Providing DNS service in an SD-WAN
The method of some embodiment provides DNS service for an SD-WAN. The method receives a DNS request for a domain name (e.g., a FQDN) from one of the compute nodes connected to the SD-WAN (e.g., from a branch site or datacenter site, or a machine of a remote user). The method selects a particular network address (e.g., a particular IP address) from several network addresses (e.g., several IP addresses) of several different sets of servers that are associated with the domain name based on measurements taken by agents deployed in the SD-WAN and based on SD-WAN DNS-resolution selection criteria. The method provides the particular network address in response to the DNS request to the machine that sent the DNS request (e.g., to the branch site or datacenter that sent the DNS request, or to the machine of the remote user that sent the request).
1 . A method of providing DNS (domain name system) service in an SD-WAN (software-defined wide area network) implemented by deploying machines for performing forwarding operations in a set of one or more public clouds, the SD-WAN connecting multiple compute sites of an entity, the method comprising:
at a DNS server deployed in a public cloud for processing DNS requests from machines operating at the multiple compute sites connected to the SD-WAN:
receiving, from a first machine operating at a first site of the multiple compute sites, a DNS request identifying a domain name;
from a plurality of network addresses associated with the domain name, identifying a first network address that is an optimal network address based on a set of one or more SD-WAN metrics;
providing an IP vicinity report identifying approximate locations of network addresses and quantifying distances between the network addresses, the quantifying distances being determined by a set of measurement agents deployed by a virtual network provider, the quantifying distance being computed in terms of delay for initiating a TCP connection with a server at the network address;
providing the identified first network address in response to the DNS request to the first site for forwarding to the first machine;
wherein the optimal network address is updated based on changes in SD-WAN metrics collected by one or more managed forwarding nodes.
2 . The method of claim 1 , wherein the set of SD-WAN metrics includes a cost metric that is related to a financial cost for reaching each network address in the plurality network addresses through a subset of public clouds used by the SD-WAN to reach the network address.
3 . The method of claim 2 , wherein the set of SD-WAN metrics further includes a network connection metric that is related to a speed for reaching each network address in the plurality of network addresses through a subset of public clouds used by the SD-WAN to reach the network address.
4 . The method of claim 1 further comprising deploying measurement agents in the set of public clouds to iteratively take measurements to each of the plurality of network addresses to quantify speeds for reaching each network address, wherein the set of SD-WAN metrics includes a network connection metric that is related to a speed for reaching each network address in the plurality of network addresses through a subset of public clouds used by the SD-WAN to reach the network address.
5 . The method of claim 4 , wherein the measurements further produce at least one reliability metric including one of jitter and down time.
6 . The method of claim 4 , wherein the domain name is associated with a SaaS provider, the SD-WAN connecting the machines at the compute sites to machines of the SaaS provider that are reachable through the plurality of network addresses.
7 . The method of claim 6 , wherein the first machine uses the first network address to send data messages to the SaaS provider, and a forwarding element at the first site performs a next-hop lookup by using the first network address to identify an SD-WAN implementing a deployed machine to receive the data messages from the first machine.
8 . The method of claim 6 , wherein a measurement that a measurement agent takes with respect to a network address quantifies quality of a network connection between a public cloud datacenter in which a measurement agent is deployed and a network element at a SaaS provider datacenter to which the network address is assigned.
9 . The method of claim 4 , wherein the measurement agents are measurement agents deployed just in the set of public clouds that are used to implement the SD-WAN for the entity.
10 . The method of claim 4 , wherein the measurement agents are measurement agents deployed in a larger set of public clouds that the set of public clouds that are used to implement the SD-WAN for the entity.
11 . A non-transitory machine-readable medium storing a program which when executed by at least one processing unit provides DNS (domain name system) service in an SD-WAN (software-defined wide area network) implemented by deploying machines for performing forwarding operations in a set of one or more public clouds, the SD-WAN connecting multiple compute sites of an entity, the program comprising sets of instructions for:
at a DNS server deployed in a public cloud for processing DNS requests from machines operating at the compute sites connected to the SD-WAN:
receiving, from a first machine operating at a first site, a DNS request identifying a domain name;
from a plurality of network addresses associated with the domain name, identifying a first network address that is an optimal network address based on a set of one or more SD-WAN metrics;
providing an IP vicinity report identifying approximate locations of network addresses and quantifying distances between the network addresses, the quantifying distances being determined by a set of measurement agents deployed by a virtual network provider, the quantifying distance being computed in terms of delay for initiating a TCP connection with a server at the network address;
providing the identified first network address in response to the DNS request to the first site for forwarding to the first machine;
wherein the optimal network address is updated based on changes in SD-WAN metrics collected by one or more managed forwarding nodes.
12 . The non-transitory machine-readable medium of claim 11 , wherein the set of SD-WAN metrics includes a cost metric that is related to a financial cost for reaching each network address in the plurality of network addresses through a subset of public clouds used by the SD-WAN to reach the network address.
13 . The non-transitory machine-readable medium of claim 12 , wherein the set of SD-WAN metrics further includes a network connection metric that is related to a speed for reaching each network address in the plurality of network addresses through a subset of public clouds used by the SD-WAN to reach the network address.
14 . The non-transitory machine-readable medium of claim 11 , the program further comprising a set of instructions for deploying measurement agents in the set of public clouds to iteratively take measurements to each of the plurality of network addresses to quantify speeds for reaching each network address, wherein the set of SD-WAN metrics includes a network connection metric that is related to a speed for reaching each network address in the plurality of network addresses through a subset of public clouds used by the SD-WAN to reach the network address.
15 . The non-transitory machine-readable medium of claim 14 , wherein the measurements further produce at least one reliability metric including one of jitter and down time.
16 . The non-transitory machine-readable medium of claim 14 , wherein the domain name is associated with a SaaS provider, the SD-WAN connecting the machines at the compute sites to machines of the SaaS provider that are reachable through the plurality of network addresses.
17 . The non-transitory machine-readable medium of claim 16 , wherein the first machine uses the first network address to send data messages to the SaaS provider, and a forwarding element at the first site performs a next-hop lookup by using the first network address to identify an SD-WAN implementing a deployed machine to receive the data messages from the first machine.
18 . The non-transitory machine-readable medium of claim 16 , wherein a measurement that a measurement agent takes with respect to a network address quantifies quality of a network connection between a public cloud datacenter in which a measurement agent is deployed and a network element at a SaaS provider datacenter to which the network address is assigned.
19 . The non-transitory machine-readable medium of claim 14 , wherein the measurement agents are measurement agents deployed just in the set of public clouds that are used to implement the SD-WAN for the entity.
20 . The non-transitory machine-readable medium of claim 14 , wherein the measurement agents are measurement agents deployed in a larger set of public clouds that the set of public clouds that are used to implement the SD-WAN for the entity.