Grouping route-based virtual private network interfaces in a virtualized computing system
An example method of identifying an equal cost multipath (ECMP)-enabled route-based virtual private networks (RBVPN) in a virtualized computing system, comprises: obtaining, at a telemetry agent executing in an edge server of a data center, learned routes; identifying, by the telemetry agent from the routes, a destination network and a plurality of next hops associated therewith and a plurality of virtual tunnel interfaces (VTIs); identifying, by the telemetry agent for each of the plurality of VTIs, an associated VPN session; grouping, by the telemetry agent, the VPN sessions identified as associated with the plurality of VTIs into an ECMP-enabled RBVPN; adding, by the telemetry agent, a description of the ECMP-enabled RBVPN to telemetry data; and sending, by the telemetry agent, the telemetry data to a telemetry service.
1. A method of identifying an equal cost multipath (ECMP)-enabled route-based virtual private network (RBVPN) in a virtualized computing system, comprises:
obtaining, at a telemetry agent executing in an edge server of a data center, routes learned by an edge services gateway executing in the edge server;
identifying, by the telemetry agent from the routes, a destination network and a plurality of next hops associated therewith and a plurality of virtual tunnel interfaces (VTIs) of the edge services gateway respectively associated with the plurality of next hops;
identifying, by the telemetry agent for each of the plurality of VTIs, an associated virtual private network (VPN) session managed by the edge services gateway;
grouping, by the telemetry agent, the VPN sessions identified as associated with the plurality of VTIs into an ECMP-enabled RBVPN;
adding, by the telemetry agent, a description of the ECMP-enabled RBVPN to telemetry data; and
sending, by the telemetry agent, the telemetry data to a telemetry service.
2. The method of claim 1 , wherein the edge services gateway provides an interface to a logical network executing in a host cluster of the data center.
3. The method of claim 2 , wherein the plurality of next hops are interfaces programmed on logical routers in the logical network.
4. The method of claim 1 , wherein the next hops associated with the destination network each have an equal cost.
5. The method of claim 1 , further comprising:
presenting, by a user interface executing in the public cloud, a view of telemetry data to a user.
6. The method of claim 1 , further comprising:
identifying, by the telemetry agent for the VPN sessions, corresponding internet key exchange (IKE) sessions;
adding information describing the IKE sessions to the telemetry data.
7. The method of claim 1 , further comprising:
assigning, by the telemetry agent, the VPN sessions to different processor cores of the edge server.
8. The method of claim 1 , wherein the telemetry service executes in a public cloud in communication with the data center.
9. The method of claim 1 , wherein the telemetry data indicates an anomaly, wherein the telemetry service receives user input in response to presentation of the anomaly, and wherein the telemetry service receives a configuration change to mitigate the anomaly.
10. A non-transitory computer readable medium comprising instructions to be executed in a computing device to cause the computing device to carry out a method of identifying an equal cost multipath (ECMP)-enabled route-based virtual private network (RBVPN) in a virtualized computing system, comprises:
obtaining, at a telemetry agent executing in an edge server of a data center, routes learned by an edge services gateway executing in the edge server;
identifying, by the telemetry agent from the routes, a destination network and a plurality of next hops associated therewith and a plurality of virtual tunnel interfaces (VTIs) of the edge services gateway respectively associated with the plurality of next hops;
identifying, by the telemetry agent for each of the plurality of VTIs, an associated virtual private network (VPN) session managed by the edge services gateway;
grouping, by the telemetry agent, the VPN sessions identified as associated with the plurality of VTIs into an ECMP-enabled RBVPN;
adding, by the telemetry agent, a description of the ECMP-enabled RBVPN to telemetry data; and
sending, by the telemetry agent, the telemetry data to a telemetry service.
11. The non-transitory computer readable medium of claim 10 , wherein the edge services gateway provides an interface to a logical network executing in a host cluster of the data center.
12. The non-transitory computer readable medium of claim 11 , wherein the plurality of next hops are interfaces programmed on logical routers in the logical network.
13. The non-transitory computer readable medium of claim 10 , wherein the next hops associated with the destination network each have an equal cost.
14. The non-transitory computer readable medium of claim 10 , further comprising:
presenting, by a user interface executing in the public cloud, a view of telemetry data to a user.
15. A virtualized computing system, comprising:
a public cloud including a telemetry service executing therein; and
a data center having an edge server configured to execute a telemetry agent, the telemetry agent configured to:
obtain routes learned by an edge services gateway executing in the edge server;
identify, from the routes, a destination network and a plurality of next hops associated therewith and a plurality of virtual tunnel interfaces (VTIs) of the edge services gateway respectively associated with the plurality of next hops;
identify, for each of the plurality of VTIs, an associated virtual private network (VPN) session managed by the edge services gateway;
group the VPN sessions identified as associated with the plurality of VTIs into an equal cost multipath (ECMP)-enabled route-based virtual private network (RBVPN);
add a description of the ECMP-enabled RBVPN to telemetry data; and
send the telemetry data to a telemetry service.
16. The virtualized computing system of claim 15 , wherein the edge services gateway provides an interface to a logical network executing in a host cluster of the data center.
17. The virtualized computing system of claim 16 , wherein the plurality of next hops are interfaces programmed on logical routers in the logical network.
18. The virtualized computing system of claim 15 , wherein the next hops associated with the destination network each have an equal cost.
19. The virtualized computing system of claim 15 , wherein the telemetry agent is configured to:
identify, for the VPN sessions, corresponding internet key exchange (IKE) sessions;
add information describing the IKE sessions to the telemetry data.
20. The virtualized computing system of claim 15 , wherein the telemetry agent is configured to:
assign the VPN sessions to different processor cores of the edge server.