Dynamic grouping of network segments for forwarding data message flows from machines of network segment groups to an external network through different edge forwarding elements
Some embodiments provide a novel method for dynamically deploying gateways for a first network connecting machines. The first network includes segments, routers, and a first gateway that connects to an external network. The method identifies a set of two or more segments that consumes more than a threshold amount of bandwidth of the first gateway. The identified set includes at least first and second segments. The method identifies one or more segment groups by aggregating two or more segments in the identified set. A first segment group includes the first and second segments and a third segment that is not in the identified set of two or more segments. The method configures a second gateway to process flows associated with each identified group including the first group. The method configures a set of routers to forward flows from machines of each segment of each identified group to the second gateway.
1. A method for dynamically deploying gateways for a first network connecting a plurality of machines, the first network comprising a plurality of segments, a plurality of routers, and a first gateway that connects to an external network, the method comprising:
identifying a set of two or more segments that consumes more than a threshold amount of bandwidth of the first gateway, the identified set comprising at least first and second segments;
identifying one or more segment groups by aggregating two or more segments in the identified set, wherein a first segment group comprises the first and second segments and a third segment that is not in the identified set of two or more segments;
configuring a second gateway to process flows associated with each identified group including the first identified group; and
configuring a set of routers to forward flows from machines of each segment of each identified group to the second gateway.
2. The method of claim 1 , wherein the third segment is included in the first segment group in order to reduce match criteria for forwarding rules.
3. The method of claim 2 , wherein identifying the first segment group comprises:
identifying a common prefix network address shared by the first and second segments; and
using the common prefix network address as the match criteria for a particular forwarding rule that directs, to the second gateway, data message flows associated with the first and second segments' network addresses, wherein the common prefix network address is also shared by network addresses in the third segment.
4. The method of claim 1 , wherein identifying the set of segments that consumes more than the threshold amount of bandwidth of the first gateway comprises identifying the set of segments consuming more than a threshold amount of current bandwidth of the first gateway.
5. The method of claim 1 , wherein identifying the set of segments that consumes more than the threshold amount of bandwidth of the first gateway comprises identifying the set of segments consuming more than a threshold amount of future predicted bandwidth of the first gateway.
6. The method of claim 1 , wherein identifying the set of segments that consumes more than the threshold amount of bandwidth of the first gateway comprises identifying the set of segments consuming more than the threshold amount of bandwidth of a particular uplink interface of the first gateway.
7. The method of claim 1 , wherein the set of segments is identified from the plurality of segments each consuming different amounts of bandwidth of the first gateway.
8. The method of claim 1 further comprising, before identifying the one or more segment groups, identifying one or more subsets of segments from the set of segments, each subset of segments comprising segments consuming a similar amount of bandwidth of the first gateway.
9. The method of claim 8 , wherein identifying the one or more segment groups comprises identifying a segment group for each identified subset of segments.
10. The method of claim 1 , wherein each segment is a segment of a logical overlay network.
11. The method of claim 1 , wherein each segment is a segment of a physical network.
12. The method of claim 1 , wherein:
configuring the second gateway to process flows comprises:
configuring the second gateway to process flows associated with a first subset of one or more segment groups including the first identified group; and
configuring a third gateway to process flows associated with a second subset of one or more segment groups, and
wherein configuring the set of routers comprises:
configuring the set of routers to forward flows from machines of each segment of the first subset of segment groups to the second gateway; and
configuring the set of routers to forward flows from machines of each segment of the second subset of segment groups to the third gateway.
13. The method of claim 1 further comprising, before configuring the second gateway, deploying the second gateway in the first network.
14. The method of claim 13 , wherein the second gateway is deployed and configured in order to alleviate load on the first gateway.
15. The method of claim 13 further comprising, before deploying the second gateway, determining that the first gateway is the only gateway currently deployed in the first network to connect to the external network.
16. The method of claim 1 , wherein configuring the set of routers comprises distributing forwarding rules to the set of routers specifying each identified group to forward data message flows from the machines of each segment of each identified group to the external network through the second gateway.
17. A non-transitory machine readable medium storing a program for execution by at least one processing unit for dynamically deploying gateways for a first network connecting a plurality of machines, the first network comprising a plurality of segments, a plurality of routers, and a first gateway that connects to an external network, the program comprising sets of instructions for:
identifying a set of two or more segments that consumes more than a threshold amount of bandwidth of the first gateway, the identified set comprising at least first and second segments;
identifying one or more segment groups by aggregating two or more segments in the identified set, wherein a first segment group comprises the first and second segments and a third segment that is not in the identified set of two or more segments;
configuring a second gateway to process flows associated with each identified group including the first identified group; and
configuring a set of routers to forward flows from machines of each segment of each identified group to the second gateway.
18. The non-transitory machine readable medium of claim 17 , wherein the third segment is included in the first segment group in order to reduce match criteria for forwarding rules.
19. The non-transitory machine readable medium of claim 18 , wherein the set of instructions for identifying the first segment group comprises sets of instructions for:
identifying a common prefix network address shared by the first and second segments; and
using the common prefix network address as the match criteria for a particular forwarding rule that directs, to the second gateway, data message flows associated with the first and second segments' network addresses, wherein the common prefix network address is also shared by network addresses in the third segment.
20. The non-transitory machine readable medium of claim 17 , wherein the set of instructions for configuring the set of routers comprises sets of instructions for distributing forwarding rules to the set of routers specifying each identified group to forward data message flows from the machines of each segment of each identified group to the external network through the second gateway.