Management of blacklists and duplicate addresses in software defined networks

1. A method managing duplicate Internet Protocol (IP) addresses in a control plane of a Software Defined Networking (SDN) environment, the method comprising:

identifying a new address binding from a data plane;

determining that a first IP address in the new address binding matches a second IP address in a realized address list for a logical port;

determining that the first IP address is prioritized over the second IP address based on timestamps associated with the first IP address and the second IP address; and

deleting an address binding from the realized address list associated with the second IP address.

2. The method of claim 1 further comprising:

identifying a second logical port associated with the new address binding; and

adding the new address binding to a realized address list associated with the second logical port.

3. The method of claim 1 further comprising:

identifying a deletion of a second address binding in a second realized address list associated with a second logical port;

determining that an IP address in the second address binding is associated with an address binding discovered in association with the logical port; and

adding the second address binding to the realized address list.

4. The method of claim 1 further comprising reporting the realized address list to one or more services.

5. The method of claim 4 , wherein the one or more services comprise a firewall service.

6. The method of claim 1 further comprising:

identifying a second new address binding for the logical port;

determining that a third IP address in the second new address binding does not match an entry in a blacklist for the logical port; and

adding the second new address binding to the realized address list.

7. The method of claim 1 further comprising:

obtaining a list of one or more address bindings from a management plane;

determining that a third IP address in the one or more address bindings match a fourth IP address in the realized address list, wherein the fourth IP address was identified in a data plane;

determining that the third IP address is prioritized over the fourth IP address based on the management plane being prioritized over the data plane; and

deleting an address binding from the realized address list associated with the fourth IP address.

8. The method of claim 1 further comprising:

receiving a blacklist for the logical port;

deleting one or more realized address bindings in the realized address list for the logical port that match one or more address bindings in the blacklist; and

preventing subsequent address bindings that match the one or more address bindings in the blacklist from being added to the realized address list.

9. A computing apparatus comprising:

a storage system;

a processing system operatively coupled to the storage system; and

program instructions stored on the storage system to manage duplicate Internet Protocol (IP) addresses in a control plane of a Software Defined Networking (SDN) environment that, when executed by the processing system, direct the computing apparatus to:

identify a new address binding from a data plane;

determine that a first IP address in the new address binding matches a second IP address in a realized address list for a logical port;

determine that the first IP address is prioritized over the second IP address based on timestamps associated with the first IP address and the second IP address; and

delete an address binding from the realized address list associated with the second IP address.

10. The computing apparatus of claim 9 , wherein the program instructions further direct the computing apparatus to:

identify a second logical port associated with the new address binding; and

add the new address binding to a realized address list associated with the second logical port.

11. The computing apparatus of claim 9 , wherein the program instructions further direct the computing apparatus to:

identify a deletion of a second address binding in a second realized address list associated with a second logical port;

determine that an IP address in the second address binding is associated with an address binding discovered in association with the logical port; and

add the second address binding to the realized address list.

12. The computing apparatus of claim 9 , wherein the program instructions further direct the computing apparatus to report the realized address list to one or more services.

13. The computing apparatus of claim 12 , wherein the one or more services comprise a firewall service.

14. The computing apparatus of claim 9 , wherein the program instructions further direct the computing apparatus to:

identify a second new address binding for the logical port;

determine that a third IP address in the second new address binding does not match an entry in a blacklist for the logical port; and

add the second new address binding to the realized address list.

15. The computing apparatus of claim 9 , wherein the program instructions further direct the computing apparatus to:

obtain a list of one or more address bindings from a management plane;

determine that a third IP address in the one or more address bindings match a fourth IP address in the realized address list, wherein the fourth IP address was identified in a data plane;

determine that the third IP address is prioritized over the fourth IP address based on the management plane being prioritized over the data plane; and

delete an address binding from the realized address list associated with the fourth IP address.

16. The computing apparatus of claim 9 , wherein the program instructions further direct the computing apparatus to:

receive a blacklist for the logical port;

delete one or more realized address bindings in the realized address list for the logical port that match one or more address bindings in the blacklist; and

prevent subsequent address bindings that match the one or more address bindings in the blacklist from being added to the realized address list.

17. An apparatus comprising:

a storage system; and

program instructions stored on the storage system to manage duplicate Internet Protocol (IP) addresses in a control plane of a Software Defined Networking (SDN) environment that, when executed by a processing system, direct the processing system to:

identify a new address binding from a data plane;

determine that a first IP address in the new address binding matches a second IP address in a realized address list for a logical port;

determine that the first IP address is prioritized over the second IP address based on timestamps associated with the first IP address and the second IP address; and

delete an address binding from the realized address list associated with the second IP address.

18. The apparatus of claim 17 , wherein the program instructions further direct the processing system to:

identify a second logical port associated with the new address binding; and

add the new address binding to a realized address list associated with the second logical port.

19. The apparatus of claim 17 , wherein the program instructions further direct the processing system to:

identify a deletion of a second address binding in a second realized address list associated with a second logical port;

determine that an IP address in the second address binding is associated with an address binding discovered in association with the logical port; and

add the second address binding to the realized address list.

20. The apparatus of claim 17 , wherein the program instructions further direct the computing apparatus to report the realized address list to one or more services, wherein the one or more services comprise a firewall service.