Systems and methods for enabling a failover service for block-storage volumes
The present disclosure generally relates to a first network device in a primary region that can failover network traffic into a second network device in a failover region. The first network device can receive routing criteria identifying how traffic originating in the primary region should be routed. The first network device can transmit this routing criteria to the second network device in the failover region. Based on determining the occurrence of a failover event, the first network device may transmit network traffic originating in the primary region to the second network device in the failover region. The second network device can determine how to route the network traffic based on the routing criteria of the primary region. In some embodiments, the second network device can determine how to route the network traffic based on the routing criteria of the failover region.
1. A computing device for routing network traffic, the computing device comprising:
data processing hardware; and
memory in communication with the data processing hardware, the memory storing instructions, wherein execution of the instructions by the data processing hardware causes the data processing hardware to:
identify a failover computing device to receive a first packet of network traffic from the computing device; and
based on a failover event, route the first packet of network traffic to the failover computing device, wherein the failover computing device receives the first packet of network traffic from the computing device and routes the first packet of network traffic to a first data destination according to routing criteria corresponding to one of:
first routing criteria associated with the computing device based on the first packet of network traffic including an endpoint identifier associated with a first region, wherein the first region is associated with the computing device, or
second routing criteria associated with the failover computing device based on the first packet of network traffic including an endpoint identifier associated with a second region, wherein the second region is associated with the failover computing device.
2. The computing device of claim 1 , wherein the execution of the instructions by the data processing hardware further causes the data processing hardware to:
obtain a second packet of network traffic subsequent to routing the first packet of network traffic, wherein the computing device routes the second packet of network traffic to a second data destination based on the first routing criteria subsequent to routing the first packet of network traffic.
3. The computing device of claim 1 , wherein the execution of the instructions by the data processing hardware further causes the data processing hardware to:
obtain a second packet of network traffic prior to routing the first packet of network traffic, wherein the computing device routes the second packet of network traffic to a second data destination based on the first routing criteria prior to routing the first packet of network traffic.
4. The computing device of claim 1 , wherein a data source of the first packet of network traffic and the first data destination are located in a same network.
5. The computing device of claim 1 , wherein the execution of the instructions by the data processing hardware further causes the data processing hardware to:
determine the second region is available for failover.
6. The computing device of claim 1 , wherein at least one of the first routing criteria or the second routing criteria comprises at least one of an endpoint policy, a service policy, or a source policy.
7. The computing device of claim 1 , wherein each of a data source of the first packet of network traffic, the computing device, and the failover event correspond to a virtual private network environment.
8. The computing device of claim 7 , wherein the virtual private network environment comprises a first virtual private network environment, and wherein each of the failover computing device and the first data destination correspond to a second virtual private network environment.
9. The computing device of claim 1 , wherein the first region comprises a primary region and the second region comprises a failover region, wherein the primary region and the failover region correspond to an active-standby region configuration.
10. The computing device of claim 9 , wherein each of a data source of the first packet of network traffic, the computing device, and the failover event are associated with the primary region, and wherein each of the failover computing device and the first data destination are associated with the failover region.
11. The computing device of claim 1 , wherein the first region comprises a first active region and the second region comprises a second active region, wherein the first active region and the second active region correspond to an active-active region configuration.
12. The computing device of claim 11 , wherein each of a data source of the first packet of network traffic, the computing device, and the failover event are associated with the first active region, and wherein each of the failover computing device and the first data destination are associated with the second active region.
13. The computing device of claim 1 , wherein a data source of the first packet of network traffic is located in one or more of:
the first region, wherein the data source comprises a virtual machine instance located in the first region; or
the second region, wherein the data source routes data to the computing device.
14. A system for managing failover of traffic, the system comprising:
a first computing device associated with a first region, the first computing device comprising:
first data processing hardware; and
first memory in communication with the first data processing hardware, the first memory storing first instructions, wherein execution of the first instructions by the first data processing hardware causes the first data processing hardware to:
identify a second region; and
based on a failover event, route a packet of network traffic to the second region, and
a second computing device associated with the second region, the second computing device comprising:
second data processing hardware; and
second memory in communication with the second data processing hardware, the second memory storing second instructions, wherein execution of the second instructions by the second data processing hardware causes the second data processing hardware to:
receive the packet of network traffic from the first computing device; and
route the packet of network traffic to a data destination using routing criteria corresponding to one of:
first routing criteria associated with the first computing device based on the packet of network traffic including an endpoint identifier associated with the first region, or
second routing criteria associated with the second computing device based on the packet of network traffic including an endpoint identifier associated with the second region.
15. The system of claim 14 , wherein the execution of the first instructions by the first data processing hardware further causes the first data processing hardware to:
determine occurrence of the failover event, wherein the failover event is associated with the first region.
16. The system of claim 14 , wherein the execution of the first instructions by the first data processing hardware further causes the first data processing hardware to:
modify the packet of network traffic to include the endpoint identifier associated with the second region.
17. A method implemented by a first computing device, the method comprising:
obtaining, at the first computing device, a packet of network traffic associated with a first region and the first network computing device;
determining, by the first computing device, a second region; and
based on a failover event, routing, by the first computing device, the packet of network traffic to the second region, wherein a second computing device associated with the second region receives the packet of network traffic from the first computing device and routes the packet of network traffic to a data destination using routing criteria selected from:
first routing criteria associated with the first computing device based on the packet of network traffic including an endpoint identifier associated with the first region, or
second routing criteria associated with the second computing device based on the packet of network traffic including an endpoint identifier associated with the second region.
18. The method of claim 17 , wherein obtaining the packet of network traffic comprises obtaining, by the first computing device, the packet of network traffic from a virtual machine instance via an endpoint device.
19. The method of claim 17 , wherein the data destination, the first computing device, and the second computing device are located in a private network.
20. The method of claim 17 , wherein the second routing criteria comprises the first routing criteria, the method further comprising:
transmitting, by the first computing device, the first routing criteria to the second computing device; and
transmitting, by the first computing device, the first routing criteria to a third computing device associated with a third region, wherein determining the second region comprises determining the second region from the second region and the third region.