CENTRALIZED SERVICE INSERTION IN AN ACTIVE-ACTIVE LOGICAL SERVICE ROUTER (SR) CLUSTER
Example methods and systems for centralized service insertion in an active-active cluster are described. In one example, a first service endpoint may operate in an active mode on a first logical service router (SR) supported by the computer system. The first service endpoint may be associated with a second service endpoint operating on the second logical SR in a standby mode. The first logical SR and the second logical SR may be assigned to a first sub-cluster of the active-active cluster. In response to receiving a service request originating from a virtualized computing instance, the service request may be processed using the first service endpoint according to a centralized service that is implemented by both the first service endpoint and the second service endpoint. A processed service request may be forwarded towards a destination capable of generating and sending a service response in reply to the processed service request.
1 . A method for a computer system to perform centralized service insertion in an active-active cluster that includes a first logical SR supported by the computer system, a second logical SR and a third logical SR, wherein the method comprises:
operating, on the first logical SR, a first service endpoint in an active mode, wherein (a) the first service endpoint is associated with a second service endpoint operating on the second logical SR in a standby mode, and (b) the first logical SR and the second logical SR are assigned to a first sub-cluster of the active-active cluster; and
in response to receiving a service request originating from a virtualized computing instance via (a) a logical distributed router (DR), (b) the second logical SR in the first sub-cluster, or (c) the third logical SR in a second sub-cluster of the active-active cluster,
processing, using the first service endpoint, the service request according to a centralized service that is implemented by both the first service endpoint operating in the active mode and the second service endpoint operating in the standby mode; and
forwarding a processed service request towards a destination capable of generating and sending a service response in reply to the processed service request.
2 . The method of claim 1 , wherein receiving the service request comprises:
receiving the service request via an inter-SR logical switch connecting the first logical SR, the second logical SR and the third logical SR, wherein load balancing is enabled in the active-active cluster to cause the service request to be forwarded towards the second logical SR or the third logical SR prior to redirection towards the first logical SR.
3 . The method of claim 2 , wherein operating the first service endpoint in the active mode comprises:
attaching a first virtual address to the first service endpoint for use as a next hop in an inter-SR static route configured on the second logical SR or the third logical SR to forward the service request via the inter-SR logical switch, wherein the first virtual address is moveable to the second service endpoint capable of switching from the standby mode to the active mode in case of a failure affecting the first service endpoint.
4 . The method of claim 1 , wherein operating the first service endpoint in the active mode comprises:
assigning the first logical SR as a member of a service group, wherein the service group includes both the first logical SR and the second logical SR to implement the centralized service in the first sub-cluster.
5 . The method of claim 1 , wherein operating the first service endpoint in the active mode comprises:
attaching a second virtual address to the first service endpoint for use as a next hop for the logical DR to forward the service request towards the first service endpoint via a backplane logical switch or a router link logical switch, wherein the second virtual address is moveable to the second service endpoint capable of switching from the standby mode to the active mode in case of a failure affecting the first service endpoint.
6 . The method of claim 1 , wherein the method further comprises:
receiving, from the destination, the service response via (a) a logical DR, (b) the second logical SR in the first sub-cluster, or (c) the third logical SR in the second sub-cluster.
7 . The method of claim 6 , wherein the method further comprises:
in response to receiving the service response, processing the service response using the first service endpoint according to the centralized service; and
forwarding a processed service request towards the virtualized computing instance.
8 . A non-transitory computer-readable storage medium that includes a set of instructions which, in response to execution by a processor of a computer system, cause the processor to perform a method for centralized service insertion in an active-active cluster, wherein the method comprises:
operating, on a first logical SR supported by the computer system, a first service endpoint in an active mode, wherein (a) the first service endpoint is associated with a second service endpoint operating on a second logical SR in a standby mode, and (b) the first logical SR and the second logical SR are assigned to a first sub-cluster of the active-active cluster; and
in response to receiving a service request originating from a virtualized computing instance via (a) a logical distributed router (DR), (b) the second logical SR in the first sub-cluster, or (c) a third logical SR in a second sub-cluster of the active-active cluster,
processing, using the first service endpoint, the service request according to a centralized service that is implemented by both the first service endpoint operating in the active mode and the second service endpoint operating in the standby mode; and
forwarding a processed service request towards a destination capable of generating and sending a service response in reply to the processed service request.
9 . The non-transitory computer-readable storage medium of claim 8 , wherein receiving the service request comprises:
receiving the service request via an inter-SR logical switch connecting the first logical SR, the second logical SR and the third logical SR, wherein load balancing is enabled in the active-active cluster to cause the service request to be forwarded towards the second logical SR or the third logical SR prior to redirection towards the first logical SR.
10 . The non-transitory computer-readable storage medium of claim 9 , wherein operating the first service endpoint in the active mode comprises:
attaching a first virtual address to the first service endpoint for use as a next hop in an inter-SR static route configured on the second logical SR or the third logical SR to forward the service request via the inter-SR logical switch, wherein the first virtual address is moveable to the second service endpoint capable of switching from the standby mode to the active mode in case of a failure affecting the first service endpoint.
11 . The non-transitory computer-readable storage medium of claim 8 , wherein operating the first service endpoint in the active mode comprises:
assigning the first logical SR as a member of a service group, wherein the service group includes both the first logical SR and the second logical SR to implement the centralized service in the first sub-cluster.
12 . The non-transitory computer-readable storage medium of claim 8 , wherein operating the first service endpoint in the active mode comprises:
attaching a second virtual address to the first service endpoint for use as a next hop for the logical DR to forward the service request towards the first service endpoint via a backplane logical switch or a router link logical switch, wherein the second virtual address is moveable to the second service endpoint capable of switching from the standby mode to the active mode in case of a failure affecting the first service endpoint.
13 . The non-transitory computer-readable storage medium of claim 8 , wherein the method further comprises:
receiving, from the destination, the service response via (a) a logical DR, (b) the second logical SR in the first sub-cluster, or (c) the third logical SR in the second sub-cluster.
14 . The non-transitory computer-readable storage medium of claim 13 , wherein the method further comprises:
in response to receiving the service response, processing the service response using the first service endpoint according to the centralized service; and
forwarding a processed service request towards the virtualized computing instance.
15 . A computer system, comprising a first logical service router (SR) to:
operate, on the first logical SR, a first service endpoint in an active mode, wherein (a) the first service endpoint is associated with a second service endpoint operating on a second logical SR in a standby mode, and (b) the first logical SR and the second logical SR are assigned to a first sub-cluster of an active-active cluster; and
in response to receiving a service request originating from a virtualized computing instance via (a) a logical distributed router (DR), (b) the second logical SR in the first sub-cluster, or (c) a third logical SR in a second sub-cluster of the active-active cluster,
process, using the first service endpoint, the service request according to a centralized service that is implemented by both the first service endpoint operating in the active mode and the second service endpoint operating in the standby mode; and
forward a processed service request towards a destination capable of generating and sending a service response in reply to the processed service request.
16 . The computer system of claim 15 , wherein the first logical SR is to receive the service request by performing the following:
receive the service request via an inter-SR logical switch connecting the first logical SR, the second logical SR and the third logical SR, wherein load balancing is enabled in the active-active cluster to cause the service request to be forwarded towards the second logical SR or the third logical SR prior to redirection towards the first logical SR.
17 . The computer system of claim 16 , wherein the first logical SR is to operate the first service endpoint in the active mode by performing the following:
attach a first virtual address to the first service endpoint for use as a next hop in an inter-SR static route configured on the second logical SR or the third logical SR to forward the service request via the inter-SR logical switch, wherein the first virtual address is moveable to the second service endpoint capable of switching from the standby mode to the active mode in case of a failure affecting the first service endpoint.
18 . The computer system of claim 15 , wherein the first logical SR is to operate the first service endpoint in the active mode by performing the following:
assign the first logical SR as a member of a service group, wherein the service group includes both the first logical SR and the second logical SR to implement the centralized service in the first sub-cluster.
19 . The computer system of claim 15 , wherein the first logical SR is to operate the first service endpoint in the active mode by performing the following:
attach a second virtual address to the first service endpoint for use as a next hop for the logical DR to forward the service request towards the first service endpoint via a backplane logical switch or a router link logical switch, wherein the second virtual address is moveable to the second service endpoint capable of switching from the standby mode to the active mode in case of a failure affecting the first service endpoint.
20 . The computer system of claim 15 , wherein the first logical SR is further to performing the following:
receive, from the destination, the service response via (a) a logical DR, (b) the second logical SR in the first sub-cluster, or (c) the third logical SR in the second sub-cluster.
21 . The computer system of claim 20 , wherein the first logical SR is further to performing the following:
in response to receiving the service response, process the service response using the first service endpoint according to the centralized service; and
forward a processed service request towards the virtualized computing instance.