Software defined branch single internet protocol orchestration
Systems, methods, and computer-readable media are provided for software defined branch single IP orchestration. An example method can include establishing, by a controller, a secure tunnel agent to an orchestrator, generating, by the controller, a single IP address on a virtual router for a virtual branch site, and monitoring, by the controller, reachability of the single IP address on the virtual router.
1. A method comprising:
establishing, by a network appliance implemented through a virtualized infrastructure of a virtual branch site, a secure tunnel agent to an orchestrator, the secure tunnel agent and the orchestrator being components of the virtualized infrastructure of the virtual branch site;
generating, by the network appliance, a single IP address on a virtual router for the virtual branch site;
monitoring, by the network appliance, reachability of the single IP address on the virtual router; and
controlling use of the single IP address between the network appliance and the virtual router based on the reachability of the single IP address on the virtual router to maintain a connection between the orchestrator and the virtual branch site through the secure tunnel agent when the virtual router is unreachable,
wherein the network appliance is a Network Function Virtualization Infrastructure Software (NFVIS), the monitoring of the reachability of the single IP address on the virtual router includes receiving, by the NFVIS, gateway reachability data from a gateway via the virtual router.
2. The method of claim 1 , further comprising:
determining, by the network appliance, that the reachability of the single IP address on the virtual router is lost; and
reallocating, by the network appliance, the single IP address.
3. The method of claim 2 , further comprising:
managing, by the orchestrator, the virtual branch site when connectivity with the virtual router via the single IP address is lost.
4. The method of claim 1 , further comprising:
pushing, from the orchestrator, a site specific configuration to the virtual branch site.
5. The method of claim 1 , wherein the monitoring of the reachability of the single IP address on the virtual router includes receiving, by the NFVIS, health-related data of the virtual router.
6. A system comprising:
one or more processors; and
at least one computer-readable storage medium having stored therein instructions which, when executed by the one or more processors, cause the system to:
establish, by a network appliance implemented through a virtualized infrastructure of a virtual branch site, a secure tunnel agent to an orchestrator, the secure tunnel agent and the orchestrator being components of the virtualized infrastructure of the virtual branch site;
generate, by the network appliance, a single IP address on a virtual router for the virtual branch site;
monitor, by the network appliance, reachability of the single IP address on the virtual router; and
control use of the single IP address between the network appliance and the virtual router based on the reachability of the single IP address on the virtual router to maintain a connection between the orchestrator and the virtual branch site through the secure tunnel agent when the virtual router is unreachable,
wherein the network appliance is a Network Function Virtualization Infrastructure Software (NFVIS), the monitored reachability of the single IP address on the virtual router includes receiving, by the NFVIS, gateway reachability data from a gateway via the virtual router.
7. The system of claim 6 , wherein the instructions which, when executed by the one or more processors, cause the system to:
determine, by the network appliance, that the reachability of the single IP address on the virtual router is lost; and
reallocate, by the network appliance, the single IP address.
8. The system of claim 7 , wherein the instructions which, when executed by the one or more processors, cause the system to:
manage, by the orchestrator, the virtual branch site when connectivity with the virtual router via the single IP address is lost.
9. The system of claim 6 , wherein the instructions which, when executed by the one or more processors, cause the system to:
push, from the orchestrator, a site specific configuration to the virtual branch site.
10. The system of claim 6 , wherein the monitored reachability of the single IP address on the virtual router includes receiving, by the NFVIS, health-related data of the virtual router.
11. A non-transitory computer-readable storage medium comprising: instructions stored on the non-transitory computer-readable storage medium, the instructions, when executed by one or more processors, cause the one or more processors to:
establish, by a network appliance implemented through a virtualized infrastructure of a virtual branch site, a secure tunnel agent to an orchestrator, the secure tunnel agent and the orchestrator being components of the virtualized infrastructure of the virtual branch site;
generate, by the network appliance, a single IP address on a virtual router for the virtual branch site;
monitor, by the network appliance, reachability of the single IP address on the virtual router; and
control use of the single IP address between the network appliance and the virtual router based on the reachability of the single IP address on the virtual router to maintain a connection between the orchestrator and the virtual branch site through the secure tunnel agent when the virtual router is unreachable,
wherein the network appliance is a Network Function Virtualization Infrastructure Software (NFVIS), the monitored reachability of the single IP address on the virtual router including receiving, by the NFVIS, gateway reachability data from a gateway via the virtual router.
12. The non-transitory computer-readable storage medium of claim 11 , wherein the instructions, when executed by the one or more processors, cause the one or more processors to:
determine, by the network appliance, that the reachability of the single IP address on the virtual router is lost; and
reallocate, by the network appliance, the single IP address.
13. The non-transitory computer-readable storage medium of claim 12 , wherein the instructions, when executed by the one or more processors, cause the one or more processors to:
manage, by the orchestrator, the virtual branch site when connectivity with the virtual router via the single IP address is lost.
14. The non-transitory computer-readable storage medium of claim 11 , wherein the instructions, when executed by the one or more processors, cause the one or more processors to:
push, from the orchestrator, a site specific configuration to the virtual branch site.
15. The non-transitory computer-readable storage medium of claim 11 , wherein the monitored reachability of the single IP address on the virtual router including receiving, by the NFVIS, health-related data of the virtual router.