is for interfacing with a particular overlay network is identified by an overlay network identifier for the particular overlay network,
wherein a data message between virtual machines that are in different overlay networks but in a same IP subnet and that both operate on a same host as the particular MPRE is forwarded by the particular MPRE to the data message's destination without exiting the host machine.

10. The system of claim 9 , wherein the first overlay network is a VLAN and the second overlay work is a VXLAN.

11. The system of claim 9 , wherein each MPRE comprises a plurality of logical interfaces, each logical interface for interfacing with a different overlay network.

12. The system of claim 11 , wherein logical interfaces not configured as bridge LIFs are configured as routing LIFs for routing data packets by using network layer IP address.

13. The system of claim 12 , wherein each bridge LIF receives data packets that need bridging from the overlay network that it interfaces with, wherein a data packet from an overlay network needs bridging when its destination media access control (MAC) address is not in the overlay network.

14. The system of claim 13 , wherein, when an MPRE does not know which overlay network the destination MAC address belongs to, the MPRE sends the received data packet out on all bridge LIFs other than the bridge LIF from which the data packet is received.

15. The system of claim 13 , wherein the MPRE learns a pairing between a MAC address and an overlay network identifier from the source MAC address and an identifier of the overlay network of the received data packet.

16. A method comprising:
defining a managed physical routing element (MPRE) that is to be operated in a plurality of host machines, wherein the MPRE operating in a host machine is for routing a data packet from a first segment of a logical network to a second segment of the logical network; and
configuring a particular MPRE operating in a particular host machine to act as a bridge that (i) learns pairings between link layer addresses and overlay network identifiers from the routed data packets and (ii) bridges packets by using the learned pairings to look up an overlay network identifier from a data link layer address,
wherein a particular bridge logical interface (bridge LIF) of the particular MPRE that is for interfacing with a particular overlay network is identified by an overlay network identifier for the particular overlay network,
wherein a data message between virtual machines that are in different overlay networks but in a same IP subnet and that both operate on the particular host machine is forwarded by the particular MPRE to the data message's destination without exiting the host machine.

17. The method of claim 16 , wherein the first segment is a VLAN encapsulation network and the second segment is a VXLAN encapsulation network.

18. The method of claim 17 , wherein each MPRE comprises a plurality of logical interfaces, each logical interface for interfacing with a different segment of the logical network.

19. The method of claim 18 wherein logical interfaces not configured as bridge LIFs are configured as routing LIFs for routing data packets by using network layer IP address.

20. The method of claim 19 , wherein each bridge LIF receives data packets that need bridging from the overlay network that it interfaces with, wherein a data packet from an overlay network needs bridging when its destination media access control (MAC) address is not in the overlay network.

Assignees

• Nicira Inc

Inventors

• Chandrashekhar Ganesan
• Subramaniyam Rahul Korivi
• Singh Ram Dular
• Agarwal Vivek
• Wang Howard

Classifications

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• H04L61/103

  across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP] · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• H04L45/741

  Routing in networks with a plurality of addressing schemes, e.g. with both IPv4 and IPv6 · CPC title

• G06F9/455 Primary

  Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines · CPC title