STATEFUL MANAGEMENT OF STATE INFORMATION ACROSS EDGE GATEWAYS
Described herein are systems, methods, and software to manage state information and failover between edge gateways (edges) in a computing environment. In one example, a first edge receives state information associated with one or more logical routers on a second edge. The first edge further identifies a failure in association with the second edge and, in response to the failure, make one or more logical routers available in the first edge to operate in place of the one or more logical routers in the second edge based on the state information.
1 . A method comprising:
in a first edge gateway having a first logical router in an active state and a second logical router in a standby state, receiving state information associated with a third logical router in an active state from a second edge gateway;
in the first edge gateway, identifying a failure in association with the second edge gateway;
in the first edge gateway and in response to the failure, changing the second logical router to an active state to operate in place of the third logical router based on the state information; and
in the first edge gateway, maintaining second state information for the first logical router and third state information for the second logical router.
2 . The method of claim 1 , wherein the state information comprises at least firewall state information.
3 . The method of claim 1 , wherein the state information comprises IPsec state information.
4 . The method of claim 1 , wherein changing the second logical router to an active state to operate in place of the third logical router based on the state information comprises advertising, for the second logical router, at least one IP address previously used to address the third logical router.
5 . The method of claim 1 further comprising:
in the first edge gateway, identifying that the second edge gateway is available;
in the first edge gateway and in response to identifying that the second edge gateway is available, communicating the third state information to the second edge gateway;
in the second edge gateway, receiving the third state information;
in response to receiving the third state information and in the second edge gateway, setting the third logical router to an active state to operate in place of the second logical router based on the third state information.
6 . The method of claim 5 further comprising, in response to communicating the third state information to the second edge gateway, setting the second logical router to a standby state.
7 . The method of claim 1 , wherein identifying the failure in association with the second edge gateway comprises identifying that the second edge gateway is unresponsive to a health check message.
8 . The method of claim 1 , wherein the first logical router, the second logical router, and the third logical router comprise tier-0 router or tier-1 logical routers.
9 . The method of claim 1 further comprising:
in the first edge gateway, communicating the second state information associated with the first logical router to the second edge gateway, wherein the second edge gateway includes a fourth logical router in a standby state for the first logical router.
10 . A computing apparatus comprising:
a storage system;
a processing system operatively coupled to the storage system; and
program instructions stored on the storage system that, when executed by the processing system, direct the computing apparatus to:
in a first edge gateway having a first logical router in an active state and a second logical router in a standby state, receive state information associated with a third logical router in an active state from a second edge gateway;
in the first edge gateway, identify a failure in association with the second edge gateway;
in the first edge gateway and in response to the failure, change the second logical router to an active state to operate in place of the third logical router based on the state information; and
in the first edge gateway, maintain second state information for the first logical router and third state information for the second logical router.
11 . The computing apparatus of claim 10 , wherein the state information comprises at least firewall state information.
12 . The computing apparatus of claim 10 , wherein the state information comprises IPsec state information.
13 . The computing apparatus of claim 10 , wherein changing the second logical router to an active state to operate in place of the third logical router based on the state information comprises advertising, for the second logical router, at least one IP address previously used to address the third logical router.
14 . The computing apparatus of claim 10 , wherein identifying the failure in association with the second edge gateway comprises identifying that the second edge gateway is unresponsive to a health check message.
15 . The computing apparatus of claim 10 , wherein the first logical router, the second logical router, and the third logical router comprise tier-0 router or tier-1 logical routers.
16 . The computing apparatus of claim 10 , wherein the program instructions further direct the computing apparatus to:
in the first edge gateway, identify that the second edge gateway is available;
in the first edge gateway and in response to identifying that the second edge gateway is available, communicate the third state information to the second edge gateway;
in the second edge gateway, receive the third state information;
in response to receiving the third state information and in the second edge gateway, set the third logical router to an active state to operate in place of the second logical router based on the third state information.
17 . The computing apparatus of claim 10 , wherein the program instructions further direct the computing apparatus to:
in the first edge gateway, communicate the second state information associated with the first logical router to the second edge gateway, wherein the second edge gateway includes a fourth logical router in a standby state for the first logical router.
18 . A system comprising:
a first edge gateway having a first logical router in an active state and a second logical router in a standby state;
a second edge gateway having a third logical router in an active state;
the first edge gateway configured to:
receive state information associated with the third logical router from the second edge gateway;
identify a failure in association with the second edge gateway;
in response to identifying the failure, change the second logical router to an active state to operate in place of the third logical router based on the state information;
maintain second state information for the first logical router and third state information for the second logical router;
identify that the second edge gateway is available;
in response to identifying that the second edge gateway is available, communicate the third state information to the second edge gateway;
the second edge gateway configured to:
receive the third state information; and
in response to receiving the third state information, set the third logical router to an active state to operate in place of the second logical router based on the third state information.
19 . The system of claim 18 , wherein the first edge gateway is further configured to:
communicate the second state information associated with the first logical router to the second edge gateway, wherein the second edge gateway includes a fourth logical router in a standby state for the first logical router.
20 . The system of claim 18 , wherein the state information comprises at least firewall state information.
21 . The system of claim 18 , wherein identifying the failure in association with the second edge gateway comprises identifying that the second edge gateway is unresponsive to a health check message.