MANAGING ACTIVE AND STANDBY GATEWAYS USING DUPLICATE ADDRESS DETECTION PACKETS
Described herein are systems, methods, and software to manage an active/standby gateway configuration using Duplicate Address Detection (DAD) packets. In one implementation, a first gateway determines that a heartbeat connection with a second gateway has failed. In response to the failed heartbeat connection, the first gateway implements a packet filter for the data plane that permits DAD packets but blocks one or more other protocols. The first gateway then determines whether a response is received to the DAD packets within a timeout period. If received, the first gateway will revert to a standby state. If not received, the first gateway will assume the active state in place of the second gateway.
1 . A method of operating a first gateway comprising:
maintaining a standby state for a second gateway in an active state;
identifying a loss of a heartbeat connection with the second gateway;
in response to identifying the loss of the heartbeat connection, applying a packet filter in a data plane, wherein the packet filter permits Duplicate Address Detection (DAD) packets and blocks remaining packets;
communicating one or more DAD packets in the data plane;
determining whether a response to the one or more DAD packets is received within a timeout period;
when a response to the one or more DAD packets is received within the timeout period, returning to the standby state; and
when a response to the one or more DAD packets is not received within the timeout period, moving to the active state.
2 . The method of claim 1 , wherein the standby state comprises a state to drop incoming packets in the data plane.
3 . The method of claim 1 , wherein the active state comprises a state to process incoming packets from the data plane.
4 . The method of claim 1 further comprising:
when a response to the one or more DAD packets is received within the timeout period:
determining when a time associated with the loss of heartbeat exceeds a threshold;
communicating one or more second DAD packets in the data plane;
determining whether a response to the one or more second DAD packets is received within a second timeout period; and
when a response to the one or more second DAD packets is received within the second timeout period, returning to the standby state; and
when a response to the one or more second DAD packets is not received within the second timeout period, moving to the active state.
5 . The method of claim 1 further comprising:
when a response to the one or more DAD packets is not received within the timeout period:
identifying a reestablishment of the heartbeat connection with the second gateway;
in response to the reestablishment of the heartbeat connection, moving to the standby state.
6 . The method of claim 1 , wherein identifying the loss of the heartbeat connection with the second gateway comprises identifying when a heartbeat packet from the second gateway is not received during a heartbeat timeout.
7 . The method of claim 1 , wherein communicating the one or more DAD packets in the data plane comprises communicating the one or more DAD packets via one or more ports of the first gateway associated with the data plane.
8 . A computing apparatus comprising:
a storage system;
a processing system operatively coupled to the storage system; and
program instructions stored on the storage system to operate a first gateway that, when executed by the processing system, direct the computing apparatus:
maintain a standby state for a second gateway in an active state;
identify a loss of a heartbeat connection with the second gateway;
in response to identifying the loss of the heartbeat connection, apply a packet filter in a data plane, wherein the packet filter permits Duplicate Address Detection (DAD) packets and blocks remaining packets;
communicate one or more DAD packets in the data plane;
determine whether a response to the one or more DAD packets is received within a timeout period;
when a response to the one or more DAD packets is received within the timeout period, return to the standby state; and
when a response to the one or more DAD packets is not received within the timeout period, move to the active state.
9 . The computing apparatus of claim 8 , wherein the standby state comprises a state to drop incoming packets in the data plane.
10 . The computing apparatus of claim 8 , wherein the active state comprises a state to process incoming packets from the data plane.
11 . The computing apparatus of claim 8 , wherein the program instructions further direct the computing apparatus to:
when a response to the one or more DAD packets is received within the timeout period:
determine when a time associated with the loss of heartbeat exceeds a threshold;
communicate one or more second DAD packets in the data plane;
determine whether a response to the one or more second DAD packets is received within a second timeout period; and
when a response to the one or more second DAD packets is received within the second timeout period, return to the standby state; and
when a response to the one or more second DAD packets is not received within the second timeout period, move to the active state.
12 . The computing apparatus of claim 8 , wherein the program instructions further direct the computing apparatus to:
when a response to the one or more DAD packets is not received within the timeout period:
identify a reestablishment of the heartbeat connection with the second gateway;
in response to the reestablishment of the heartbeat connection, move to the standby state.
13 . The computing apparatus of claim 8 , wherein identifying the loss of the heartbeat connection with the second gateway comprises identifying when a heartbeat packet from the second gateway is not received during a heartbeat timeout.
14 . The computing apparatus of claim 8 , wherein communicating the one or more DAD packets in the data plane comprises communicating the one or more DAD packets via one or more ports of the first gateway associated with the data plane.
15 . A system comprising:
a first gateway; and
a second gateway;
the first gateway configured to:
maintain a standby state for a second gateway in an active state;
identify a loss of a heartbeat connection with the second gateway;
in response to identifying the loss of the heartbeat connection, apply a packet filter in a data plane, wherein the packet filter permits Duplicate Address Detection (DAD) packets and blocks remaining packets;
communicate one or more DAD packets in the data plane;
determine whether a response to the one or more DAD packets is received within a timeout period;
when a response to the one or more DAD packets is received within the timeout period, return to the standby state; and
when a response to the one or more DAD packets is not received within the timeout period, move to the active state.
16 . The system of claim 15 , wherein the standby state comprises a state to drop incoming packets in the data plane.
17 . The system of claim 15 , wherein the active state comprises a state to process incoming packets from the data plane.
18 . The system of claim 15 , wherein the first gateway is further configured to:
when a response to the one or more DAD packets is not received within the timeout period:
identifying a reestablishment of the heartbeat connection with the second gateway;
in response to the reestablishment of the heartbeat connection, moving to the standby state.
19 . The system of claim 15 , wherein identifying the loss of the heartbeat connection with the second gateway comprises identifying when a heartbeat packet from the second gateway is not received during a heartbeat timeout.
20 . The system of claim 15 , wherein communicating the one or more DAD packets in the data plane comprises communicating the one or more DAD packets via one or more ports of the first gateway associated with the data plane.