Granted Patent B2

US 12,399,886 · App. 18/243,435 · Granted Aug 26, 2025

Inventors: Ganesan Chandrashekhar (Campbell, CA); Pavlush Margarian (Dublin, CA); Amarnath Palavalli (Fremont, CA); Josh Dorr (San Jose, CA)

Assignee: VMware LLC

G06F16/2365G06F9/546G06F9/547G06F11/3409G06F16/2358G06F16/256G06F16/27H04L12/66H04L41/046H04L41/0654H04L41/0686H04L41/0803H04L41/0893H04L41/0894H04L41/0895H04L41/12H04L41/122H04L41/40H04L43/06H04L43/0811H04L61/103H04L63/0263H04L63/104H04L67/14H04L69/22H04L41/22H04L67/1095

Abstract

Claims (41)

1. A method for defining a logical network that spans a plurality of sites and is managed at each site by a local manager, the method comprising:

at a global manager that manages the logical network:

storing a definition of the logical network that spans the plurality of sites, the definition specifying (i) a plurality of logical network elements, (ii) relationships between the elements, and (iii) for each of at least a subset of the elements, a span attribute indicating a set of sites spanned by the element;

based on the span attributes and relationships between the elements, identifying for each respective site a portion of the logical network definition that is relevant for the respective site; and

providing, to the local manager of each respective site, the portion of the logical network definition that is identified for the respective site, the local manager being configured to apply a set of priority rules to determine an override of a global configuration by a local configuration update event;

wherein:

the global manager comprises a primary global manager and a secondary global manager, the primary global manager being asynchronously synchronized with the secondary global manager as a standby for failover scenarios, the secondary global manager being configured at a different physical site than the primary global manager and maintains an independent database;

a particular local manager at a particular site creates and stores a local definition of the logical network based on the logical network definition portion received from the global manager;

the portion received by the particular local manager from the global manager is a first logical network definition; and

the particular local manager directly receives a second logical network definition from a user and updates the local definition of the logical network based on the second logical network definition;

the particular local manager stores the logical network definition portion received from the global manager as a read-only definition that is not modified when updating the local definition of the logical network.

2. The method of claim 1 , wherein:

a particular local manager at a particular site uses the portion of the logical network definition identified for the particular site to generate and provide a set of configuration data to a cluster of controllers at the particular site; and

the cluster of controllers (i) receives the configuration data from the particular local manager, (ii) identifies a set of computing devices at the particular site to implement the logical network elements that span the particular site, and (ii distributes the configuration data to the identified set of computing devices.

3. The method of claim 2 , wherein:

the configuration data received by a particular computing device is received by a local controller executing on the particular computing device; and

the local controller uses the received configuration data to configure at least one forwarding element also executing on the particular computing device to implement at least one of the logical network elements that spans the particular site.

4. The method of claim 1 , wherein the definition of the logical network further specifies a plurality of logical network policies, including forwarding policies, security policies, and service policies.

5. The method of claim 1 further comprising determining a span attribute for a first logical network element based on (i) a defined span attribute of a second logical network element and (ii) a relationship between the first and second logical network elements.

6. The method of claim 1 , wherein providing a particular identified portion of the logical network definition to a particular local manager comprises writing the particular identified portion of the logical network definition to a file and transmitting the file to the particular local manager over a network.

7. The method of claim 1 , wherein the span attribute for a particular logical network element in the logical network definition comprises a set of site identifiers that are each associated with one of the plurality of sites.

8. A non-transitory machine-readable medium storing a global manager program which when executed by at least one processing unit defines a logical network that spans a plurality of sites and is managed at each site by a local manager, the program comprising sets of instructions for:

storing a definition of the logical network that spans the plurality of sites, the definition specifying (i) a plurality of logical network elements, (ii) relationships between the elements, and (iii) for each of at least a subset of the elements, a span attribute indicating a set of sites spanned by the element;

based on the span attributes and relationships between the elements, identifying for each respective site a portion of the logical network definition that is relevant for the respective site; and

providing, to the local manager of each respective site, the portion of the logical network definition that is identified for the respective site, the local manager being configured to apply a set of priority rules to determine an override of a global configuration by a local configuration update event;

wherein:

the global manager comprises a primary global manager and a secondary global manager, the primary global manager being asynchronously synchronized with the secondary global manager as a standby for failover scenarios, the secondary global manager being configured at a different physical site than the primary global manager and maintains an independent database;

a particular local manager at a particular site creates and stores a local definition of the logical network based on the logical network definition portion received from the global manager;

the portion received by the particular local manager from the global manager is a first logical network definition; and

the particular local manager directly receives a second logical network definition from a user and updates the local definition of the logical network based on the second logical network definition;

the particular local manager stores the logical network definition portion received from the global manager as a read-only definition that is not modified when updating the local definition of the logical network.

9. The non-transitory machine-readable medium of claim 8 , wherein:

a particular local manager at a particular site uses the portion of the logical network definition identified for the particular site to generate and provide a set of configuration data to a cluster of controllers at the particular site; and

the cluster of controllers (i) receives the configuration data from the particular local manager, (ii) identifies a set of computing devices at the particular site to implement the logical network elements that span the particular site, and (i) distributes the configuration data to the identified set of computing devices.

10. The non-transitory machine-readable medium of claim 9 , wherein:

the configuration data received by a particular computing device is received by a local controller executing on the particular computing device; and

the local controller uses the received configuration data to configure at least one forwarding element also executing on the particular computing device to implement at least one of the logical network elements that spans the particular site.

11. The non-transitory machine-readable medium of claim 8 , wherein the definition of the logical network further specifies a plurality of logical network policies, including forwarding policies, security policies, and service policies.

12. The non-transitory machine-readable medium of claim 8 , wherein the global manager program further comprises a set of instructions for determining a span attribute for a first logical network element based on (i) a defined span attribute of a second logical network element and (ii) a relationship between the first and second logical network elements.

13. The non-transitory machine-readable medium of claim 8 , wherein the set of instructions for providing a particular identified portion of the logical network definition to a particular local manager comprises a set of instructions for writing the particular identified portion of the logical network definition to a file and transmitting the file to the particular local manager over a network.

14. The non-transitory machine-readable medium of claim 8 , wherein the span attribute for a particular logical network element in the logical network definition comprises a set of site identifiers that are each associated with one of the plurality of sites.

Assignments (3)

Priority Claims (1)

Continuity (2)

References Cited (400)