Configuring a network-link for establishing communication between different cloud environments
Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.
1. A method comprising:
receiving, by a multi-cloud infrastructure included in a first cloud environment provided by a first cloud services provider, a request to create a network-link between a first virtual network in the first cloud environment and a second virtual network in a second cloud environment provided by a second cloud services provider that is different than the first cloud services provider, the first virtual network in the first cloud environment being previously created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment; and
creating the network-link between the first virtual network and the second virtual network, the creating comprising:
encapsulating, by a first link-enabling virtual network in the second cloud environment, traffic received from the second virtual network to generate encapsulated traffic;
forwarding, by a second link-enabling virtual network in the second cloud environment, the encapsulated traffic received from the first link-enabling virtual network to a hub virtual network included in the second cloud environment;
decapsulating, by a third link-enabling virtual network in the first cloud environment, the encapsulated traffic received from the hub virtual network included in the second cloud environment to generate decapsulated traffic, wherein the first link-enabling virtual network and the second link-enabling virtual network in the second cloud environment are created for each customer tenancy of a plurality of customer tenancies of the second cloud environment, and
transmitting, by the third link-enabling virtual network in the first cloud environment, the decapsulated traffic to the first virtual network in the first cloud environment.
2. The method of claim 1 , wherein each of the first link-enabling virtual network, the second link-enabling virtual network, and the third link-enabling virtual network is assigned a unique classless inter-domain routing IP address space.
3. The method of claim 1 , wherein the second cloud environment includes a plurality of customer tenancies, and wherein for each customer tenancy included in the plurality of customer tenancies, the third link-enabling virtual network is created in the first cloud environment.
4. The method of claim 3 , wherein the hub virtual network included in the second cloud environment processes traffic for the plurality of customer tenancies included in the second cloud environment.
5. The method of claim 1 , wherein the hub virtual network included in the second cloud environment transmits the encapsulated traffic to a hub virtual network included in the first cloud environment via an interconnect that couples the second cloud environment to the first cloud environment.
6. The method of claim 5 , wherein the hub virtual network included in the second cloud environment transmits the encapsulated traffic to a VNIC included in the hub virtual network included in the first cloud environment, and wherein the VNIC is configured to forward the encapsulated traffic to the third link-enabling virtual network included in the first cloud environment.
7. The method of claim 1 , wherein the third link-enabling virtual network in the first cloud environment transmits the decapsulated traffic to the first virtual network in the first cloud environment via a dynamic routing gateway attachment.
8. The method of claim 1 , wherein the first link-enabling virtual network includes a first pair of virtual network adaptors, each of which is configured to encapsulate traffic received from the second virtual network to generate the encapsulated traffic.
9. The method of claim 1 , wherein the second link-enabling virtual network includes a pair of virtual network forwarders, each of which is configured to forward the encapsulated traffic received from the first link-enabling virtual network to the hub virtual network included in the second cloud environment.
10. The method of claim 1 , wherein the third link-enabling virtual network includes a second pair of virtual network adaptors, each of which is configured to decapsulate, the encapsulated traffic received from the hub virtual network included in the second cloud environment.
11. One or more computer readable non-transitory media storing computer-executable instructions that, when executed by one or more processors, cause:
receiving, by a multi-cloud infrastructure included in a first cloud environment provided by a first cloud services provider, a request to create a network-link between a first virtual network in the first cloud environment and a second virtual network in a second cloud environment provided by a second cloud services provider that is different than the first cloud services provider, the first virtual network in the first cloud environment being previously created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment; and
creating the network-link between the first virtual network and the second virtual network, the creating comprising:
encapsulating, by a first link-enabling virtual network in the second cloud environment, traffic received from the second virtual network to generate encapsulated traffic;
forwarding, by a second link-enabling virtual network in the second cloud environment, the encapsulated traffic received from the first link-enabling virtual network to a hub virtual network included in the second cloud environment;
decapsulating, by a third link-enabling virtual network in the first cloud environment, the encapsulated traffic received from the hub virtual network included in the second cloud environment to generate decapsulated traffic, wherein the first link-enabling virtual network and the second link-enabling virtual network in the second cloud environment are created for each customer tenancy of a plurality of customer tenancies of the second cloud environment, and
transmitting, by the third link-enabling virtual network in the first cloud environment, the decapsulated traffic to the first virtual network in the first cloud environment.
12. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein each of the first link-enabling virtual network, the second link-enabling virtual network, and the third link-enabling virtual network are assigned a unique classless inter-domain routing IP address space.
13. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein the second cloud environment includes a plurality of customer tenancies, and wherein for each customer tenancy included in the plurality of customer tenancies, enabling virtual network is created in the first cloud environment.
14. The one or more computer readable non-transitory media storing computer-executable instructions of claim 13 , wherein the hub virtual network included in the second cloud environment processes traffic for the plurality of customer tenancies included in the second cloud environment.
15. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein the hub virtual network included in the second cloud environment transmits the encapsulated traffic to a hub virtual network included in the first cloud environment via an interconnect that couples the second cloud environment to the first cloud environment.
16. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein the first link-enabling virtual network includes a first pair of virtual network adaptors, each of which is configured to encapsulate traffic received from the second virtual network to generate the encapsulated traffic.
17. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein the second link-enabling virtual network includes a pair of virtual network forwarders, each of which is configured to forward the encapsulated traffic received from the first link-enabling virtual network to the hub virtual network included in the second cloud environment.
18. The one or more computer readable non-transitory media storing computer-executable instructions of claim 11 , wherein the third link-enabling virtual network includes a second pair of virtual network adaptors, each of which is configured to decapsulate, the encapsulated traffic received from the hub virtual network included in the second cloud environment.
19. A computing device comprising:
one or more processors; and
a memory including instructions that, when executed with the one or more processors, cause the computing device to, at least:
receive, by a multi-cloud infrastructure included in a first cloud environment provided by a first cloud services provider, a request to create a network-link between a first virtual network in the first cloud environment and a second virtual network in a second cloud environment provided by a second cloud services provider that is different than the first cloud services provider, the first virtual network in the first cloud environment being previously created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment; and
create the network-link between the first virtual network and the second virtual network by:
encapsulating, by a first link-enabling virtual network in the second cloud environment, traffic received from the second virtual network to generate encapsulated traffic;
forwarding, by a second link-enabling virtual network in the second cloud environment, the encapsulated traffic received from the first link-enabling virtual network to a hub virtual network included in the second cloud environment;
decapsulating, by a third link-enabling virtual network in the first cloud environment, the encapsulated traffic received from the hub virtual network included in the second cloud environment to generate decapsulated traffic, wherein the first link-enabling virtual network and the second link-enabling virtual network in the second cloud environment are created for each customer tenancy of a plurality of customer tenancies of the second cloud environment, and
transmitting, by the third link-enabling virtual network in the first cloud environment, the decapsulated traffic to the first virtual network in the first cloud environment.
20. The computing device of claim 19 , wherein each of the first link-enabling virtual network, the second link-enabling virtual network, and the third link-enabling virtual network are assigned a unique classless inter-domain routing IP address space.