Route aggregation for virtual datacenter gateway
Some embodiments provide a method for configuring a gateway router of a virtual datacenter. The method is performed at a network management component of a virtual datacenter that is defined in a public cloud and comprises a set of network management components and a set of network endpoints connected by a logical network managed by the network management components of the virtual datacenter. The method receives a set of network addresses of the network endpoints. The method aggregates at least a subset of the network addresses into a single subnet address that encompasses all of the aggregated network addresses. The method provides an aggregated route for the subset of network addresses to a gateway router that connects the virtual datacenter to a public cloud underlay network in order for the router to route data messages directed to the network endpoints to the logical network of the virtual datacenter.
1. A method for configuring a gateway router of a virtual datacenter, the method comprising:
at a network management component of the virtual datacenter that is defined in a public cloud and comprises (i) a set of network management components and (ii) a set of network endpoints connected by a logical network that is managed by the network management components of the virtual datacenter:
receiving a set of network addresses of the network endpoints of the virtual datacenter;
aggregating at least a subset of the network addresses into a single subnet address that encompasses all of the aggregated network addresses; and
providing an aggregated route for the subset of network addresses to the gateway router that connects the virtual datacenter to a public cloud underlay network in order for the router to route data messages directed to the network endpoints to the logical network of the virtual datacenter.
2. The method of claim 1 , wherein aggregating the subset of network addresses comprises determining a number of most significant bits of the network addresses for which all of the network addresses in the subset of network addresses have the same values.
3. The method of claim 2 , wherein:
the single subnet address comprises (i) the values shared by all of the network addresses for the most significant bits and (ii) the value zero for each of the remaining bits; and
a netmask for the single subnet address is equal to the number of most significant bits for which all of the network addresses in the subset of network addresses have the same values.
4. The method of claim 2 , wherein:
the router routes data messages directed to the network endpoints to a particular interface associated with the virtual datacenter logical network; and
the method further comprises determining that the single subnet address does not encompass any network address for which the router routes data messages to a different interface.
5. The method of claim 1 , wherein the subset of the network addresses is a first subset of the network addresses for a first subset of the network endpoints, the aggregated route is a first aggregated route, wherein the method further comprises:
aggregating a second subset of the network addresses into a second subnet address that encompasses all of the network addresses in the second subset; and
providing a second aggregated route for the second subset of network addresses to the router in order for the router to route data messages directed to the second subset of network endpoints to the logical network of the virtual datacenter.
6. The method of claim 1 , wherein:
the router is a first router; and
the single subnet address is provided to a second router that connects the virtual datacenter to a private datacenter of an enterprise that controls the virtual datacenter in order for data messages from network endpoints located at the private datacenter to be routed to the first router to reach the logical network of the virtual datacenter.
7. The method of claim 6 further comprising:
receiving a plurality of routes for a set of network addresses of the network endpoints located at the private datacenter; and
aggregating the plurality of routes into a single route for routing to the second router data messages directed to the network endpoints at the private datacenter.
8. The method of claim 1 , wherein:
the router is a first router and the virtual datacenter is a first virtual datacenter; and
the single subnet address is provided to a second router that connects the first virtual datacenter to a second virtual datacenter in order for data messages from network endpoints located at the second virtual datacenter to be routed to the first router to reach the logical network of the virtual datacenter.
9. The method of claim 8 , wherein a second subnet address for an aggregated set of network addresses of network endpoints located at the second virtual datacenter is provided to the first router in order for the first router to route data messages directed to network endpoints at the second virtual datacenter to the second router.
10. The method of claim 1 , wherein the router uses a routing table with a number of entries limited by the public cloud provider.
11. The method of claim 10 , wherein the number of entries is smaller than the number of network endpoints of the virtual datacenter.
12. The method of claim 1 further comprising monitoring the virtual datacenter to identify creation of new network endpoints to determine whether to aggregate the newly-created network endpoints.
13. A non-transitory machine-readable medium storing a network management component of a virtual datacenter which when executed by at least one processing unit configures a gateway router of the virtual datacenter, the virtual datacenter defined in a public cloud and comprising (i) a set of network management components and (ii) a set of network endpoints connected by a logical network that is managed by the network management components of the virtual datacenter, the network management component comprising sets of instructions for:
receiving a set of network addresses of the network endpoints of the virtual datacenter;
aggregating at least a subset of the network addresses into a single subnet address that encompasses all of the aggregated network addresses; and
providing an aggregated route for the subset of network addresses to the gateway router that connects the virtual datacenter to a public cloud underlay network in order for the router to route data messages directed to the network endpoints to the logical network of the virtual datacenter.
14. The non-transitory machine-readable medium of claim 13 , wherein the set of instructions for aggregating the subset of network addresses comprises a set of instructions for determining a number of most significant bits of the network addresses for which all of the network addresses in the subset of network addresses have the same values.
15. The non-transitory machine-readable medium of claim 14 , wherein:
the single subnet address comprises (i) the values shared by all of the network addresses for the most significant bits and (ii) the value zero for each of the remaining bits; and
a netmask for the single subnet address is equal to the number of most significant bits for which all of the network addresses in the subset of network addresses have the same values.
16. The non-transitory machine-readable medium of claim 14 , wherein:
the router routes data messages directed to the network endpoints to a particular interface associated with the virtual datacenter logical network; and
the network management component further comprises a set of instructions for determining that the single subnet address does not encompass any network address for which the router routes data messages to a different interface.
17. The non-transitory machine-readable medium of claim 13 , wherein the subset of the network addresses is a first subset of the network addresses for a first subset of the network endpoints, the aggregated route is a first aggregated route, wherein the network management component further comprises sets of instructions for:
aggregating a second subset of the network addresses into a second subnet address that encompasses all of the network addresses in the second subset; and
providing a second aggregated route for the second subset of network addresses to the router in order for the router to route data messages directed to the second subset of network endpoints to the logical network of the virtual datacenter.
18. The non-transitory machine-readable medium of claim 13 , wherein:
the router is a first router; and
the single subnet address is provided to a second router that connects the virtual datacenter to a private datacenter of an enterprise that controls the virtual datacenter in order for data messages from network endpoints located at the private datacenter to be routed to the first router to reach the logical network of the virtual datacenter.
19. The non-transitory machine-readable medium of claim 18 , wherein the network management further comprises sets of instructions for:
receiving a plurality of routes for a set of network addresses of the network endpoints located at the private datacenter; and
aggregating the plurality of routes into a single route for routing to the second router data messages directed to the network endpoints at the private datacenter.
20. The non-transitory machine-readable medium of claim 13 , wherein:
the router is a first router and the virtual datacenter is a first virtual datacenter; and
the single subnet address is provided to a second router that connects the first virtual datacenter to a second virtual datacenter in order for data messages from network endpoints located at the second virtual datacenter to be routed to the first router to reach the logical network of the virtual datacenter.
21. The non-transitory machine-readable medium of claim 20 , wherein a second subnet address for an aggregated set of network addresses of network endpoints located at the second virtual datacenter is provided to the first router in order for the first router to route data messages directed to network endpoints at the second virtual datacenter to the second router.
22. The non-transitory machine-readable medium of claim 13 , wherein the router uses a routing table with a number of entries limited by the public cloud provider to a number that is smaller than the number of network endpoints of the virtual datacenter.