Layer-3 Overlay Gateways for Virtual Machine Tunneling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional layer-2 network architecture struggles to accommodate the dynamic nature of virtual machines, particularly in providing a logical subnet across layer-2 broadcast domains, which limits communication efficiency and scalability in datacenter environments.
Innovation Solution
An overlay gateway system that initiates and terminates overlay tunnels by mapping virtual IP addresses to secondary IP addresses, using shim layers for communication and tunnel encapsulation, supporting multiple virtualization and tunneling mechanisms like VXLAN, GRE, and NVGRE, to facilitate virtual tunneling between physical subnets and maintain tunnel mappings for efficient packet forwarding.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Length of moving object
If conventional layer-2 network architecture is used to connect host machines, then physical reach limitation is imposed on layer-2 broadcast domains, but network segmentation and communication efficiency across domains are improved
Solution Approach 1:
The patent introduces overlay gateways as intermediary devices that establish layer-3 overlay tunnels between layer-2 broadcast domains. These gateways maintain mapping tables that translate virtual IP addresses to physical network addresses, enabling seamless communication across domain boundaries while preserving the illusion of a unified layer-2 network for virtual machines.
Solution Approach 2:
The patent adds a layer-3 overlay dimension on top of the existing layer-2 network architecture. By introducing virtual IP addressing and tunneling protocols (such as VXLAN, GRE, or NVGRE), the system creates a logical network space that transcends physical layer-2 boundaries, allowing virtual machines to communicate as if they were on the same local network regardless of physical location.
2Adaptability or versatility
If switch size and capability are increased to accommodate more traffic and virtual machine migration, then bandwidth and versatility are improved, but device complexity and cost are worsened
Solution Approach 1:
The patent extracts the functions of virtual machine migration awareness and overlay tunnel management from the core switch architecture and relocates them to dedicated overlay gateway devices. This separation allows standard switches to maintain simpler, more cost-effective designs while overlay gateways handle the complex tasks of maintaining virtual-to-physical address mappings and managing tunnel lifecycles.
Solution Approach 2:
The overlay gateway is designed as a multi-functional device that can support multiple tunneling protocols (VXLAN, GRE, NVGRE), handle various virtualization platforms, and provide both layer-2 and layer-3 networking functions. This universal design allows a single gateway architecture to serve diverse networking requirements without requiring specialized hardware for each function.
3Productivity
If overlay tunnels are established across layer-2 broadcast domains, then communication across domains is improved, but mapping maintenance complexity is worsened
Solution Approach 1:
The overlay gateway implements self-service mechanisms by automatically discovering virtual machines, dynamically creating and tearing down overlay tunnels as virtual machines are instantiated or migrated, and autonomously maintaining mapping tables. The gateway monitors network traffic and autonomously updates its forwarding state without requiring manual configuration or intervention, reducing operational complexity despite the sophisticated functionality.
Data Source
AI summary
One embodiment of the present invention provides a computing system. The computing system includes a processor and a computer-readable storage medium for storing instructions. Based on the instructions, the processor operates the computing system as an overlay gateway. The computing system initiates and terminates an overlay tunnel associated with a virtual machine. During operation, the computing system maps a virtual Internet Protocol (IP) address of the virtual machine to a second IP address used to terminate the overlay tunnel based on information received from a configuration system. The computing system then determines an output port for a data packet based on the second IP address. The data packet comprises an inner packet and the destination address of this inner packet corresponds to the virtual IP address.