Multi-region virtual overlay wide area network
Disclosed herein are systems and methods for the creation, management, and utilization of a multi-region virtual overlay wide area network from a plurality of special purpose network appliances. In exemplary embodiments, multiple regions are created for the virtual overlay wide area network, each region having its own network topology. At least one network appliance from each region is in communication with at least one network appliance from each other region, for inter-region connectivity within the virtual overlay wide area network. A subnet sharing protocol can be utilized to exchange routing information among each network appliance within each region, and between each region.
1. A method for creating a multi-region virtual overlay network, the method comprising:
determining, by a first network appliance, that the first network appliance is assigned to a first regional subnetwork within a virtual overlay wide area network, the first network appliance having a first role within the first regional subnetwork;
generating a message header for a subnet message, wherein the message header comprises an identifier associated with the first network appliance, an identifier associated with the first regional subnetwork, and the first role of the first network appliance, and wherein the message header is associated with at least one routing information; and
sending the message header to a second network appliance in a second regional subnetwork within the virtual overlay wide area network, wherein a list of subnets maintained by the second network appliance is updated based on the message header and the routing information.
2. The method of claim 1 , wherein the first network appliance maintains a first subnet table;
wherein the method further comprises:
determining that an option to include one or more local subnets of the first subnet table is selected; and
including the one or more local subnets of the first subnet table in the message header.
3. The method of claim 2 , wherein the message header triggers an update to a second subnet table maintained at the second network appliance, and wherein the first role is associated with routing information in the second subnet table.
4. The method of claim 2 , wherein the first subnet table includes a first metric indicative of a priority associated with a first subnet.
5. The method of claim 4 , wherein a second message header is received by the second network appliance from a third network appliance, wherein the second message header includes a second metric associated with a second subnet, and wherein at least one subnet is selected over the second subnet based on a comparison between the first metric and the second metric.
6. The method of claim 1 , further comprising:
determining that a first piece of routing information is associated with a first version;
determining that a second piece of routing information is associated with a second version;
comparing the first version and the second version; and
based on the comparison, selecting the first piece of routing information for inclusion into the message header.
7. The method of claim 1 , wherein the first role indicates a hub in a first hub-and-spoke network topology associated with the first regional subnetwork, wherein the first hub-and-spoke network topology includes at least a first and a second spokes, and
wherein the method further comprises:
including routing information from the first spoke in the message header; and
sending the message header to the second spoke.
8. The method of claim 7 , wherein the first and second spokes exchange routing information through the first network appliance.
9. The method of claim 7 , further comprising:
marking the routing information as learned from a spoke.
10. The method of claim 1 , wherein a second role associated with the second network appliance indicates a hub in a hub-and-spoke network topology associated with the second regional subnetwork, wherein the hub-and-spoke network topology includes a spoke, and wherein the message header is transmitted to the spoke by the second network appliance based on a determination that the second network appliance is a hub.
11. The method of claim 1 , wherein the first role indicates a hub in a first hub-and-spoke network topology associated with the first regional subnetwork; and
wherein the method further comprises:
determining that a tunnel couples the first network appliance and the second network appliance; and
sending the message header to the second network device via the tunnel.
12. The method of claim 1 , further comprising:
categorizing a first piece of routing information as a route learned via subnet sharing; and
categorizing a second piece routing information as a route learned locally by the first network appliance.
13. The method of claim 1 , wherein the first role indicates a spoke in a first hub-and-spoke network topology associated with the first regional subnetwork, wherein a second role associated with the second network appliance is indicates a hub in a second hub-and-spoke network topology associated with the second regional subnetwork, wherein routing information provided by at least one spoke in the second hub-and-spoke network to the second network appliance is transmitted by the second network appliance to the first network appliance, and wherein routing information provided to the second network appliance from a hub is not received by the first network appliance.
14. The method of claim 13 , wherein the routing information provided by the at least one spoke of the second hub-and-spoke network is associated with a metric;
wherein the method further comprises:
selecting, based on the metric, the routing information provided by the second network appliance over routing information provided by a hub of the first hub-and-spoke network topology.
15. The method of claim 1 , wherein the first regional subnetwork is configured in a full mesh topology; and
wherein all network appliances, including the first network appliance, in the first regional subnetwork are configured as spokes.
16. The method of claim 1 , wherein the first role indicates a hub in a first hub-and-spoke network topology associated with the first regional subnetwork, wherein the first hub-and-spoke network topology includes a third network appliance, wherein the second regional subnetwork includes a fourth network appliance, wherein the third network appliance receives routing information from a peer that is not part of the virtual overlay wide area network, wherein the routing information is provided to the fourth network appliance through the first network appliance and the second network appliance.
17. A system operating as a first network appliance in a multi-region virtual overlay network for a software-defined wide area network, the system comprising:
at least one processor; and
a memory storing instructions that, when executed by the at least one processor, cause the system to perform a method, the method comprising:
maintaining a local subnet table that includes a first set of subnet information learned from packets received from a second network appliance, wherein the first set of subnet information is associated with a first transaction identifier;
receiving a second set of subnet information from the second network appliance, wherein the second set of subnet information is included in a packet with a message header comprising an identifier of the second network appliance, an identifier associated with a regional subnetwork of the second network appliance, a role of the second network appliance, and a second transaction identifier; and
based on the second transaction identifier, replacing the first set of subnet information in the local subnet table with the second set of subnet information.
18. The system of claim 17 , wherein the method further comprises:
updating the first transaction identifier with the second transaction identifier.
19. The system of claim 17 , wherein the first network appliance operates as a hub in a hub-and-spoke topology; and
wherein the method further comprises:
distributing the second set of information to one or more spokes in the hub-and-spoke topology.
20. The system of claim 19 , wherein a metric associated with a distributed route is increased, and wherein subnet information learned from a non-spoke peer of the hub-and-spoke topology takes precedence over the distributed route based on the metric.
21. A non-transitory computer-readable storage medium including instructions that, when executed by at least one processor of a computing system, cause the computing system to perform a method for creating a multi-region virtual overlay network for a software-defined wide area network, the method comprising:
receiving a message header of a subnet message, wherein the message header comprises an identifier associated with a first network appliance, an identifier associated with a first regional subnetwork, and a role of the first network appliance, wherein the message header is associated with a packet comprising at least one piece of routing information;
determining whether to send the piece of routing information to at least one spoke in a hub-and-spoke topology associated with a second regional subnetwork based on the role of the first network appliance; and
based on the determination, sending the routing information to the at least one spoke in the hub-and-spoke topology associated with the second regional subnetwork.