VTEP MAC Address Replacement for VXLAN Inter-Domain Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
VXLAN encapsulation prevents external routers and switches from routing packets between a Virtual eXtensible Local Area Network (VXLAN) domain and external clients in non-VXLAN domains, as the IP address of virtual machines becomes invisible, leading to communication barriers.
Innovation Solution
A method and apparatus that utilize a VXLAN Tunnel End Point (VTEP) to determine whether a packet is within a VXLAN domain or destined for an external component, replacing the Media Access Control (MAC) address if necessary, without encapsulating or decapsulating the packet, and forwarding it accordingly, using an IP address database to manage IP addresses and facilitate inter-domain communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VXLAN encapsulation is applied to hide VM IP addresses, then MAC address table overflow is mitigated and traffic partitioning is improved, but external routers cannot route packets to VMs in VXLAN domains
Solution Approach 1:
The VTEP acts as an intermediary between the VXLAN domain and external networks. It receives packets from external clients, determines whether to encapsulate them, and forwards them appropriately. This mediator enables external networks to communicate with VMs without needing to directly see VM IP addresses, resolving the routing problem while maintaining MAC address hiding benefits.
Solution Approach 2:
The patent applies different handling rules for different packet types at the VTEP. For packets destined to external clients, the VTEP replaces the VM's MAC address with its own MAC address in the destination field, allowing external routers to route packets correctly while still hiding the VM's MAC address from external networks. This localized modification enables inter-domain communication without compromising the core VXLAN security model.
2Adaptability or versatility
If VXLAN encapsulation is used to segregate traffic into multiple virtual networks, then traffic partitioning is improved, but packet processing complexity increases for external routing
Solution Approach 1:
The VTEP performs preliminary actions by pre-configuring MAC address replacement rules before packet processing. When a packet arrives from an external client, the VTEP already knows which MAC address replacement is needed based on the destination IP address, so it can quickly determine the correct action without complex real-time analysis. This pre-prepared approach simplifies the packet processing path.
3Reliability
If VXLAN encapsulation hides VM IP addresses, then network security is improved, but external clients cannot send packets to VMs without VXLAN encapsulation
Solution Approach 1:
The VTEP serves as a gateway mediator that translates between the VXLAN internal network protocol and the external network protocol. It receives unencapsulated packets from external clients, determines the appropriate VM, replaces the MAC address, and forwards the packet within the VXLAN domain. This eliminates the need for external clients to understand VXLAN encapsulation while maintaining security.
Solution Approach 2:
The VTEP changes the MAC address parameter in the packet header from the VM's MAC address to the VTEP's MAC address. This parameter modification allows the packet to be routed correctly through external networks while the original VM's MAC address remains hidden from external clients, preserving network security.
Data Source
AI summary
VXLAN inter-domain communications and packet forwarding are supported between a virtual machine (VM) in a Virtual eXtensible Local Area Network (VXLAN) domain and an external client or another domain via a Layer Two (L2)/Layer Three (L3) switch, router, or network. A VXLAN Tunnel End Point (VTEP) coupled to the VM at a server and to the L2/L3 switch, router, or network and associated with the VXLAN domain is configured to implement a method for enabling the VXLAN inter-domain communications. The method includes receiving a packet at the (VTEP), replacing a source or destination Media Access Control (MAC) address in the packet if the packet is part of communications between a VXLAN domain for the VMs and an external component without encapsulating or decapsulating the packet, and forwarding the packet. Alternatively, the VTEP encapsulates or decapsulates an incoming packet if the packet is part of a VXLAN internal domain communications.