Granted Patent B2

US 12,231,262 · App. 17/560,284 · Granted Feb 18, 2025

Inventors: Subin Cyriac Mathew (Santa Clara, CA); Chidambareswaran Raman (Campbell, CA); Prerit Rodney (Cupertino, CA); Naveen Vijayan Kodakkal Puthiyaveettil (Mountain View, CA)

Assignee: VMware LLC

H04L12/4633H04L43/0876

Abstract

Claims (75)

1. A method comprising:

executing, by a computer system, a hypervisor that supports a virtualized computing instance;

implementing, by the hypervisor, a logical overlay network comprising a virtual switch implemented by the hypervisor and having multiple ports, the virtual switch comprising a forwarding table with entries that implement at least a portion of a logical switch in the logical overlay network, each of the ports of the virtual switch corresponding to a respective virtual network interface card (VNIC) implemented by the virtualized computing instance;

monitoring, in the logical overlay network, multiple virtual tunnel endpoints (VTEP) that are configured in the hypervisor for overlay networking, wherein the multiple VTEPs include a first VTEP and a second VTEP;

in response to detecting a state transition associated with the first VTEP from a healthy state to an unhealthy state, identifying mapping information that associates the virtualized computing instance the first VTEP; and

updating the mapping information to associate the virtualized computing instance with the second VTEP and migrating the virtualized computing instance from the first VTEP in the unhealthy state to the second VTEP in the healthy state; and

in response to detecting an egress packet from the virtualized computing instance to a destination, generating and sending an encapsulated packet towards the destination based on the updated mapping information, wherein the encapsulated packet includes the egress packet and an outer header identifying the second VTEP to be a source VTEP.

2. The method of claim 1 , wherein the method further comprises:

detecting a subsequent state transition associated with the first VTEP from the unhealthy state to the healthy state; and

updating the mapping information to reassociate the virtualized computing instance with the first VTEP, thereby migrating the virtualized computing instance from the second VTEP to the first VTEP.

3. The method of claim 1 , wherein detecting the state transition comprises at least one of the following:

detecting the state transition to a first unhealthy state in which (a) the first VTEP has not been assigned with a valid Internet Protocol (IP) address or (b) a lease associated with the IP address has expired;

detecting the state transition to a second unhealthy state in which each and every overlay networking path via the first VTEP is down; and

detecting the state transition to a third unhealthy state that is configured by a network administrator.

4. The method of claim 1 , wherein detecting the state transition comprises:

determining that the first VTEP remains in the unhealthy state after a timeout period has elapsed.

5. The method of claim 1 , wherein the method further comprises:

generating and sending a report to a management entity to cause the management entity to propagate the updated mapping information to multiple destination VTEPs.

6. The method of claim 1 , wherein identifying the mapping information comprises:

identifying the mapping information that is configured based on one of the following teaming policies:

(a) load balancing among the multiple VTEPs based on a configuration parameter associated with the virtualized computing instance and (b) a failover order associated with the multiple VTEPs.

7. The method of claim 1 , wherein the method further comprises:

in response to detecting the state transition, selecting the second VTEP for the virtualized computing instance based on one of the following:

a configuration parameter associated with the virtualized computing instance and number of virtualized computing instances mapped to the second VTEP.

8. A non-transitory computer-readable storage medium that includes a set of instructions which, in response to execution by a processor of a computer system, cause the processor to perform operations comprising:

executing, by a computer system, a hypervisor that supports a virtualized computing instance;

implementing, by the hypervisor, a logical overlay network comprising a virtual switch implemented by the hypervisor and having multiple ports, the virtual switch comprising a forwarding table with entries that implement at least a portion of a logical switch in the logical overlay network, each of the ports of the virtual switch corresponding to a respective virtual network interface card (VNIC) implemented by the virtualized computing instance;

monitoring, in the logical overlay network, multiple virtual tunnel endpoints (VTEP) that are configured in the hypervisor for overlay networking, wherein the multiple VTEPs include a first VTEP and a second VTEP;

in response to detecting a state transition associated with the first VTEP from a healthy state to an unhealthy state, identifying mapping information that associates the virtualized computing instance the first VTEP; and

updating the mapping information to associate the virtualized computing instance with the second VTEP and migrating the virtualized computing instance from the first VTEP in the unhealthy state to the second VTEP in the healthy state; and

in response to detecting an egress packet from the virtualized computing instance to a destination, generating and sending an encapsulated packet towards the destination based on the updated mapping information, wherein the encapsulated packet includes the egress packet and an outer header identifying the second VTEP to be a source VTEP.

9. The non-transitory computer-readable storage medium of claim 8 , wherein the operations further comprise:

detecting a subsequent state transition associated with the first VTEP from the unhealthy state to the healthy state; and

updating the mapping information to reassociate the virtualized computing instance with the t first VTEP thereby migrating the virtualized computing instance from the second VTEP to the first VTEP.

10. The non-transitory computer-readable storage medium of claim 8 , wherein detecting the state transition comprises at least one of the following:

detecting the state transition to a first unhealthy state in which (a) the first VTEP has not been assigned with a valid Internet Protocol (IP) address or (b) a lease associated with the IP address has expired;

detecting the state transition to a second unhealthy state in which each and every overlay networking path via the first VTEP is down; and

detecting the state transition to a third unhealthy state that is configured by a network administrator.

11. The non-transitory computer-readable storage medium of claim 8 , wherein detecting the state transition comprises:

determining that the first VTEP remains in the unhealthy state after a timeout period has elapsed.

12. The non-transitory computer-readable storage medium of claim 8 , wherein the operations further comprise:

generating and sending a report to a management entity to cause the management entity to propagate the updated mapping information to multiple destination VTEPs.

13. The non-transitory computer-readable storage medium of claim 8 , wherein identifying the mapping information comprises:

identifying the mapping information that is configured based on one of the following teaming policies:

(a) load balancing among the multiple VTEPs based on a configuration parameter associated with the virtualized computing instance and (b) a failover order associated with the multiple VTEPs.

14. The non-transitory computer-readable storage medium of claim 8 , wherein the operations further comprise:

in response to detecting the state transition, selecting the second VTEP for the virtualized computing instance based on one of the following:

a configuration parameter associated with the virtualized computing instance and number of virtualized computing instances mapped to the second VTEP.

15. A computer system, comprising:

one or more processors; and

a non-transitory computer-readable storage medium that includes a set of instructions which, in response to execution by the one or more processors to cause a computer system to perform operations comprising:

executing, by a computer system, a hypervisor that supports a virtualized computing instance;

implementing, by the hypervisor, a logical overlay network comprising a virtual switch implemented by the hypervisor and having multiple ports, the virtual switch comprising a forwarding table with entries that implement at least a portion of a logical switch in the logical overlay network, each of the ports of the virtual switch corresponding to a respective virtual network interface card (VNIC) implemented by the virtualized computing instance;

monitoring, in the logical overlay network, multiple virtual tunnel endpoints (VTEP) that are configured in the hypervisor for overlay networking, wherein the multiple VTEPs include a first VTEP and a second VTEP;

in response to detecting a state transition associated with the first VTEP from a healthy state to an unhealthy state, identifying mapping information that associates the virtualized computing instance the first VTEP; and

updating the mapping information to associate the virtualized computing instance with the second VTEP and migrating the virtualized computing instance from the first VTEP in the unhealthy state to the second VTEP in the healthy state; and

in response to detecting an egress packet from the virtualized computing instance to a destination, generating and sending an encapsulated packet towards the destination based on the updated mapping information, wherein the encapsulated packet includes the egress packet and an outer header identifying the second VTEP to be a source VTEP.

16. The computer system of claim 15 , wherein the operations further comprise:

detecting a subsequent state transition associated with the first VTEP from the unhealthy state to the healthy state; and

updating the mapping information to reassociate the virtualized computing instance with the first VTEP, thereby migrating the virtualized computing instance from the second VTEP to the first VTEP.

17. The computer system of claim 15 ,

wherein detecting the state transition comprises at least one of the following:

detecting the state transition to a first unhealthy state in which (a) the first VTEP has not been assigned with a valid Internet Protocol (IP) address or (b) a lease associated with the IP address has expired;

detecting the state transition to a second unhealthy state in which each and every overlay networking path via the first VTEP is down; and

detecting the state transition to a third unhealthy state that is configured by a network administrator.

18. The computer system of claim 15 , wherein detecting the state transition comprises:

determining that the first VTEP remains in the unhealthy state after a timeout period has elapsed.

19. The computer system of claim 15 , wherein the operations further comprise:

generating and sending a report to a management entity to cause the management entity to propagate the updated mapping information to multiple destination VTEPs.

20. The computer system of claim 15 , wherein identifying the mapping information comprises:

identifying the mapping information that is configured based on one of the following teaming policies:

(a) load balancing among the multiple VTEPs based on a configuration parameter associated with the virtualized computing instance and (b) a failover order associated with the multiple VTEPs.

21. The computer system of claim 15 , wherein the operations further comprise:

in response to detecting the state transition, selecting the second VTEP for the virtualized computing instance based on one of the following:

a configuration parameter associated with the virtualized computing instance and number of virtualized computing instances mapped to the second VTEP.

Assignments (2)

Continuity (1)

References Cited (10)