Telemetry Agent Grouping ECMP Route-Based VPNs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In software-defined data centers, managing and identifying equal cost multipath (ECMP)-enabled route-based virtual private networks (RBVPNs) is challenging due to the lack of awareness of underlying route information, making it difficult to determine if a specific ECMP-enabled RBVPN is configured, especially in multi-cloud systems.
Innovation Solution
A method involving a telemetry agent in an edge services gateway that learns routes, identifies destination networks and next hops, maps virtual tunnel interfaces to VPN sessions, groups ECMP-enabled RBVPN sessions, and sends telemetry data to a centralized database for dynamic management and configuration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If VPN sessions are managed without awareness of underlying route information, then device complexity is reduced, but the ability to identify and manage ECMP-enabled RBVPNs deteriorates
Solution Approach 1:
The patent introduces a telemetry agent as an intermediary component that collects route information from the routing table and correlates it with VPN session data. This agent acts as a mediator between the routing layer and VPN management layer, enabling ECMP-enabled RBVPN identification without adding complexity to the core VPN session management mechanism.
2Reliability
If multiple ECMP-enabled RBVPNs are established for peer reachability, then network reliability is improved, but the difficulty of detecting and measuring specific ECMP-enabled RBVPNs worsens
Solution Approach 1:
The patent implements a feedback mechanism where the telemetry agent continuously collects route information from the routing table, correlates it with VPN session data, and provides visibility into which VPN sessions are associated with ECMP routes. This feedback loop enables network operators to identify and monitor specific ECMP-enabled RBVPNs while maintaining multiple paths for improved reliability.
3Difficulty of detecting and measuring
If route information is integrated with VPN session configurations, then ECMP-enabled RBVPN identification is improved, but device complexity increases
Solution Approach 1:
The patent segments the system into distinct functional components: the routing layer that handles route information, the VPN session management layer that handles VPN configurations, and the telemetry agent layer that collects and correlates data from both layers. This segmentation allows route information integration for ECMP identification without increasing the complexity of core VPN session configurations.
Data Source
AI summary
An example method of identifying an equal cost multipath (ECMP)-enabled route-based virtual private networks (RBVPN) in a virtualized computing system, comprises: obtaining, at a telemetry agent executing in an edge server of a data center, learned routes; identifying, by the telemetry agent from the routes, a destination network and a plurality of next hops associated therewith and a plurality of virtual tunnel interfaces (VTIs); identifying, by the telemetry agent for each of the plurality of VTIs, an associated VPN session; grouping, by the telemetry agent, the VPN sessions identified as associated with the plurality of VTIs into an ECMP-enabled RBVPN; adding, by the telemetry agent, a description of the ECMP-enabled RBVPN to telemetry data; and sending, by the telemetry agent, the telemetry data to a telemetry service.