Cloud-to-cloud interface
In general, this disclosure describes a cloud exchange (or “cloud exchange”) that offers a cloud-to-cloud interface (CCI) for interconnecting cloud services to tenants within public clouds. As described herein, the cloud exchange may be configured with a cloud-to-cloud interface that enables tenant applications of a public cloud to subscribe to and communicate with cloud services, using an end-to-end layer 3 path, in some cases without requiring a separate routing protocol session with a public edge device for the public cloud. In some examples, the public cloud provides a virtual layer 2 connection from a tenant within a public cloud to a routing instance of the cloud exchange, and the cloud exchange uses the routing instance to route service traffic between the tenant and the cloud services.
1. A cloud exchange comprising:
a network configured with:
a first cloud customer virtual routing and forwarding instance (VRF); and
a first cloud service provider (CSP) VRF; and
a first cloud-to-cloud interface comprising a virtual layer 2 connection between the network and a router of a first tenant of a public cloud, wherein the virtual layer 2 connection operates over an access link connecting the network and an edge router of the public cloud, and wherein the virtual layer 2 connection terminates in the first cloud customer VRF,
wherein the network is configured to use the first cloud-to-cloud interface to exchange, via a first customer peering session, first route information with the router of the first tenant of the public cloud,
wherein the network is configured to use the first CSP VRF to exchange, via a first CSP peering session, second route information with a first CSP,
wherein the network is configured to exchange the first route information and the second route information between the first cloud customer VRF and the first CSP VRF, and
wherein the network receives, from the first tenant of the public cloud, service traffic for the first CSP and forwards, using the first cloud customer VRF and the first CSP VRF, the service traffic to the first CSP based on at least one of the first route information or the second route information.
2. The cloud exchange of claim 1 ,
the network further configured with:
a second cloud customer VRF, and
a second CSP VRF; and
a second cloud-to-cloud interface comprising a virtual layer 2 connection between the network and a router of a second tenant of a public cloud, wherein the virtual layer 2 connection for the second cloud-to-cloud interface operates over the access link connecting the network and the edge router of the public cloud, and wherein the virtual layer 2 connection for the second cloud-to-cloud interface terminates in the second cloud customer VRF,
wherein the network is configured to use the second cloud-to-cloud interface to exchange, via a second customer peering session, third route information with the router of the second tenant of the public cloud,
wherein the network is configured to use the second CSP VRF to exchange, via a second CSP peering session, fourth route information with a second CSP,
wherein the network is configured to exchange the third route information and the fourth route information between the second cloud customer VRF and the second CSP VRF, and
wherein the network receives, from the second tenant of the public cloud, service traffic for the second CSP and forwards, using the second cloud customer VRF and the second CSP VRF, the service traffic to the second CSP based on at least one of the third route information or the fourth route information.
3. The cloud exchange of claim 1 ,
wherein the network is further configured with a second cloud customer VRF;
wherein the network is configured to use the second cloud customer VRF to exchange, via a second customer peering session, third route information with a router of a second tenant of the public cloud,
wherein the network is configured to exchange the third route information and the second route information between the second cloud customer VRF and the first CSP VRF, and
wherein the network receives, from the second tenant of the public cloud, service traffic for the first CSP and forwards, using the second cloud customer VRF and the first CSP VRF, the service traffic to the first CSP based on at least one of the third route information or the second route information.
4. The cloud exchange of claim 3 , wherein the first customer peering session and the second customer peering session are different.
5. The cloud exchange of claim 1 , wherein the cloud exchange and the first CSP are co-located.
6. The cloud exchange of claim 1 , wherein the public cloud offers at least one of Platform-as-a-Service, Infrastructure-as-a-Service, Software-as-a-Service, or Distributed Denial of Service-as-a-Service services.
7. The cloud exchange of claim 1 , further comprising:
a customer portal configured to output a list of cloud services available via one or more CSPs connected to the cloud exchange,
wherein the customer portal is configured to receive user input from an agent associated with the first tenant of the public cloud, the user input indicating selection of a cloud service offered by a first CSP network connected to the cloud exchange via the first CSP VRF, and
wherein, in response to the user input, the first cloud customer VRF is configured to exchange the second route information with the first CSP VRF, the second route information comprising at least one route to the cloud service offered by the first CSP network.
8. The cloud exchange of claim 7 , wherein the second route information comprises at least one route to the first tenant of the public cloud.
9. The cloud exchange of claim 1 , wherein the network is further configured to apply a network address translation (NAT) service to translate private addresses for the first tenant of the public cloud.
10. A method comprising:
configuring a network with:
a first cloud customer virtual routing and forwarding instance (VRF), and
a first cloud service provider (CSP) VRF to exchange, via a first CSP peering session, second route information with a first CSP, and to exchange first route information and the second route information with the first cloud customer VRF;
configuring a first cloud-to-cloud interface including a virtual layer 2 connection between the network and a router of a first tenant of a public cloud, wherein the virtual layer 2 connection operates over an access link connecting the network and an edge router of the public cloud, and wherein the virtual layer 2 connection terminates in the first cloud customer VRF;
configuring the network to use the first cloud-to-cloud interface to exchange, via a first customer peering session, first route information with the router of the first tenant of the public cloud;
configuring the network to exchange the first route information and the second route information between the first cloud customer VRF and the first CSP VRF;
receiving, at the network, service traffic from the first tenant of the public cloud for the first CSP; and
forwarding, by the network using the first cloud customer VRF and the first CSP VRF, the service traffic to the first CSP based on at least one of the first route information or the second route information.
11. The method of claim 10 , further comprising:
configuring the network with:
a second cloud customer VRF;
a second CSP VRF to exchange, via a second CSP peering session, fourth route information with a second CSP;
configuring a second cloud-to-cloud interface comprising a virtual layer 2 connection between the network and a router of a second tenant of a public cloud, wherein the virtual layer 2 connection for the second cloud-to-cloud interface operates over the access link connecting the network and the edge router of the public cloud, and wherein the virtual layer 2 connection for the second cloud-to-cloud interface terminates in the second cloud customer VRF,
configuring the network to use the second cloud-to-cloud interface to exchange, via a second customer peering session, third route information with the router of the second tenant of the public cloud,
configuring the network to exchange the third route information and the fourth route information between the second cloud customer VRF and the second CSP VRF, and
receiving, at the network, service traffic from the second tenant of the public cloud for the second CSP; and
forwarding, by the network using the second cloud customer VRF and the second CSP VRF, the service traffic to the second CSP based on at least one of the third route information or the fourth route information.
12. The method of claim 10 , further comprising:
configuring the network with a second cloud customer VRF to exchange, via a second customer peering session, third route information with a router of a second tenant of the public cloud;
configuring the network to exchange the third route information and the second route information between the second cloud customer VRF and the first CSP VRF;
receiving, at the network, service traffic from the second tenant of the public cloud for the first CSP; and
forwarding, by the network using the second cloud customer VRF and the first CSP VRF, the service traffic to the first CSP based on at least one of the third route information or the second route information.
13. The method of claim 12 , wherein the first customer peering session and the second customer peering session are different.
14. The method of claim 10 , wherein the cloud exchange and the first CSP are co-located.
15. The method of claim 10 , wherein the public cloud offers at least one of Platform-as-a-Service, Infrastructure-as-a-Service, Software-as-a-Service, or Distributed Denial of Service-as-a-Service services.
16. The method of claim 10 , further comprising:
configuring a customer portal to:
output a list of cloud services available via one or more CSPs connected to the cloud exchange; and
receive user input from an agent associated with the first tenant of the public cloud, the user input indicating selection of a cloud service offered by a first CSP network connected to the cloud exchange via the first CSP VRF; and
in response to the user input, exchanging, by the first cloud customer VRF, the second route information with the first CSP VRF, the second route information comprising at least one route to the cloud service offered by the first CSP network.
17. The method of claim 16 , wherein the second route information comprises at least one route to the first tenant of the public cloud.
18. The method of claim 10 , further comprising configuring the network to apply a network address translation (NAT) service to translate private addresses for the first tenant of the public cloud.
19. A non-transitory computer readable storage medium comprising instructions that when executed cause one or more processors to:
configure a network with:
a first cloud customer virtual routing and forwarding instance (VRF); and
a first cloud service provider (CSP) VRF to exchange, via a first CSP peering session, second route information with a first CSP, and to exchange first route information and the second route information with the first cloud customer VRF;
configure a first cloud-to-cloud interface including a virtual layer 2 connection between the network and a router of a first tenant of a public cloud, wherein the virtual layer 2 connection operates over an access link connecting the network and an edge router of the public cloud, and wherein the virtual layer 2 connection terminates in the first cloud customer VRF;
configure the network to use the first cloud-to-cloud interface to exchange, via a first customer peering session, first route information with the router of the first tenant of the public cloud;
receive, at the network, service traffic from the first tenant of the public cloud for the first CSP; and
forward, by the network, using the first cloud customer VRF and the first CSP VRF, the service traffic to the first CSP based on at least one of the first route information or the second route information.
20. The non-transitory computer readable storage medium of claim 19 , wherein the instructions further cause the one or more processors to:
configure the network with:
a second cloud customer VRF;
a second CSP VRF to exchange, via a second CSP peering session, fourth route information with a second CSP;
configure a second cloud-to-cloud interface comprising a virtual layer 2 connection between the network and a router of a second tenant of a public cloud, wherein the virtual layer 2 connection for the second cloud-to-cloud interface operates over the access link connecting the network and the edge router of the public cloud, and wherein the virtual layer 2 connection for the second cloud-to-cloud interface terminates in the second cloud customer VRF;
configure the network to use the second cloud-to-cloud interface to exchange, via a second customer peering session, third route information with the router of the second tenant of the public cloud;
configure the network to exchange the third route information and the fourth route information between the second cloud customer VRF and the second CSP VRF;
receive, at the network, service traffic from the second tenant of the public cloud for the second CSP; and
forward, by the network using the second cloud customer VRF and the second CSP VRF, the service traffic to the second CSP based on at least one of the third route information or the fourth route information.