Software-defined multi-network-segment gateway for scalable cloud routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems face challenges in efficiently managing large numbers of end-to-end network segments across cloud provider networks, requiring extensive resources and complex configurations, especially when combining customer-premise and cloud-based resources.
Innovation Solution
The implementation of a software-defined multi-network-segment gateway (MNSG) managed by a cloud provider network, which uses route signaling nodes, data plane nodes, and control plane nodes to establish and manage scalable, logically isolated network segments through labeled routing information and encapsulation protocols, reducing resource requirements and enabling flexible network configurations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If traditional gateway systems are used to manage network segments, then network connectivity can be established, but the computational and memory resources required increase significantly with the number of network segments
Solution Approach 1:
The gateway is divided into multiple data plane nodes distributed across different availability zones, with each node handling a subset of network segments. This segmentation allows the system to scale horizontally by adding nodes rather than increasing the capacity of individual nodes, thereby managing computational and memory resources more efficiently as the number of network segments grows.
Solution Approach 2:
The system transitions from a single centralized gateway to a distributed multi-node gateway architecture, adding the dimension of spatial distribution across availability zones. This dimensional change enables parallel processing of routing decisions and reduces the resource burden on any single node, allowing efficient management of large numbers of network segments.
2Adaptability or versatility
If a single gateway manages all network segments, then configuration is simplified, but scalability is limited and single point of failure risk increases
Solution Approach 1:
The gateway functionality is segmented across multiple data plane nodes, each managing a subset of network segments. This segmentation enables independent scaling of individual nodes and allows the system to accommodate growing numbers of network segments without requiring a complete redesign of the gateway architecture.
Solution Approach 2:
Each data plane node is designed to be universally capable of managing any network segment through standardization of interfaces and protocols. This multi-functionality allows nodes to be dynamically assigned to different segments as needed, providing scalability while maintaining manageable complexity through uniform design patterns.
3Measurement precision
If extensive routing information is exchanged for each network segment, then routing accuracy is improved, but administrative overhead and configuration complexity increase
Solution Approach 1:
Multiple routing information exchange sessions are merged into a single session between the gateway and the customer premises router. This single session carries routing information for all network segments simultaneously, reducing the total amount of administrative overhead and configuration complexity while maintaining accurate routing information through standardized routing protocols.
Solution Approach 2:
The routing information exchange protocol is designed to be universally applicable across all network segments, using a single standardized session type. This universality eliminates the need for separate configuration procedures for each segment, reducing administrative overhead while ensuring consistent and accurate routing information is exchanged for all segments.
Data Source
AI summary
During a communication session established with a customer-premise routing information source, a route signaling node of a multi-network-segment gateway of a cloud provider network obtains respective sets of labeled routing information pertaining to multiple customer-side network segments of a customer. The route signaling node propagates the routing information to data plane nodes of the gateway. The data plane nodes utilize the routing information to forward data packets to destinations associated with particular customer-side network segments.


