Encoding end-to-end tenant reachability information in border gateway protocol (BGP) communities
Techniques for using global virtual network instance (VNI) labels in a multi-domain network to route network data with a multi-tenant network overlay are described herein. A routing device provisioned in a network domain of the multi-domain network may register with a service discovery system of the network domain for use of network configuration data to establish routes through the multi-domain network with network nodes. Each network domain of the multi-domain network may include an application programming interface (API) server for processing API requests to make changes to configurations of a network domain. A border gateway protocol (BGP) large community may be utilized to encode global VNI labels, network addresses, local next hop nodes, and/or additional network information and sent to routing devices provisioned in separate network domains. A service chain may be signaled by global VNI labels to route network traffic through various services prior to reaching a destination endpoint.
1. A method comprising:
determining, by a first router of a first network domain associated with a multi-domain network, that a first tenant node is associated with the first router;
generating a first border gateway protocol (BGP) large community for the first tenant node;
encoding, into a first portion of the first BGP large community, a first global virtual network instance (VNI) label identifying the first tenant node;
encoding, into a second portion of the first BGP large community, a first address of a first tunnel endpoint associated with the first router;
generating a BGP advertisement packet including at least the first BGP large community encoded with the first global VNI label and the first address; and
sending the first BGP advertisement packet to a second network domain associated with the multi-domain network.
2. The method of claim 1 , wherein the BGP advertisement packet further includes one or more second BGP large communities associated with one or more second tenant nodes that are associated with the first router, wherein the one or more second BGP large communities are encoded with one or more second global VNI labels associated with the one or more second tenant nodes and the first address.
3. The method of claim 1 , wherein the multi-domain network is a virtual network, and the method further comprising encoding, into a third portion of the first BGP large community, an indication of a VNI type of the virtual network.
4. The method of claim 3 , wherein the VNI type indicates that the address of the first tunnel endpoint includes an indication of an Internet Protocol version 6 (IPv6) address.
5. The method of claim 1 , further comprising:
receiving, from a second router of the second network domain, a second BGP advertisement packet including a second BGP large community; and
storing, in a database associated with the first router, the second BGP large community in association with the second router of the second network domain.
6. The method of claim 5 , further comprising:
determining, based at least in part on the second BGP large community, a second address of a second tunnel endpoint associated with the second router; and
establishing a network tunnel connecting the first tunnel endpoint to the second tunnel endpoint.
7. The method of claim 6 , further comprising at least one of:
routing first data from the first tunnel endpoint and to the second tunnel endpoint based at least in part on the network tunnel; and
routing second data to the first tunnel endpoint and from the second tunnel endpoint based at least in part on the network tunnel.
8. A system comprising:
one or more processors; and
one or more computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
determining, by a first router of a first network domain associated with a multi-domain network, that a first tenant node is associated with the first router;
generating a first border gateway protocol (BGP) advertisement packet including a first BGP large community for the first tenant node;
encoding, into a first portion of the first BGP large community, a first global virtual network instance (VNI) label associated with identifying the first tenant node;
encoding, into a second portion of the first BGP large community, a first address of a first tunnel endpoint associated with the first router;
generating a BGP advertisement packet including at least the first BGP large community encoded with the first global VNI label and the first address; and
sending the first BGP advertisement packet to a second network domain associated with the multi-domain network.
9. The system of claim 8 , wherein the first address of the first tunnel endpoint is an Internet Protocol version 4 (IPv4) address.
10. The system of claim 8 , wherein the multi-domain network is a virtual network, and the operations further comprising encoding, into a third portion of the first BGP large community, an indication of a VNI type of the virtual network.
11. The system of claim 10 , wherein the VNI type indicates that the address of the first tunnel endpoint includes an indication of an Internet Protocol version 6 (IPv6) address.
12. The system of claim 8 , the operations further comprising:
receiving, from a second router of the second network domain, a second BGP advertisement packet including a second BGP large community; and
storing, in a database associated with the first router, the second BGP large community in association with the second router of the second network domain.
13. The system of claim 12 , the operations further comprising:
determining, based at least in part on the second BGP large community, a second address of a second tunnel endpoint associated with the second router; and
establishing a network tunnel connecting the first tunnel endpoint to the second tunnel endpoint.
14. The system of claim 13 , wherein the first global VNI label includes at least one of:
a global multiprotocol label switching (MPLS) virtual private network (VPN) label;
a global virtual extensible local area network (VXLAN) label; or
a global generic network virtualization encapsulation (GENEVE) label.
15. A method comprising:
receiving, at a first router of a first network domain of a multi-domain network and from a second router of a second network domain of the multi-domain network, a first border gateway protocol (BGP) advertisement packet including BGP large communities associated with tenant nodes of the second network domain;
identifying a first BGP large community of the BGP large communities included in the BGP advertisement packet, wherein the BGP advertisement packet includes one or more second BGP large communities;
decoding, from a first portion of the first BGP large community, a first global virtual network instance (VNI) label identifying a first tenant node associated with the second router;
decoding, from a second portion of the first BGP large community, a first address of a first tunnel endpoint associated with the second router; and
storing, in a database associated with the first router, a mapping between the first global VNI label identifying the first tenant node and the first address of the first tunnel endpoint.
16. The method of claim 15 , wherein the first address of the first tunnel endpoint is an Internet Protocol version 4 (IPv4) address.
17. The method of claim 15 , wherein the multi-domain network is a virtual network, and the method further comprising decoding, from a third portion of the first BGP large community, an indication of a VNI type of the virtual network.
18. The method of claim 15 , wherein the multi-domain network is a virtual network, and the method further comprising decoding, from a third portion of the first BGP large community, an indication of a VNI type of the virtual network, the VNI type indicating that the address of the first tunnel endpoint includes an indication of an Internet Protocol version 6 (IPv6) address.
19. The method of claim 15 , further comprising:
determining that a second tenant node is associated with the first router;
generating a second BGP large community for the second tenant node;
encoding, into a first portion of the second BGP large community, a second global VNI label identifying the second tenant node associated with the first router;
encoding, into a second portion of the second BGP large community, a second address of a second tunnel endpoint associated with the first router;
generating a second BGP advertisement packet including at least the second BGP large community encoded with the second global VNI label and the second address; and
sending the second BGP advertisement packet to the second network domain associated with the multi-domain network.
20. The method of claim 19 , further comprising:
receiving, at the first router and from the second tenant node of the first network domain, a request to send a data packet to the first tenant node of the second network domain;
determining, by the first router and based at least in part on the mapping in the database, that the first tenant node is associated with the first global VNI label and the first address of the first tunnel endpoint;
determining, by the first router and based at least in part on the mapping in the database, a route for sending the data packet from the second tenant node to the first tenant node; and
sending the data packet from the first router and to the second router based at least in part on the route.