Scalable tenant networks

1. A system comprising:

a local controller configured to:

monitor resource utilization of the system;

receive a policy template that includes one or more configurable network policy elements from a central controller;

calculate a network virtualization policy for at least one virtualized computing resource implemented within one or more nodes associated with the local controller, the network virtualization policy being based at least on the received policy template and the monitored resource utilization; and

distribute the network virtualization policy to one or more network infrastructure elements and/or to the one or more nodes; and

a local store configured to store the monitored resource utilization, the policy template, and the calculated network virtualization policy.

2. The system of claim 1 , wherein the local controller is further configured to request, based at least on the monitored resource utilization and from the central controller, an updated policy template that indicates a change in the configurable network policy elements, the change providing additional networking resources.

3. The system of claim 1 , wherein the at least one virtualized computing resource includes a first virtual machine and/or a container executing within a second virtual machine.

4. The system of claim 3 , wherein the one or more configurable network policy elements includes a plurality of sets of network addresses that are associated with each other based on a policy relationship between the first virtual machine and the second virtual machine, the local controller configured to allocate at least one network address selected from the plurality of sets of network addresses to the at least one virtualized computing resource.

5. The system of claim 3 , wherein the one or more configurable network policy elements includes a plurality of sets of security policies that are associated with each other based on a policy relationship between the first virtual machine and the second virtual machine, the local controller configured to allocate at least one security policy selected from the plurality of sets of security policies to the at least one virtualized computing resource.

6. The system of claim 3 , wherein the one or more network infrastructure elements includes at least one virtualized network function instantiated within the first virtual machine, the local controller configured to monitor and update a policy that is tailored to the virtualized network function.

7. The system of claim 3 , wherein the local controller is configured to use one or more IP anchors to ensure connectivity to at least one virtualized network function instantiated within the first virtual machine, the local controller configured to monitor and update a policy that is tailored to the at least one virtualized network function and that is associated with the one or more IP anchors.

8. The system of claim 1 , wherein the local controller is configured to use one or more IP anchors to ensure connectivity to at least one node of the one or more nodes that has received a policy update from the local controller.

9. The system of claim 1 , wherein the local controller is configured to provide discoverability services for a virtual machine, a container, or a virtualized network function that has migrated to another system.

10. A method comprising:

monitoring, by a local controller, resource utilization of a system;

receiving, at the local controller and from a central controller, a policy template that includes one or more configurable network policy elements;

calculating, based at least on the received policy template and the monitored resource utilization, a network virtualization policy for at least one virtualized computing resource implemented within one or more nodes associated with the local controller; and

distributing, by the local controller, the network virtualization policy to one or more network infrastructure elements and/or to the one or more nodes.

11. The method of claim 10 , further comprising requesting, based at least on the monitored resource utilization and from the central controller, an updated policy template that indicates a change in the configurable network policy elements, the change providing additional networking resources.

12. The method of claim 10 , wherein the at least one virtualized computing resource includes a first virtual machine and/or a container executing within a second virtual machine.

13. The method of claim 12 , wherein the one or more configurable network policy elements includes a plurality of sets of network addresses that are associated with each other based on a relationship between the first virtual machine and the second virtual machine and wherein the method further comprises distributing, by the local controller at least one network address selected from the plurality of sets of network addresses to the one or more nodes.

14. The method of claim 12 , wherein the one or more configurable network policy elements includes at least a plurality of sets of security policies that are associated with each other based on a routing relationship between the first virtual machine and the second virtual machine, the method further comprising allocating at least one security policy selected from the plurality of sets of security policies to the at least one virtualized computing resource.

15. The method of claim 12 , wherein the one or more network infrastructure elements includes at least one virtualized network function instantiated within the first virtual machine, the method further comprising monitoring and updating a policy that is tailored to the virtualized network function.

16. The method of claim 12 , further comprising:

using one or more IP anchors to ensure connectivity to at least one virtualized network function instantiated within the first virtual machine; and

monitoring and updating a policy that is tailored to the at least one virtualized network function and that is associated with the one or more IP anchors.

17. The method of claim 10 , further comprising using one or more IP anchors to ensure connectivity to at least one node of the one or more nodes that has received a policy update from the local controller.

18. The method of claim 10 , further comprising providing discoverability services for a virtual machine, a container, or a virtualized network function that has migrated to another system.

19. A system comprising:

one or more processors;

computer-readable media;

programming instructions stored on the computer-readable media and executable by the one or more processors to:

receive a policy template for a local environment that includes one or more nodes, the policy template indicating one or more configurable network policy elements allocated to one or more virtualized computing resources instantiated within the one or more nodes;

determine, based at least in part on the policy template, a network virtualization policy for at least one virtualized computing resource instantiated within the one or more nodes;

distribute the network virtualization policy to one or more network infrastructure elements and/or to the one or more nodes;

monitor network resource utilization within the one or more nodes; and

request an updated policy template that indicates a change in the one or more configurable network policy elements to provide additional network resources allocated to the one or more virtualized computing resources instantiated within the one or more nodes or to one or more new virtualized computing resources instantiated within the one or more nodes.

20. The system of claim 19 , wherein the programming instructions are further executable by the one or more processors to:

receive the updated policy template responsive to the requesting the updated policy template; and

determine an updated network virtualization policy for one or more of the at least one virtualized computing resource or a new virtualized computing resource.