Transparent network service migration across service devices
Migrating a network service that is currently being performed by a first device to be performed by a second device includes: instructing the second device to notify an upstream network device to forward traffic that is to be serviced by the network service to the second device instead of to the first device, the network service being associated with an Internet Protocol (IP) address; and instructing the first device to migrate the network service to the second device, wherein the migration includes moving or copying state information associated with an existing flow currently serviced by the first device to the second device; the existing flow being an existing flow between a client application and a network application.
1. A method performed by a controller to migrate a network service at a first device to a second device without interrupting traffic flows for which the network service is being performed, the network service associated with a particular Internet Protocol (IP) address, the method comprising:
instructing the first device to migrate the network service to the second device, wherein the migration includes sending, to the second device, state information associated with at least one existing flow currently serviced by the network service at the first device; and
instructing the second device to send a gratuitous address resolution protocol (GARP) message to an upstream network device to associate the particular IP address with a particular network interface of the second device at the upstream network device such that future traffic destined for the particular IP address received at the upstream network device is directed to the particular network interface of the second device,
wherein, after the GARP message is sent by the second device but before the state information for a particular existing flow is sent to the second device, the second device (i) receives a packet belonging to the particular existing flow and (ii) forwards the packet to the first device for processing.
2. The method of claim 1 , wherein prior to the gratuitous ARP being sent, traffic that is associated with a new flow is received by the first device and forwarded by the first device to the second device.
3. The method of claim 1 , wherein the first device and the second device include at least one of a physical device and a virtual device.
4. The method of claim 1 , wherein, after state information for the particular existing flow has been sent to the second device, but before the GARP message is sent;
the first device receives a packet of the particular existing flow; and
the first device forwards the packet to the second device for processing.
5. The method of claim 1 , wherein, before state information for the particular existing flow has been sent to the second device, and before the GARP message is sent;
the first device receives a packet of the particular existing flow; and
the first device performs the network service.
6. A controller system comprising:
one or more processors;
one or more networking interfaces configured to transmit and receive data; and
a non-transitory machine readable medium storing a program for execution by the processing units, the program for migrating a network service at a first device to a second device without interrupting traffic flows for which the network service is being performed, the network service associated with a particular Internet Protocol (IP) address, the program comprising sets of instructions for:
instructing the first device to migrate the network service to the second device, wherein the migration includes sending, to the second device, state information associated with at least one existing flow currently serviced by the network service at the first device; and
instructing the second device to send a gratuitous address resolution protocol (GARP) message to an upstream network device to associate the particular IP address with a particular network interface of the second device at the upstream network device such that future traffic destined for the particular IP address received at the upstream network device is directed to the particular network interface of the second device,
wherein, after the GARP message is sent by the second device but before the state information for a particular existing flow is sent to the second device, the second device (i) receives a packet belonging to the particular existing flow and (ii) forwards the packet to the first device for processing.
7. The controller system of claim 6 , wherein prior to the gratuitous ARP being sent, traffic that is associated with a new flow is received by the first device and forwarded by the first device to the second device.
8. The controller system of claim 6 , wherein the first device and the second device include at least one of a physical device and a virtual device.
9. The controller system of claim 7 , wherein, after state information for the particular existing flow has been sent to the second device, but before the GARP message is sent;
the first device receives a packet of the particular existing flow; and
the first device forwards the packet to the second device for processing.
10. The controller system of claim 6 , wherein, before state information for a particular existing flow has been sent to the second device, and before the GARP message is sent;
the first device receives a packet of the particular existing flow; and
the first device performs the network service.
11. A non-transitory machine readable medium storing a program for execution by a set of processing units, the program for migrating a network service at a first device to a second device without interrupting traffic flows for which the network service is being performed, the network service associated with a particular Internet Protocol (IP) address, the program comprising sets of instructions for:
instructing the first device to migrate the network service to the second device, wherein the migration includes sending, to the second device, state information associated with at least one existing flow currently serviced by the network service at the first device; and
instructing the second device to send a gratuitous address resolution protocol (GARP) message to an upstream network device to associate the particular IP address with a particular network interface of the second device at the upstream network device such that future traffic destined for the particular IP address received at the upstream network device is directed to the particular network interface of the second device,
wherein, after the GARP message is sent by the second device but before the state information for a particular existing flow is sent to the second device, the second device (i) receives a packet belonging to the particular existing flow and (ii) forwards the packet to the first device for processing.
12. The non-transitory machine readable medium of claim 11 , wherein prior to the gratuitous ARP being sent, traffic that is associated with a new flow is received by the first device and forwarded by the first device to the second device.
13. The non-transitory machine readable medium of claim 11 , wherein the first device and the second device include at least one of a physical device and a virtual device.
14. The non-transitory machine readable medium of claim 11 , wherein, after state information for the particular existing flow has been sent to the second device, but before the GARP message is sent;
the first device receives a packet of the particular existing flow, and
the first device forwards the packet to the second device for processing.
15. The non-transitory machine readable medium of claim 11 , wherein, before state information for the particular existing flow has been sent to the second device, and before the GARP message is sent;
the first device receives a packet of the particular existing flow; and
the first device performs the network service.