Network service discovery
Techniques are disclosed for a computing system comprising processing circuitry having access to a storage device, the processing circuitry configured to: generate, by a network controller executing in a software defined network (SDN), an advertisement in a first network cluster executing within a container orchestration platform of the SDN, wherein the advertisement conforms to a routing protocol and comprises information identifying a network service executing in the first network cluster, wherein the network service exposes a backend of a network application to the container orchestration platform of the SDN; and broadcast, by the network controller and to a second network cluster executing within the container orchestration platform of the SDN, the advertisement in accordance with the routing protocol.
1 . A computing system comprising processing circuitry having access to a storage device, the processing circuitry configured to:
generate, by a network controller executing in a software defined network (SDN), a network service directory in a first network cluster based on an advertisement, wherein the advertisement conforms to a routing protocol and comprises information identifying a network service executing in a second network cluster, wherein the network service exposes a backend of a network application to a container orchestration platform of the SDN; and
add, by the network controller, one or more virtual execution elements executing on the first network cluster as endpoints of the network service, wherein the endpoints run the network application.
2 . The computing system of claim 1 , wherein the processing circuitry is further configured to:
generate, by the network controller, the advertisement in the second network cluster; and
broadcast, by the network controller and to the first network cluster executing within the container orchestration platform of the SDN, the advertisement in accordance with the routing protocol.
3 . The system of claim 1 , wherein the processing circuitry is further configured to implement a network policy to forward, by one or more virtual routers executing in the SDN, network traffic between the endpoints of the network service.
4 . The system of claim 3 , wherein the one or more virtual routers comprise a first virtual router executing in the first network cluster and a second virtual router executing in the second network cluster, and wherein the processing circuitry is further configured to:
link a first routing table of the first virtual router and a second routing table of the second virtual router to enable communication between the endpoints of the network service; and
implement a load balancer to regulate network traffic between the endpoints of the network service.
5 . The system of claim 3 , wherein to add the one or more virtual execution elements executing on the first network cluster as endpoints of the network service, the processing circuitry is further configured to:
assign, with a configuration node executing in the first network cluster, the one or more virtual execution elements one or more respective internet protocol (IP) addresses based on the network service directory; and
store the IP addresses in the one or more virtual routers.
6 . The system of claim 1 , wherein the routing protocol includes a multi-protocol border gateway protocol (MP-BGP).
7 . The system of claim 1 , wherein the advertisement includes a tuple of a fully-qualified domain name (FQDN) of the network service, a protocol used by the network service, and a port used by the network service.
8 . The system of claim 1 , wherein the processing circuitry is further configured to receive the advertisement with a border gateway protocol controller executing in the first network cluster.
9 . A method comprising:
receiving, by a network controller executing in a software defined network (SDN), an advertisement, wherein the advertisement conforms to a routing protocol and comprises information identifying a network service executing in a second network cluster, wherein the network service exposes a backend of a network application to a container orchestration platform of the SDN;
generating, by the network controller, a network service directory in a first network cluster based on the advertisement; and
adding, by the network controller, one or more virtual execution elements executing on the first network cluster as endpoints of the network service, wherein the endpoints run the network application.
10 . The method of claim 9 further comprising:
generating, by the network controller, the advertisement in the second network cluster; and
broadcasting, by the network controller and to the first network cluster executing within the container orchestration platform of the SDN, the advertisement in accordance with the routing protocol.
11 . The method of claim 9 , wherein adding the one or more virtual execution elements executing on the first network cluster as endpoints of the network service comprises:
assigning, with a configuration node executing in the first network cluster, the one or more virtual execution elements one or more respective internet protocol (IP) addresses based on the network service directory; and
storing the IP addresses in one or more virtual routers.
12 . The method of claim 11 , wherein the one or more virtual routers comprise a first virtual router executing in the first network cluster and a second virtual router executing in the second network cluster, and the method further comprises:
linking a first routing table of the first virtual router a second routing table of the second virtual router to enable communication between the endpoints of the network service; and
implementing a load balancer to regulate network traffic between the endpoints of the network service.
13 . The method of claim 9 , further comprising implementing a network traffic load balancing network policy to forward network traffic between the endpoints of the network service.
14 . The method of claim 9 , wherein the routing protocol includes a multi-protocol border gateway protocol (MP-BGP).
15 . The method of claim 9 , wherein the advertisement includes a tuple of a fully-qualified domain name (FQDN) of the network service, a protocol used by the network service, and a port used by the network service.
16 . The method of claim 9 , further comprising receiving the advertisement with a border gateway protocol controller executing in the first network cluster.
17 . A non-transitory computer-readable storage medium comprising instructions that, when executed, are configured to cause processing circuitry of a network system to:
generate, by a network controller executing in a software defined network (SDN), a network service directory in a first network cluster based on an advertisement, wherein the advertisement conforms to a routing protocol and comprises information identifying a network service executing in a second network cluster, wherein the network service exposes a backend of a network application to a container orchestration platform of the SDN; and
add, by the network controller, one or more virtual execution elements executing on the first network cluster as endpoints of the network service, wherein the endpoints run the network application.
18 . The non-transitory computer-readable storage medium of claim 17 , wherein the instructions are further configured to cause the processing circuitry of the network system to:
generate, by the network controller, the advertisement in the second network cluster; and
broadcast, by the network controller and to the first network cluster executing within the container orchestration platform of the SDN, the advertisement in accordance with the routing protocol.
19 . The non-transitory computer-readable storage medium of claim 17 , wherein the routing protocol includes a multi-protocol border gateway protocol (MP-BGP).
20 . The non-transitory computer-readable storage medium of claim 17 , wherein the advertisement includes a tuple of a fully-qualified domain name (FQDN) of the network service, a protocol used by the network service, and a port used by the network service.