VXLAN Tunnel Architecture for Data Center Network Scalability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In large cloud computing scenarios, the number of VXLAN tunnels required between virtual machines increases exponentially, leading to significant resource usage and management challenges.
Innovation Solution
The method involves dividing the network into domains with egress and local VTEP devices, establishing intra-domain and inter-domain VXLAN tunnels, and using MAC address tables to determine the appropriate tunnel interface for packet forwarding, thereby reducing the need for excessive tunnel establishment between VTEP devices across different data centers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VXLAN tunnels are established between every pair of VTEPs to ensure communication between virtual machines, then communication reliability is improved, but device complexity and resource consumption increase exponentially
Solution Approach 1:
The patent divides the network into multiple domains, with each domain containing multiple VTEPs. Within each domain, VTEPs establish VXLAN tunnels only with other VTEPs in the same domain. This segmentation reduces the number of tunnels from O(N^2) in a fully connected network to O(M^2) per domain where M < N, and the total number of domains is much smaller than the total number of VTEPs. The domain architecture effectively segments the tunnel management complexity while maintaining communication reliability through inter-domain routing.
2Adaptability or versatility
If VXLAN tunnels are established between every pair of VTEPs to ensure communication between virtual machines, then communication coverage is improved, but resource consumption increases exponentially
Solution Approach 1:
The network is segmented into multiple domains, reducing resource consumption by limiting tunnel establishment within domains rather than across all VTEPs. The patent achieves this through domain identification in packet forwarding decisions.
Solution Approach 2:
The patent introduces domain egress VTEPs as intermediary devices that handle packet forwarding between domains. When a packet needs to be forwarded to a VTEP in a different domain, the source domain's egress VTEP acts as an intermediary to route the packet through inter-domain connections. This intermediary mechanism enables communication coverage across all domains while avoiding the need for direct tunnels between every pair of VTEPs, thus reducing network resource consumption.
3Adaptability or versatility
If numerous VXLAN tunnels are established to support large numbers of VTEPs, then communication capability is improved, but maintenance overhead increases
Solution Approach 1:
The patent segments the VTEP population into domain-based groups, where each domain manages its own internal tunnels independently. This segmentation reduces maintenance overhead because tunnel establishment, modification, and teardown operations are confined to smaller domain scopes rather than affecting the entire network. The domain architecture isolates maintenance operations, making them easier to manage and troubleshoot.
Solution Approach 2:
Domain egress VTEPs serve as intermediary devices that simplify maintenance by centralizing inter-domain routing logic. These egress VTEPs handle the complexity of cross-domain packet forwarding, allowing regular VTEPs within domains to maintain simpler, more manageable tunnel configurations. The intermediary egress VTEPs absorb the maintenance complexity of inter-domain communications, making overall system maintenance easier.
Data Source
AI summary
An egress VTEP device of a data center receives a first packet sent by a local VTEP device of the data center, through an intra-domain VXLAN tunnel, and sends the first packet to an egress VTEP device on an opposite end of another data center through a corresponding inter-domain VXLAN tunnel. In addition, the egress VTEP device of the data center receives a second packet sent by the egress VTEP devices on an opposite end of another data center, through an inter-domain VXLAN tunnel, and sends the second packet to a local VTEP device of the data center through a corresponding intra-domain VXLAN tunnel.