Layer-2 network extension over layer-3 network using layer-2 metadata
Techniques are disclosed for session-based routing within Open Systems Interconnection (OSI) Model Layer-2 (L2) networks extended over Layer-3 (L3) networks. In one example, L2 networks connect a first client device to a first router and a second client device to a second router. An L3 network connects the first and second routers. The first router receives, from the first client device, an L2 frame destined for the second client device. The first router generates an L3 packet comprising an L3 header specifying L3 addresses of the first and second routers, a first portion of metadata comprising L2 addresses for the first and second client devices, and a second portion of metadata comprising L3 addresses for the first and second client devices, and forwards the L3 packet to the second router. The second router recovers the L2 frame from the metadata and forwards the L2 frame to the second client device.
1. A method comprising:
receiving, by a first network device and via a first network operating at a data-link layer, a data link-layer frame originating from a first client device and destined for a second client device, wherein the first network device is connected to a second network device via a second network operating at a network layer, and wherein the second network device is connected to the second client device via a third network operating at the data-link layer;
generating, by the first network device and in response to receiving the data link-layer frame, a network-layer packet comprising:
a network-layer header specifying network-layer address information for the first network device and the second network device; and
metadata specifying data link-layer address information for the first client device and the second client device; and
forwarding, by the first network device, via the second network operating at the network layer, and to the second network device, the network-layer packet.
2. The method of claim 1 ,
wherein the first network operating at the data-link layer comprises a first Open Systems Interconnection (OSI) Model Layer-2 (L2) network;
wherein the second network operating at the network layer comprises an OSI Model Layer-3 (L3) network; and
wherein the third network operating at the data-link layer comprises a second OSI Model L2 network.
3. The method of claim 1 ,
wherein the data link-layer frame comprises an Ethernet frame, and
wherein the network-layer packet comprises at least one of a Transmission Control Protocol (TCP) packet or a User Datagram Protocol (UDP) packet.
4. The method of claim 1 ,
wherein the data link-layer address information for the first client device and the second client device comprises a source Media Access Control (MAC) address of the first client device and a destination MAC address of the second client device, and
wherein the network-layer information for the first network device and the second network device comprises a source Internet Protocol (IP) address and source port of the first network device and a destination IP address and destination port of the second network device.
5. The method of claim 1 , wherein the metadata comprises:
a first portion specifying the data link-layer address information for the first client device and the second client device; and
a second portion specifying a Virtual Local Area Network (VLAN) tag for a VLAN to which the first client device is assigned.
6. The method of claim 1 , wherein the metadata comprises:
a first portion specifying the data link-layer address information for the first client device and the second client device; and
a second portion specifying a Virtual eXtensible Local Area Network (VXLAN) tag for a VXLAN to which the first client device is assigned.
7. The method of claim 1 , wherein the metadata comprises:
a first portion specifying the data link-layer address information for the first client device and the second client device; and
a second portion specifying a Virtual Local Area Network (VLAN) Q-in-Q tag stack comprising a plurality of VLAN tags.
8. The method of claim 1 ,
wherein the metadata comprises:
a first portion specifying the data link-layer address information for the first client device and the second client device; and
a second portion specifying network-layer address information for the first client device and the second client device, and
wherein generating the network-layer packet comprises performing a network-layer translation of the data link-layer address information for the first client device and the second client device to obtain the network-layer address information for the first client device and the second client device.
9. The method of claim 1 ,
wherein the metadata comprises:
a first portion specifying the data link-layer address information for the first client device and the second client device; and
a second portion specifying a bridge identifier identifying an interface of the second network device with which to forward a second data link-layer frame generated from the network-layer packet.
10. The method of claim 1 ,
wherein the data link-layer frame specifies the data link-layer address information for the first client device and the second client device, and
wherein the method further comprises:
receiving, by the first network device, one or more subsequent data link-layer frames, the one or more subsequent data link-layer frames specifying the data link-layer address information for the first client device and the second client device;
determining, by the first network device and based on the one or more subsequent data link-layer frames specifying the data link-layer address information for the first client device and the second client device, that the one or more subsequent data link-layer frames belong to a same session as the data link-layer frame;
generating, by the first network device and based on the determination that the one or more subsequent data link-layer frames belong to the same session as the data link-layer frame, one or more subsequent network-layer packets, wherein the one or more subsequent network-layer packets do not include the metadata specifying the data link-layer address information for the first client device and the second client device; and
forwarding, by the first network device, via the network-layer network, and to the second network device, the one or more subsequent network-layer packets.
11. A first network device comprising processing circuitry configured to:
receive, via a first network operating at a data-link layer, a data link-layer frame originating from a first client device and destined for a second client device, wherein the first network device is connected to a second network device via a second network operating at a network layer, and wherein the second network device is connected to the second client device via a third network operating at the data-link layer;
generate, in response to receiving the data link-layer frame, a network-layer packet comprising:
a network-layer header specifying network-layer address information for the first network device and the second network device; and
metadata specifying data link-layer address information for the first client device and the second client device; and
forward, via the second network operating at the network layer, and to the second network device, the network-layer packet.
12. The first network device of claim 11 ,
wherein the first network operating at the data-link layer comprises a first Open Systems Interconnection (OSI) Model Layer-2 (L2) network;
wherein the second network operating at the network layer comprises an OSI Model Layer-3 (L3) network; and
wherein the third network operating at the data-link layer comprises a second OSI Model L2 network.
13. The first network device of claim 11 ,
wherein the data link-layer frame comprises an Ethernet frame, and
wherein the network-layer packet comprises at least one of a Transmission Control Protocol (TCP) packet or a User Datagram Protocol (UDP) packet.
14. The first network device of claim 11 ,
wherein the data link-layer address information for the first client device and the second client device comprises a source Media Access Control (MAC) address of the first client device and a destination MAC address of the second client device, and
wherein the network-layer information for the first network device and the second network device comprises a source Internet Protocol (IP) address and source port of the first network device and a destination IP address and destination port of the second network device.
15. The first network device of claim 11 , wherein the metadata comprises:
a first portion specifying the data link-layer address information for the first client device and the second client device; and
a second portion specifying a Virtual Local Area Network (VLAN) tag for a VLAN to which the first client device is assigned.
16. The first network device of claim 11 , wherein the metadata comprises:
a first portion specifying the data link-layer address information for the first client device and the second client device; and
a second portion specifying a Virtual eXtensible Local Area Network (VXLAN) tag for a VXLAN to which the first client device is assigned.
17. The first network device of claim 11 , wherein the metadata comprises:
a first portion specifying the data link-layer address information for the first client device and the second client device; and
a second portion specifying a Virtual Local Area Network (VLAN) Q-in-Q tag stack comprising a plurality of VLAN tags.
18. The first network device of claim 11 ,
wherein the metadata comprises:
a first portion specifying the data link-layer address information for the first client device and the second client device; and
a second portion specifying a bridge identifier identifying an interface of the second network device with which to forward a second data link-layer frame generated from the network-layer packet.
19. The first network device of claim 11 ,
wherein the data link-layer frame specifies the data link-layer address information for the first client device and the second client device, and
wherein the processing circuitry is further configured to:
receive one or more subsequent data link-layer frames, the one or more subsequent data link-layer frames specifying the data link-layer address information for the first client device and the second client device;
determine, based on the one or more subsequent data link-layer frames specifying the data link-layer address information for the first client device and the second client device, that the one or more subsequent data link-layer frames belong to a same session as the data link-layer frame;
generate, based on the determination that the one or more subsequent data link-layer frames belong to the same session as the data link-layer frame, one or more subsequent network-layer packets, wherein the one or more subsequent network-layer packets do not include the metadata specifying the data link-layer address information for the first client device and the second client device; and
forward, via the network-layer network and to the second network device, the one or more subsequent network-layer packets.
20. A non-transitory, computer-readable medium comprising instructions that, when executed, are configured to cause processing circuitry of a first network device to:
receive, via a first network operating at a data-link layer, a data link-layer frame originating from a first client device and destined for a second client device, wherein the first network device is connected to a second network device via a second network operating at a network layer, and wherein the second network device is connected to the second client device via a third network operating at the data-link layer;
generate, in response to receiving the data link-layer frame, a network-layer packet comprising:
a network-layer header specifying network-layer address information for the first network device and the second network device; and
metadata specifying data link-layer address information for the first client device and the second client device; and
forward, via the second network operating at the network layer, and to the second network device, the network-layer packet.