Abstract:
Some embodiments provide a network management system for managing a logical network that spans multiple physical sites. The network management system includes a global network manager for receiving global logical network configuration data for the multiple physical sites. The network management system includes, at each of the physical sites, (i) a local network manager for receiving a logical network configuration for the physical site from the global network manager and (ii) a set of central controllers for distributing logical network configuration data to computing devices that implement the logical network at the physical site.
Abstract:
Some embodiments provide a system for implementing a logical network that spans multiple datacenters. The system includes, at each of the datacenters, a set of host computers that execute (i) data compute nodes (DCNs) belonging to the logical network and (ii) managed forwarding elements (MFEs) that implement the logical network to process data messages for the DCNs executing on the host computers. The system also includes, at each of the datacenters, a set of computing devices implementing logical network gateways for logical forwarding elements (LFEs) of the logical network. The logical network gateways are connected to the logical network gateways for the LFEs at the other datacenters. The MFEs executing on the host computers in a first datacenter communicate with the MFEs executing on the host computers in a second datacenter via the logical network gateways of the first and second datacenters.
Abstract:
Some embodiments provide a method for defining a logical network (LN) that spans multiple sites and is managed at each site by a local manager. At a global manager that manages the logical network, the method creates a tree from a definition of the LN that spans the sites. The tree includes nodes representing elements in the LN and connections between the nodes to express relationships between the elements. Each of at least a subset of nodes has a span attribute identifying sites spanned by an LN element corresponding to the node. The method uses the span attributes to create a parsed tree for each site. Based on the parsed tree of each site, the method identifies a portion of the LN definition that is relevant for the site. The method provides, to the local manager of each site, the portion of the LN definition identified for the site.
Abstract:
In some embodiments, a method receives a selection of a logical router in the first computing device in a first site of a plurality of sites as a preferred egress point to an external network for the logical router. The logical router is instantiated on computing devices in the plurality of sites and a single site in the sites is the preferred egress point for the logical router. The method stores identification information for the logical router in a routing table that stores identification information for multiple logical routers. The identification information is unique among multiple logical routers. The method advertises via a routing instance in a control plane to other computing devices in other sites the identification information for the logical router to indicate the logical router in the first computing device in the first site is the preferred egress point.
Abstract:
Some embodiments provide a centralized overlay-network cloud gateway and a set of centralized services in a transit virtual private cloud (VPC) connected to multiple other compute VPCs hosting compute nodes (VMs, containers, etc.) that are part of (belong to) the overlay network. The centralized overlay-network cloud gateway provides connectivity between compute nodes of the overlay network (e.g., a logical network spanning multiple VPCs) and compute nodes in external networks. Some embodiments use the centralized overlay-network cloud gateway to provide transitive routing (e.g., routing through a transit VPC) in the absence of direct peering between source and destination VPCs. The overlay network, of some embodiments, uses the same subnetting and default gateway address for each compute node as the cloud provider network provided by the virtual private cloud provider.
Abstract:
Exemplary methods, apparatuses, and systems include virtualization software of a host computer receiving a first packet addressed to a first virtual link layer address. Each of a first plurality of virtual machines on the first host computer is configured to share the first virtual link layer address. The virtualization software of the first host computer maps a flow of packets, including the first packet, to a first virtual machine within the first plurality of virtual machines and forwards the first packet to the first virtual machine. The virtualization software of the first host computer receives a second packet from the first virtual machine in response to the first packet. The second packet includes the first virtual link layer address as a source address for the first virtual machine.
Abstract:
The disclosure herein describes a system, which provides uniform access to a gateway in an extended virtualized layer-2 network. During operation, the system identifies a media access control (MAC) address, which is associated with a respective gateway in the extended virtualized layer-2 network, in a layer-2 header of a data frame. This MAC address is specific to the extended virtualized layer-2 network (e.g., for a different extended virtualized layer-2 network, a different MAC address is associated with a respective gateway). The system modifies the layer-2 header by swapping the MAC address with another MAC address, which uniquely identifies a gateway in the extended virtualized layer-2 network, in the layer-2 header and forwards the frame with the modified header to the gateway.