Egress traffic optimization
Techniques for automating traffic optimizations for egress traffic of an application orchestration system that is being sent over a network to a remote service. In examples, the techniques may include receiving, at a controller of the network, an egress traffic definition associated with egress traffic of an application hosted on the application orchestration system, the egress traffic definition indicating that the egress traffic is to be sent to the remote service. Based at least in part on the egress traffic definition, the controller may determine a networking path through the network or outside of the network that is optimized for sending the egress traffic to the remote service. The controller may also cause the egress traffic to be sent to the remote service via the optimized networking path.
1. A method performed at least partially by a controller of a software-defined wide area network (SD-WAN), the method comprising:
sending, from the controller and to an agent that is running on resources of an application orchestration system, a request for an egress traffic definition associated with egress traffic of an application hosted on infrastructure associated with the application orchestration system, wherein the agent is configured to retrieve egress traffic definitions on behalf of the controller;
receiving, at the controller and from an agent that is running on resources of an application orchestration system, the egress traffic definition, wherein the egress traffic definition indicates that the infrastructure is configured to send the egress traffic to a remote service that the application is utilizing;
determining, by the controller and based at least in part on the egress traffic definition, a networking path that is optimized for sending the egress traffic to the remote service; and
sending, by the controller and to an edge node associated with the application orchestration system, an instruction causing the edge node to send the egress traffic to the remote service via the networking path.
2. The method of claim 1 , wherein the egress traffic definition includes at least one of a destination internet protocol (IP) address associated with the remote service or a destination port associated with the remote service, a hostname associated with the remote service, or a uniform resource locator (URL) associated with the remote service.
3. The method of claim 1 , wherein receiving, by the controller, the egress traffic definition comprises:
establishing a direct connection between the controller of the SD-WAN and the application orchestration system; and
obtaining, by the controller and via the direct connection, the egress traffic definition from an egress traffic configuration.
4. The method of claim 1 , wherein the egress traffic definition includes one or more SD-WAN policies associated with an egress traffic configuration.
5. The method of claim 1 , wherein the egress traffic definition includes SD-WAN metadata associated with an egress traffic configuration, the SD-WAN metadata defined by an annotation associated with the egress traffic configuration for an egress policy.
6. The method of claim 1 , wherein the egress traffic definition includes an indication of the networking path that is optimized for sending the egress traffic to the remote service.
7. The method of claim 1 , wherein the networking path is at least one of a path that traverses through a fabric of the SD-WAN or a direct internet access path that bypasses the fabric of the SD-WAN.
8. A system on which a controller of a network is running, the system comprising:
one or more processors; and
one or more non-transitory computer-readable media storing instructions that, when executed by the one or more processors, cause the controller to perform operations comprising:
sending, to an agent that is running on resources of an application orchestration system, a request for an egress traffic definition associated with egress traffic of an application hosted on infrastructure associated with the application orchestration system, wherein the agent is configured to retrieve egress traffic definitions on behalf of the controller;
receiving, from the agent that is running on the resources of the application orchestration system, the egress traffic definition, wherein the egress traffic definition indicates that the infrastructure is configured to send the egress traffic to a remote service that the application is utilizing;
determining, based at least in part on the egress traffic definition, a networking path that is optimized for sending the egress traffic to the remote service; and
sending an indication of the networking path to an edge node associated with the application orchestration system, the indication causing the edge node to send the egress traffic to the remote service via the networking path.
9. The system of claim 8 , wherein the egress traffic definition includes at least one of a destination internet protocol (IP) address associated with the remote service, a destination port associated with the remote service, a hostname associated with the remote service, or a uniform resource locator (URL) associated with the remote service.
10. The system of claim 8 , wherein receiving the egress traffic definition comprises:
establishing a direct connection with the application orchestration system; and
obtaining, via the direct connection, the egress traffic definition from an egress traffic configuration associated with the application orchestration system.
11. The system of claim 8 , wherein the network is a software-defined wide area network (SD-WAN), the operations further comprising associating, as SD-WAN metadata, one or more SD-WAN policies with an egress traffic configuration associated with the application.
12. The system of claim 8 , wherein the egress traffic definition includes network metadata associated with an egress traffic configuration of the application, the network metadata defined as an annotation in the egress traffic configuration for an egress policy.
13. The system of claim 8 , wherein the egress traffic definition includes network metadata associated with an egress traffic configuration for the application, the network metadata stored as an indication in a configuration file associated with the egress traffic configuration, the indication being indicative of the networking path that is optimized for sending the egress traffic to the remote service.
14. The system of claim 8 , wherein the networking path is at least one of a path that traverses through a fabric of the network or a direct internet access path that bypasses the fabric of the network.
15. The system of claim 8 , wherein the network is a software-defined wide area network (SD-WAN) that is disposed between the application orchestration system and the remote service.
16. One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
sending, from a network controller of a network that is disposed between an application orchestration system and a remote service and to an agent that is running on resources of the application orchestration system, a request for an egress traffic definition associated with egress traffic of an application hosted on infrastructure associated with the application orchestration system, wherein the agent is configured to retrieve egress traffic definitions on behalf of the network controller;
receiving, at the network controller and from the agent that is running on the resources of the application orchestration system, the egress traffic definition, wherein the egress traffic definition indicates that the infrastructure is configured to send the egress traffic to the remote service that is supporting the application; and
based at least in part on the egress traffic definition, sending, by the network controller and to an edge node associated with the application orchestration system, an instruction causing the edge node to send the egress traffic of the application to the remote service via an optimized networking path.
17. The one or more non-transitory computer-readable media of claim 16 , wherein receiving the egress traffic definition comprises
obtaining, by the network controller via a direct connection between the network controller and the application orchestration system, the egress traffic definition from an egress traffic configuration.
18. The one or more non-transitory computer-readable media of claim 16 , wherein the network is a software-defined wide area network (SD-WAN) and the egress traffic definition includes network metadata associated with an egress traffic configuration, the network metadata indicating that the egress traffic of the application is to be consumed by the SD-WAN for determining the optimized networking path.
19. The one or more non-transitory computer-readable media of claim 16 , wherein the egress traffic definition includes at least one of a destination internet protocol (IP) address associated with the remote service, a destination port associated with the remote service, a hostname associated with the remote service, or a uniform resource locator (URL) associated with the remote service.
20. The one or more non-transitory computer-readable media of claim 16 , wherein the optimized networking path is at least one of a path that traverses through a fabric of the network or a direct internet access path that bypasses the fabric of the network.