Sharing transport interfaces between tenants on multi-tenant edge devices
Techniques for virtualizing tenant transport interfaces configured to implement per-tenant network routing attribute differentiation in each tenant overlay of a multisite wide area network (WAN) and share the virtual transport interfaces between multi-tenant edge (MTE) devices providing transport services to tenant devices based on a defined tenant tier model. A Software-Defined Networking (SDN) controller may receive a physical transport interface and/or a device type associated with a tenant device. The SDN controller may determine a virtual transport interface for the tenant device based on a tier associated with the tenant. MTE device(s) may utilize the physical transport interface to establish sessions with other MTE device(s) in the WAN. The virtual transport interface may be utilized by MTE devices to implement and/or enforce network routing attributes when forwarding network traffic associated with the tenant via the sessions established between the MTE devices through the WAN.
1. A system comprising:
one or more processors; and
one or more computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
receiving, from a tenant device in a first site of a multisite wide area network (WAN), a request for a virtual transport interface configuring the tenant device to utilize a transport service of the multisite WAN, the request indicating a physical transport interface associated with the tenant device and a type of the tenant device;
determining, by a Software-Defined Networking (SDN) controller associated with the multisite WAN and based at least in part on the physical transport interface and the type of the tenant device, the virtual transport interface associated with the tenant device, wherein the virtual transport interface indicates one or more routing attributes associated with the tenant device;
sending, to a first multi-tenant edge (MTE) device associated with the tenant device, the physical transport interface of the tenant device and the virtual transport interface associated with the tenant device;
establishing one or more sessions between the first MTE device and one or more second MTE devices associated with the multisite WAN based at least in part on the physical transport interface, the sessions configured to enforce the one or more routing attributes on network traffic associated with the tenant device; and
forwarding the network traffic associated with the tenant device based at least in part on the virtual transport interface via the one or more sessions.
2. The system of claim 1 , the operations further comprising:
receiving configuration data from a computing device associated with the tenant device;
determining, based at least in part on the configuration data, a tier of one or more tiers associated with forwarding the network traffic associated with the tenant device, the tier indicating the one or more routing attributes associated with the tenant device; and
determining, based at least in part on the tier, the virtual transport interface.
3. The system of claim 1 , wherein the one or more routing attributes indicate at least one of:
network links associated with the one or more sessions configured to guarantee a service level agreement (SLA);
the network links associated with the one or more sessions configured as a best-effort network link;
one or more restrictions of the network links associated with the one or more sessions; or
a bandwidth guarantee of the network links associated with the one or more sessions.
4. The system of claim 1 , wherein the one or more routing attributes associated with the tenant device are based at least in part on the physical transport interface associated with the tenant device.
5. The system of claim 1 , wherein establishing the one or more sessions between the first MTE device and the one or more second MTE devices comprises causing, by the SDN controller, the first MTE device to establish the one or more sessions with the one or more second MTE devices using the physical transport interface.
6. The system of claim 1 , the operations further comprising publishing, by the first MTE device, the virtual transport interface in a network overlay associated with the first site of the multisite WAN in association with the tenant device.
7. The system of claim 1 , the operations further comprising sending, from the first MTE device and to the one or more second MTE devices, the virtual transport interface associated with the tenant device and the physical transport interface associated with the tenant device,
wherein establishing the one or more sessions between the first MTE device and the one or more second MTE devices comprises causing, by the SDN controller, the one or more second MTE devices to establish the one or more sessions with the first MTE device using the physical transport interface.
8. A method comprising:
receiving, from a tenant device in a first site of a multisite wide area network (WAN), a request for a virtual transport interface configuring the tenant device to utilize a transport service of the multisite WAN, the request indicating a physical transport interface associated with the tenant device and a type of the tenant device;
determining, by a Software-Defined Networking (SDN) controller associated with the multisite WAN and based at least in part on the physical transport interface and the type of the tenant device, the virtual transport interface associated with the tenant device, wherein the virtual transport interface indicates one or more routing attributes associated with the tenant device;
sending, to a first multi-tenant edge (MTE) device associated with the tenant device, the physical transport interface of the tenant device and the virtual transport interface associated with the tenant device;
establishing one or more sessions between the first MTE device and one or more second MTE devices associated with the multisite WAN based at least in part on the physical transport interface, the sessions configured to enforce the one or more routing attributes on network traffic associated with the tenant device; and
forwarding the network traffic associated with the tenant device based at least in part on the virtual transport interface via the one or more sessions.
9. The method of claim 8 , further comprising:
receiving configuration data from a computing device associated with the tenant device;
determining, based at least in part on the configuration data, a tier of one or more tiers associated with forwarding the network traffic associated with the tenant device, the tier indicating the one or more routing attributes associated with the tenant device; and
determining, based at least in part on the tier, the virtual transport interface.
10. The method of claim 8 , wherein the one or more routing attributes indicate at least one of:
network links associated with the one or more sessions configured to guarantee a service level agreement (SLA);
the network links associated with the one or more sessions configured as a best-effort network link;
one or more restrictions of the network links associated with the one or more sessions; or
a bandwidth guarantee of the network links associated with the one or more sessions.
11. The method of claim 8 , wherein the one or more routing attributes associated with the tenant device are based at least in part on the physical transport interface associated with the tenant device.
12. The method of claim 8 , wherein establishing the one or more sessions between the first MTE device and the one or more second MTE devices comprises causing, by the SDN controller, the first MTE device to establish the one or more sessions with the one or more second MTE devices using the physical transport interface.
13. The method of claim 8 , further comprising publishing, by the first MTE device, the virtual transport interface in a network overlay associated with the first site of the multisite WAN in association with the tenant device.
14. The method of claim 8 , further comprising sending, from the first MTE device and to the one or more second MTE devices, the virtual transport interface associated with the tenant device and the physical transport interface associated with the tenant device,
wherein establishing the one or more sessions between the first MTE device and the one or more second MTE devices comprises causing, by the SDN controller, the one or more second MTE devices to establish the one or more sessions with the first MTE device using the physical transport interface.
15. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
receiving, from a tenant device in a first site of a multisite wide area network (WAN), a request for a virtual transport interface configuring the tenant device to utilize a transport service of the multisite WAN, the request indicating a physical transport interface associated with the tenant device and a type of the tenant device;
determining, by a Software-Defined Networking (SDN) controller associated with the multisite WAN and based at least in part on the physical transport interface and the type of the tenant device, the virtual transport interface associated with the tenant device, wherein the virtual transport interface indicates one or more routing attributes associated with the tenant device;
sending, to a first multi-tenant edge (MTE) device associated with the tenant device, the physical transport interface of the tenant device and the virtual transport interface associated with the tenant device;
establishing one or more sessions between the first MTE device and one or more second MTE devices associated with the multisite WAN based at least in part on the physical transport interface, the sessions configured to enforce the one or more routing attributes on network traffic associated with the tenant device; and
forwarding the network traffic associated with the tenant device based at least in part on the virtual transport interface via the one or more sessions.
16. The one or more non-transitory computer-readable media of claim 15 , the operations further comprising receiving configuration data from a computing device associated with the tenant device;
determining, based at least in part on the configuration data, a tier of one or more tiers associated with forwarding the network traffic associated with the tenant device, the tier indicating the one or more routing attributes associated with the tenant device; and
determining, based at least in part on the tier, the virtual transport interface.
17. The one or more non-transitory computer-readable media of claim 15 , wherein the one or more routing attributes indicate at least one of:
network links associated with the one or more sessions configured to guarantee a service level agreement (SLA);
the network links associated with the one or more sessions configured as a best-effort network link;
one or more restrictions of the network links associated with the one or more sessions; or
a bandwidth guarantee of the network links associated with the one or more sessions.
18. The one or more non-transitory computer-readable media of claim 15 , wherein the one or more routing attributes associated with the tenant device are based at least in part on the physical transport interface associated with the tenant device.
19. The one or more non-transitory computer-readable media of claim 15 , wherein establishing the one or more sessions between the first MTE device and the one or more second MTE devices comprises causing, by the SDN controller, the first MTE device to establish the one or more sessions with the one or more second MTE devices using the physical transport interface.
20. The one or more non-transitory computer-readable media of claim 15 , the operations further comprising publishing, by the first MTE device, the virtual transport interface in a network overlay associated with the first site of the multisite WAN in association with the tenant device.