VXLAN Gateway Forwarding Entries Using Exclusive Addresses
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a Virtual Extensible Local Area Network (VXLAN) data center, hosts can only directly communicate with one layer 3 gateway device, limiting communication flexibility due to shared virtual addresses and identifiers among layer 3 gateway devices, leading to misrouting of packets intended for specific gateway devices.
Innovation Solution
A method for establishing forwarding entries on layer 3 gateway devices using exclusive real addresses and identifiers, allowing hosts to directly communicate with multiple layer 3 gateway devices independently, without relying on a controller for forwarding entry establishment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple layer 3 gateway devices share a virtual address and virtual identifier, then communication flexibility is improved, but packet routing accuracy deteriorates causing misrouting
Solution Approach 1:
The patent segments the address space by introducing real addresses (real IP, real MAC, real VTEP) distinct from virtual addresses. Each layer 3 gateway device is uniquely identified by its real address, while maintaining shared virtual addresses for flexibility. This segmentation resolves the contradiction by enabling precise routing through real addresses while preserving communication flexibility through virtual address sharing.
Solution Approach 2:
The patent introduces real addresses as an intermediary layer between the virtual address space and physical device identification. The real address acts as a mediator that enables precise packet routing to specific gateway devices while allowing multiple devices to share virtual addresses, thus resolving the routing accuracy issue without sacrificing communication flexibility.
2Ease of operation
If forwarding entries are established using shared virtual addresses, then communication between hosts and gateway devices is enabled, but packet misrouting occurs to wrong gateway devices
Solution Approach 1:
The forwarding entry is segmented into two parts: virtual address information for communication establishment and real address information for accurate packet routing. The real IP address, real MAC address, and real VTEP identifier in the forwarding entry enable precise packet delivery to the correct gateway device, while the virtual address maintains ease of communication establishment.
Solution Approach 2:
Different parts of the forwarding entry have different qualities: the virtual address portion enables general communication establishment, while the real address portion provides localized precise routing information. This local quality differentiation allows the system to achieve both ease of operation and reliability simultaneously.
3Adaptability or versatility
If layer 3 gateway devices use shared virtual addresses, then communication flexibility is improved, but device identification precision deteriorates
Solution Approach 1:
The device identification system is segmented into virtual identification (for flexible communication) and real identification (for precise device distinction). Each layer 3 gateway device has unique real IP, real MAC, and real VTEP identifiers that enable precise identification, while shared virtual addresses provide communication flexibility.
Solution Approach 2:
The patent creates a copy mechanism where real address information is copied into the forwarding entry alongside virtual address information. This copying ensures that while virtual addresses provide flexibility, the copied real address information maintains precise device identification and routing capability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the present invention provide a forwarding entry establishment method for a VXLAN. A data center of the VXLAN includes a first layer 3 gateway device, a second layer 3 gateway device, and a first layer 2 gateway device separately connected to the first layer 3 gateway device and the second layer 3 gateway device. The first layer 2 gateway device is connected to a first host. The first layer 3 gateway device and the second layer 3 gateway have a shared IP address, a shared MAC address, and a shared VTEP identifier. The first layer 3 gateway device and the second layer 3 gateway each have an exclusive IP address, an exclusive MAC address, and an exclusive VTEP identifier. The method includes: establishing, by the first layer 3 gateway device by using the exclusive P address, the exclusive MAC address, and the exclusive VTEP identifier, a forwarding entry used for communication with the first host. In the embodiments of this application, when one host directly communicates with a plurality of layer 3 gateway devices, a forwarding entry used for communication between the layer 3 gateway devices and the host is correctly established.