Enhanced network-link architecture for improved end-to-end latency in communication between different cloud environments
Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.
1. A method comprising:
receiving, by a multi-cloud infrastructure included in a first cloud environment provided by a first cloud services provider, a request to create a network-link between a first virtual network in the first cloud environment and a second virtual network in a second cloud environment provided by a second cloud services provider, the first virtual network in the first cloud environment being previously created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment, wherein the first cloud services provider is different than the second cloud services provider; and
creating the network-link between the first virtual network in the first cloud environment and the second virtual network in the second cloud environment using a plurality of link-enabling virtual networks, the creating including:
instantiating a first link-enabling virtual network from the plurality of link-enabling virtual networks in the second cloud environment, and
instantiating a second link-enabling virtual network from the plurality of link-enabling virtual networks in the first cloud environment, wherein the first link-enabling virtual network in the second cloud environment and the second link-enabling virtual network in the first cloud environment are created for each customer tenancy of a plurality of customer tenancies of the second cloud environment.
2. The method of claim 1 , wherein each of the first link-enabling virtual network in the second cloud environment and the second link-enabling virtual network in the first cloud environment is assigned a unique classless inter-domain routing IP address space.
3. The method of claim 1 , wherein the first link-enabling virtual network encapsulates traffic received from the second virtual network in the second cloud environment to generate encapsulated traffic, the encapsulated traffic being transmitted by the first link-enabling virtual network to a hub virtual network included in the second cloud environment.
4. The method of claim 1 , wherein the first link-enabling virtual network includes a first pair of virtual network adaptors, each of which is configured to encapsulate traffic received from the second virtual network in the second cloud environment to generate encapsulated traffic.
5. The method of claim 3 , wherein the hub virtual network included in the second cloud environment includes a pair of virtual network forwarders, each of which is configured to perform a network address translation for the encapsulated traffic received from the first link-enabling virtual network to forward the encapsulated traffic to a hub virtual network included in the first cloud environment.
6. The method of claim 1 , wherein the second link-enabling virtual network in the first cloud environment includes a second pair of virtual network adaptors, each of which is configured to decapsulate, encapsulated traffic received from a hub virtual network included in the second cloud environment.
7. The method of claim 1 , wherein a hub virtual network included in the second cloud environment is communicatively coupled to a hub virtual network included in the first cloud environment by a high-bandwidth interconnect link.
8. The method of claim 7 , wherein the hub virtual network included in the first cloud environment includes a VNIC that is communicatively coupled to the second link-enabling virtual network in the first cloud environment.
9. The method of claim 1 , wherein the second link-enabling virtual network in the first cloud environment, forwards traffic to the first virtual network in the first cloud environment via a dynamic routing gateway.
10. One or more computer readable non-transitory media storing computer-executable instructions that, when executed by one or more processors, cause:
receiving, by a multi-cloud infrastructure included in a first cloud environment provided by a first cloud services provider, a request to create a network-link between a first virtual network in the first cloud environment and a second virtual network in a second cloud environment provided by a second cloud services provider, the first virtual network in the first cloud environment being previously created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment, wherein the first cloud services provider is different than the second cloud services provider; and
creating the network-link between the first virtual network in the first cloud environment and the second virtual network in the second cloud environment using a plurality of link-enabling virtual networks, the creating including:
instantiating a first link-enabling virtual network from the plurality of link-enabling virtual networks in the second cloud environment and
instantiating a second link-enabling virtual network from the plurality of link-enabling virtual networks in the first cloud environment, wherein the first link-enabling virtual network in the second cloud environment and the second link-enabling virtual network in the first cloud environment are created for each customer tenancy of a plurality of customer tenancies of the second cloud environment.
11. The one or more computer readable non-transitory media storing computer-executable instructions of claim 10 , wherein each of the first link-enabling virtual network in the second cloud environment and the second link-enabling virtual network in the first cloud environment is assigned a unique classless inter-domain routing IP address space.
12. The one or more computer readable non-transitory media storing computer-executable instructions of claim 10 , wherein the first link-enabling virtual network encapsulates traffic received from the second virtual network in the second cloud environment to generate encapsulated traffic, the encapsulated traffic being transmitted by the first link-enabling virtual network to a hub virtual network included in the second cloud environment.
13. The one or more computer readable non-transitory media storing computer-executable instructions of claim 10 , wherein the first link-enabling virtual network includes a first pair of virtual network adaptors, each of which is configured to encapsulate traffic received from the second virtual network in the second cloud environment to generate encapsulated traffic.
14. The one or more computer readable non-transitory media storing computer-executable instructions of claim 12 , wherein the hub virtual network included in the second cloud environment includes a pair of virtual network forwarders, each of which is configured to perform a network address translation for the encapsulated traffic received from the first link-enabling virtual network to forward the encapsulated traffic to a hub virtual network included in the first cloud environment.
15. The one or more computer readable non-transitory media storing computer-executable instructions of claim 10 , wherein the second link-enabling virtual network in the first cloud environment includes a second pair of virtual network adaptors, each of which is configured to decapsulate, encapsulated traffic received from a hub virtual network included in the second cloud environment.
16. The one or more computer readable non-transitory media storing computer-executable instructions of claim 10 , wherein a hub virtual network included in the second cloud environment is communicatively coupled to a hub virtual network included in the first cloud environment by a high-bandwidth interconnect link.
17. A computing device comprising:
one or more processors; and
a memory including instructions that, when executed with the one or more processors, cause the computing device to, at least:
receive, by a multi-cloud infrastructure included in a first cloud environment provided by a first cloud services provider, a request to create a network-link between a first virtual network in the first cloud environment and a second virtual network in a second cloud environment provided by a second cloud services provider, the first virtual network in the first cloud environment being previously created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment, wherein the first cloud services provider is different than the second cloud services provider; and
create the network-link between the first virtual network in the first cloud environment and the second virtual network in the second cloud environment using a plurality of link-enabling virtual networks, wherein creating the network-link includes:
instantiating a first link-enabling virtual network from the plurality of link-enabling virtual networks in the second cloud environment, and
instantiating a second link-enabling virtual network from the plurality of link-enabling virtual networks in the first cloud environment, wherein the first link-enabling virtual network in the second cloud environment and the second link-enabling virtual network in the first cloud environment are created for each customer tenancy of a plurality of customer tenancies of the second cloud environment.
18. The method of claim 1 , wherein the multi-cloud infrastructure includes a first portion deployed in the first cloud environment and a second portion deployed in the second cloud environment, the first portion and the second portion being deployed and controlled by the first cloud services provider.