Distribution of reachability information in data virtual private networks

1. For use in a data network comprising a plurality of nodes capable of communicating with each other, each node coupled to at least one unit of a customer network, a method of providing a plurality of Virtual Private Networks (VPNs) comprising the steps of:

maintaining in a first node a VPN reachability information (VRI) database comprising, for each VPN in which at least one unit coupled to the first node is participating, a send list of nodes coupled to at least one unit participating in that VPN;

receiving a request to establish participation by a first unit coupled to the first node in a specified VPN; and

if the VRI database does not contain a send list for the specified VPN:

transmitting VRI for the first unit to all other nodes in the data network; and

requesting from all other nodes in the data network transmission of VPN reachability information for all units participating in the specified VPN;

otherwise transmitting VRI for the first unit only to nodes on the send list for the specified VPN.

2. The method of claim 1 , wherein the VRI database further comprises, for each VPN in which at least one unit coupled to the first node is participating, a list of units participating in that VPN.

3. The method of claim 1 , further comprising the steps of:

at the first node, receiving from a second node in the data network VRI for a second unit coupled to the second node, the received VRI identifying a VPN in which the second unit is participating; and

if the first node is coupled to a unit participating in the identified VPN, storing at least a part of the received VRI in the VRI database.

4. The method of claim 3 , wherein the step of storing comprises the step of adding the second node to the send list for the identified VPN.

5. The method of claim 4 , wherein:

the VRI database further comprises, for each VPN in which at least one unit coupled to the first node is participating, a list of units participating in that VPN;

the received VRI identifies the second unit; and

the step of storing further comprises the step of adding the identified second unit to the list of units participating in the identified VPN.

6. The method of claim 1 , wherein the data network comprises at least one non-solicit-capable node that is not capable of maintaining a VRI database, and wherein the VRI database further comprises, for each VPN in which at least one unit coupled to a non-solicit-capable node is participating, a send list of non-solicit-capable nodes coupled to at least one unit participating in that VPN.

7. The method of claim 1 , wherein the data network further comprises a route reflector coupled to a plurality of client peer nodes and at least one non-client peer node, the method further comprising the steps of:

maintaining in the route repeater, for each VPN in which at least one unit coupled to a client peer node is participating, a route repeater send list of client peer nodes coupled to at least one unit participating in that VPN;

at the route repeater, receiving from a first client peer node VRI for a second unit coupled to the first client peer node, the received VRI identifying a VPN in which the second unit is participating;

reflecting the VRI to all client peer nodes on the route repeater send list for the identified VPN that are not the first client peer node; and

reflecting the VRI to all non-client peer nodes.

8. The method of claim 7 , further comprising the steps of:

at the route repeater, receiving from a non-client peer node VRI identifying a VPN; and

reflecting the VRI to all client peer nodes on the route repeater send list for the identified VPN.

9. The method of claim 7 , wherein the route reflector is coupled to an external peer node, the method further comprising the steps of:

at the route repeater, receiving from the external peer node VRI identifying a VPN;

reflecting the VRI to all client peers on the route repeater send list for the identified VPN; and

reflecting the VRI to all non-client peers.

10. The method of claim 9 , wherein the reflected VRI comprises a best path selected by the route reflector.

11. The method of claim 1 , wherein the data network further comprises a network control unit, the method further comprising the step of transmitting from the network control unit the request to establish participation by the first unit in the specified VPN.

12. A data network providing a plurality of Virtual Private Networks (VPNs), comprising:

a plurality of nodes capable of communicating with each other, each node coupled to at least one unit of a customer network;

wherein a first node is capable of:

maintaining a VPN reachability information (VRI) database comprising, for each VPN in which at least one unit coupled to the first node is participating, a send list of nodes coupled to at least one unit participating in that VPN;

receiving a request to establish participation by a first unit coupled to the first node in a specified VPN; and

if the VRI database does not contain a send list for the specified VPN:

transmitting VRI for the first unit to all other nodes in the data network; and

requesting from all other nodes in the data network transmission of VPN reachability information for all units participating in the specified VPN;

otherwise transmitting VRI for the first unit only to nodes on the send list for the specified VPN.

13. The data network of claim 12 , wherein the VRI database further comprises, for each VPN in which at least one unit coupled to the first node is participating, a list of units participating in that VPN.

14. The data network of claim 12 , wherein the first node is further capable of:

receiving from a second node in the data network VRI for a second unit coupled to the second node, the received VRI identifying a VPN in which the second unit is participating; and

if the first node is coupled to a unit participating in the identified VPN, storing at least a part of the received VRI in the VRI database.

15. The data network of claim 14 , wherein the first node is capable of storing at least a part of the received VRI in the VRI database by adding the second node to the send list for the identified VPN.

16. The data network of claim 15 , wherein

the VRI database further comprises, for each VPN in which at least one unit coupled to the first node is participating, a list of units participating in that VPN;

the received VRI identifies the second unit; and

the first node is capable of storing at least a part of the received VRI in the VRI database by adding the identified second unit to the list of units participating in the identified VPN.

17. The data network of claim 12 , further comprising:

at least one non-solicit-capable node that is not capable of maintaining a VRI database;

wherein the VRI database further comprises, for each VPN in which at least one unit coupled to a non-solicit-capable node is participating, a send list of non-solicit-capable nodes coupled to at least one unit participating in that VPN.

18. The data network of claim 12 , further comprising:

a route reflector coupled to a plurality of client peer nodes and at least one non-client peer node;

wherein the route reflector is capable of:

maintaining, for each VPN in which at least one unit coupled to a client peer node is participating, a route repeater send list of client peer nodes coupled to at least one unit participating in that VPN;

receiving from a first client peer node VRI for a second unit coupled to the first client peer node, the received VRI identifying a VPN in which the second unit is participating;

reflecting the VRI to all client peer nodes on the route repeater send list for the identified VPN that are not the first client peer node; and

reflecting the VRI to all non-client peer nodes.

19. The data network of claim 18 , wherein the route repeater is further capable of:

receiving from a non-client peer node second VRI identifying a second VPN; and

reflecting the second VRI to all client peer nodes on the route repeater send list for the second identified VPN.

20. The data network of claim 19 , wherein the route reflector is coupled to an external peer node, and wherein the route repeater is further capable of:

receiving from the external peer node third VRI identifying a third VPN;

reflecting the third VRI to all client peers on the route repeater send list for the third identified VPN; and

reflecting the third VRI to all non-client peers.

21. The data network of claim 20 , wherein the reflected third VRI comprises a best path selected by the route reflector.

22. The data network of claim 12 , further comprising a network control unit, wherein the network control unit is capable of transmitting the request to establish participation by the first unit in the specified VPN.

23. For use in a first node in a data network, the first node capable of communicating with other nodes in the network and coupled to at least one unit of a customer network, computer-executable instructions stored on a computer-readable storage medium for providing a plurality of Virtual Privacy Networks (VPNs), the computer-executable instructions comprising the steps of:

maintaining a VPN reachability information (VRI) database comprising, for each VPN in which at least one unit coupled to the first node is participating, a send list of nodes coupled to at least one unit participating in that VPN;

receiving a request to establish participation by a first unit coupled to the first node in a specified VPN; and

if the VRI database does not contain a send list for the specified VPN:

transmitting VRI for the first unit to all other nodes in the data network; and

requesting from all other nodes in the data network transmission of VPN reachability information for all units participating in the specified VPN,

otherwise transmitting VRI for the first unit only to nodes on the send list for the specified VPN.

24. The computer-executable instructions stored on the computer-readable storage medium of claim 23 , wherein the VRI database further comprises, for each VPN in which at least one unit coupled to the first node is participating, a list of units participating in that VPN.

25. The computer-executable instructions stored on the computer-readable storage medium of claim 23 , wherein the computer-executable instructions further comprise the steps of:

receiving from a second node in the data network VRI for a second unit coupled to the second node, the received VRI identify 4 ng a VPN in which the second unit is participating; and

if the first node is coupled to a unit participating in the identified VPN, storing at least a part of the received VRI in the VRI database.

26. The computer-executable instructions stored on the computer-readable storage medium of claim 25 , wherein the step of storing comprises the step of adding the second node to the send list for the identified VPN.

27. The computer-executable instructions stored on the computer-readable storage medium of claim 26 , wherein:

the VRI database further comprises, for each VPN in which at least one unit coupled to the first node is participating, a list of units participating in that VPN;

the received VRI identifies the second unit, and

the step of storing further comprises the step of adding the identified second unit to the list of units participating in the identified VPN.

28. The computer-executable instructions stored on the computer-readable storage medium of claim 23 , wherein:

the data network comprises at least one non-solicit-capable node that is not capable of maintaining a VRI database; and

the VRI database further comprises, for each VPN in which at least one unit coupled to a non-solicit-capable node is participating, a send list of non-solicit-capable nodes coupled to at least one unit participating in that VPN.