Virtual network device architecture
View Patent ↗A network device such as a router or a switch is comprised of a control module and a plurality of physical line cards. The control module includes a control processor virtual machine, a plurality of route processing virtual machines and one or more instances of a line card virtual machine. The line card virtual machine operates to receive routing information base update information, to modify the routing information base according to the update information and to update each instance of a plurality of forwarding information bases included on each of the physical line cards.
1. A network device, comprising:
a chassis housing a backplane;
a plurality of physical line cards housed in the chassis and coupled to the backplane, wherein each of the plurality of physical line cards is free of a layer 2 and layer 3 protocol processor, and wherein each of the plurality of physical line cards includes a physical line card database and is configured to receive at least one packet of information through an ingress port; and
a control module housed in the chassis and coupled to the plurality of physical line cards through the backplane, the control module including:
at least one rout processor virtual machine (RP-VM) that is configured to run at least one network protocol to receive network information over a network; and
at least one line card virtual machine (LC-VM) instance including an LC-VM database and one or more agents that are configured to perform layer 2 and layer 3 actions;
wherein the at least one RP-VM is configured to use the network information to derive an LC-VM database update that is provided to the at least one LC-VM instance, and wherein the one or more agents in the at least one LC-VM instance are configured to provide the LC-VM database update to the physical line card database in at least one of the plurality of physical line cards in response to determining that the LC-VM database update has modified the LC-VM database, and wherein the at least one LC-VM instance is configured, in response to the at least one physical line card receiving the at least one packet of information, to perform layer 2 and layer 3 protocol processing for the at least one physical line card using information stored in the physical line card database of the at least one physical line card to process and forward the at least one packet of information through an egress port.
2. The network device of claim 1 , wherein the at least one RP-VM includes a first RP-VM that is configured to run a layer 2 switching protocol and second RP-VM that is configured to run a layer 3 routing protocol.
3. The network device of claim 2 , wherein the LC-VM database includes a layer 2 table and a layer 3 table.
4. The network device of claim 1 , wherein the one or more agents in the at least one LC-VM instance are configured to use the LC-VM database update to update the LC-VM database, and wherein the one or more agents provide the LC-VM database update to the physical line card database in at least one of the plurality of physical lines cards in response to determining that the LC-VM database update has changed the LC-VM database.
5. The network device of claim 1 , wherein the at least one LC-VM instance is a single LC-VM instance.
6. The network device of claim 1 , wherein the at least one LC-VM instance includes a respective LC-VM instance for each of the plurality of physical line cards.
7. The network device of claim 1 , wherein the LC-VM database update includes a shortest path to another network device, a distance to the other network device, access control list information, spanning tree information and network device aggregation information.
8. The network device of claim 1 , wherein the physical line card database in each of the plurality of physical lines cards includes a layer 2 forwarding table and a layer 3 forwarding table.
9. The network device of claim 1 , wherein the control module further includes a control processer virtual machine (CP-VM).
10. The network device of claim 9 , wherein the control module further includes a host kernel and a hypervisor coupled between the plurality of physical line cards and each of the CP-VM, the at least one RP-VM, and the at least one LC-VM instance.
11. A method of operating a network device comprising:
providing a control module coupled to a plurality of physical line cards through a backplane, wherein the control module, the plurality of physical line cards, and the backplane are all housed in a network device chassis, and wherein each of the plurality of physical line cards is free of a layer 2 and layer 3 protocol processor;
receiving network information by at least one route processing virtual machine (RP-VM) provided by the control module;
deriving a database update from the network information using the at least one RP-VM and providing the database update to at least one line card virtual machine (LC-VM) instance provided by the control module;
detecting that the database update provides a modification to an LC-VM database in the at least one LC-VM instance using an agent in the at least one LC-VM instance and, in response, updating a physical line card database in at least one of the plurality of physical line cards with the database update using the agent; and
receiving at least one packet of information through an ingress port on a first physical line card of the plurality of physical line cards and, in response, using, by the at least one LC-VM instance, information stored in the physical line card database of the first physical line card to perform layer 2 and layer 3 protocol processing for the first physical line card to process and forward the at least one packet of information through an egress port on the first physical line card.
12. The method of claim 11 further comprising:
running at least one network protocol using the at least one RP-VM to receive the network information over a network and provide the database update.
13. The method claim 11 wherein the physical line card database in each of the plurality of physical line cards includes a layer 2 forwarding table and a layer 3 forwarding table.
14. The method of claim 11 wherein the LC-VM database includes a layer 2 table and a layer 3 table.
15. The method of claim 11 wherein the at least one LC-VM instance is a single LC-VM instance.
16. The method of claim 11 wherein the at least one LC-VM instance includes a respective LC-VM instance for each of the plurality of physical line cards.
17. The method of claim 11 wherein the LC-VM database update includes a shortest path to another network device, a distance to the other network device, access control list information, spanning tree information and network device aggregation information.
18. The method of claim 11 wherein at least one entry in the LC-VM database includes a network identifier, a cost, a next hop address and a Media Access Control (MAC) address.
19. The method of claim 18 wherein the cost is the number of hops to a destination network device.
20. The method of claim 11 wherein the control module further includes a control processer virtual machine (CP-VM).
21. The method of claim 20 wherein the control module further includes a host kernel and a hypervisor coupled between the plurality of physical line cards and each of the CP-VM, the at least one RP-VM, and the at least one LC-VM instance.