VXLAN Edge Device Forwarding with Composite MAC-VLAN Key

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing EVPN protocol only allows VMs with the same MAC address but belonging to different VLANs to access the same VXLAN, leading to isolation issues where VMs with the same MAC address but different VLANs cannot access the same VXLAN.

Innovation Solution

The solution involves an edge device that processes messages by determining the target network tag and destination address, using a correspondence relationship to identify the correct outbound interface for forwarding messages, thereby enabling access for VMs with the same MAC address but different VLANs to the same VXLAN.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If MAC-based forwarding is used in traditional VXLAN, then forwarding simplicity is maintained, but VMs with the same MAC address but different VLANs cannot access the same VXLAN

Engineering Contradiction:
Improveaccess capability for VMs with same MAC address but different VLANsVSAvoidforwarding table structure
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent segments the forwarding key into two independent parts: MAC address and VLAN ID. Instead of using only MAC address for forwarding lookup, the system now uses a combination of MAC address and VLAN ID as the composite key. This segmentation allows multiple VMs with the same MAC address but different VLAN IDs to be distinguished and forwarded to appropriate VXLAN instances, resolving the access limitation while maintaining structured forwarding table organization.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If only MAC address is used for forwarding lookup, then lookup speed is fast, but inter-VLAN access within same VXLAN is blocked

Engineering Contradiction:
Improveinter-VLAN access capabilityVSAvoidforwarding table entry requirements
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The patent merges MAC address and VLAN ID into a composite forwarding key. By combining these two elements, the system enables inter-VLAN access within the same VXLAN while maintaining efficient lookup capabilities. The merged key structure allows the forwarding table to distinguish between different VLAN contexts for the same MAC address, enabling versatile access patterns without requiring separate forwarding entries for each VLAN-MAC combination.

Inventive Principle:
Principle #5Merging (Combining)

3Adaptability or versatility

If traditional VXLAN forwarding is used, then implementation simplicity is maintained, but support for multiple VLANs with same MAC address is limited

Engineering Contradiction:
Improvemulti-VLAN supportVSAvoidforwarding logic
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent applies local quality by making the forwarding table lookup process selective based on the specific forwarding scenario. The system maintains the simple MAC-based forwarding for cases where it suffices, while introducing VLAN ID consideration only when needed for distinguishing multiple VMs with the same MAC address. This localized enhancement to the forwarding logic provides multi-VLAN support without making the entire forwarding system complex.

Inventive Principle:
Principle #3Local quality

Data Source

PatentEP3544240B1Data processing
Publication Date: 2023.03.29 NEW H3C TECH CO LTD
  • EP3544240B1 patent drawingFigure 1~2
  • EP3544240B1 patent drawingFigure 3~4
  • EP3544240B1 patent drawingFigure 5~6

AI summary

Disclosed are a data processing method and a corresponding data processing device. The method is applicable to a first edge device of a virtual extensible local area network, and comprises: receiving a target message, and determining a target network tag and a target destination address of the target message; determining a target outbound interface corresponding to the target message based on a result of matching the target network tag and the target destination address with a locally stored correspondence relationship of a network tag, a destination address and an outbound interface; sending the target message through the target outbound interface. In an example of the present disclosure, a message is forwarded by matching a destination address and a network tag, avoiding forwarding a message as long as the destination address is hit and solving the problem that VMs with the same MAC address but belonging to different VLANs cannot gain access to one VXLAN.