Tagging virtual overlay packets in a virtual networking system
View Patent ↗Embodiments of the invention provide a method for packet distribution in a virtual networking system comprising multiple virtual networks interconnected over an underlying layer network, wherein each virtual network comprises one or more computing nodes. The method comprises, for each virtual network, sending at least one outgoing packet targeting a computing node at a different virtual network, and receiving at least one incoming packet targeting a computing node of the virtual network. Each packet has a corresponding virtual networking tag that includes routing information identifying a destination virtual network for the packet.
1. A method for packet distribution in a virtual networking system comprising at least a first virtual network and a second virtual network, the method comprising:
at a first virtual switch for the first virtual network:
maintaining information mapping each virtual switch of the virtual networking system to a corresponding virtual network identifier (VNID) for a virtual network that includes the virtual switch;
receiving, from a virtual machine of the first virtual network, an outgoing packet targeting a different virtual machine of the second virtual network; and
based on the information maintained, tagging the outgoing packet with a first extended virtual networking tag comprising a VNID for the second virtual network, wherein the outgoing packet is encapsulated with an overlay header based on the first extended virtual networking tag before the outgoing packet is distributed to the second virtual network.
2. The method of claim 1 , further comprising:
at the first virtual switch for the first virtual network:
receiving, via an underlying layer network interconnecting the first virtual network and the second virtual network, an incoming packet tagged with a second extended virtual networking tag comprising a VNID for the first virtual network; and
forwarding the incoming packet to a target virtual machine of the first virtual network based on the second extended virtual networking tag.
3. The method of claim 2 , wherein each extended virtual networking tag comprises an extended 802.1Q virtual local area network (VLAN) tag including a 24-bit VNID.
4. The method of claim 3 , wherein each virtual switch of the virtual networking system supports address independence between different virtual networks of the virtual networking system.
5. The method of claim 4 , wherein different virtual machines, of different virtual networks of the virtual networking system, have the same Internet Protocol (IP) address and media access control (MAC) address.
6. The method of claim 4 , wherein different virtual machines, of the same virtual network of the virtual networking system, are deployed on different physical hosts located in different physical subnets.
7. The method of claim 4 , wherein different virtual machines, of different virtual networks of the virtual networking system, are deployed on the same physical host.
8. The method of claim 3 , wherein a network address for a virtual machine of the virtual networking system remains the same if the virtual machine is migrated from one virtual network of the virtual networking system to another virtual network of the virtual networking system.
9. A system for packet distribution in a virtual networking system comprising at least a first virtual network and a second virtual network, comprising:
at least one processor; and
a non-transitory processor-readable memory device storing instructions that when executed by the at least one processor causes the at least one processor to perform operations including:
at a first virtual switch for the first virtual network:
maintaining information mapping each virtual switch of the virtual networking system to a corresponding virtual network identifier (VNID) for a virtual network that includes the virtual switch;
receiving, from a virtual machine of the first virtual network, an outgoing packet targeting a different virtual machine of the second virtual network; and
based on the information maintained, tagging the outgoing packet with a first extended virtual networking tag comprising a VNID for the second virtual network, wherein the outgoing packet is encapsulated with an overlay header based on the first extended virtual networking tag before the outgoing packet is distributed to the second virtual network.
10. The system of claim 9 , further comprising:
at the first virtual switch for the first virtual network:
receiving, via an underlying layer network interconnecting the first virtual network and the second virtual network, an incoming packet tagged with a second extended virtual networking tag comprising a VNID for the first virtual network; and
forwarding the incoming packet to a target virtual machine of the first virtual network based on the second extended virtual networking tag.
11. The system of claim 10 , wherein each extended virtual networking tag comprises an extended 802.1Q virtual local area network (VLAN) tag including a 24-bit VNID.
12. The system of claim 11 , wherein each virtual switch of the virtual networking
system supports address independence between different virtual networks of the virtual networking system.
13. The system of claim 12 , wherein different virtual machines, of different virtual networks of the virtual networking system, have the same Internet Protocol (IP) address and media access control (MAC) address.
14. The system of claim 12 , wherein different virtual machines, of the same virtual network of the virtual networking system, are deployed on different physical hosts located in different physical subnets.
15. The system of claim 12 , wherein different virtual machines, of different virtual networks of the virtual networking system, are deployed on the same physical host.
16. The system of claim 11 , wherein a network address for a virtual machine of the virtual networking system remains the same if the virtual machine is migrated from one virtual network of the virtual networking system to another virtual network of the virtual networking system.
17. A non-transitory computer-readable medium storing instructions that, when executed by at least one processor of a machine, cause the machine to perform operations for packet distribution in a virtual networking system comprising at least a first virtual network and a second virtual network, the operations comprising:
at a first virtual switch for the first virtual network:
maintaining information mapping each virtual switch of the virtual networking system to a corresponding virtual network identifier (VNID) for a virtual network that includes the virtual switch;
receiving, from a virtual machine of the first virtual network, an outgoing packet targeting a different virtual machine of the second virtual network; and
based on the information maintained, tagging the outgoing packet with a first extended virtual networking tag comprising a VNID for the second virtual network, wherein the outgoing packet is encapsulated with an overlay header based on the first extended virtual networking tag before the outgoing packet is distributed to the second virtual network.
18. The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise:
at the first virtual switch for the first virtual network:
receiving, via an underlying layer network interconnecting the first virtual network and the second virtual network, an incoming packet tagged with a second extended virtual networking tag comprising a VNID for the first virtual network; and
forwarding the incoming packet to a target virtual machine of the first virtual network based on the second extended virtual networking tag.
19. The non-transitory computer-readable medium of claim 18 , wherein each extended virtual networking tag comprises an extended 802.1Q virtual local area network (VLAN) tag including a 24-bit VNID.
20. The non-transitory computer-readable medium of claim 19 , wherein:
each virtual switch of the virtual networking system supports address independence between different virtual networks of the virtual networking system; and
each virtual switch of the virtual networking system supports migration of a virtual machine of the virtual networking system without affecting a network address for the virtual machine.