Architecture of a multi-cloud control plane—network adaptor
Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.
1. A method comprising:
executing, by a control plane of a multi-cloud infrastructure included in a first cloud environment, a workflow to create a network-link between the first cloud environment and a second cloud environment, wherein the workflow is configured for provisioning a first set of resources in the first cloud environment and a second set of resources in the second cloud environment;
responsive to the first set of resources being provisioned in the first cloud environment, distributing, by the control plane of the multi-cloud infrastructure, first network configuration information to the first set of resources via a virtual network interface card; and
responsive to the second set of resources being provisioned in the second cloud environment, distributing, by the control plane of the multi-cloud infrastructure, second network configuration information to the second set of resources via one or more private endpoints deployed in the second cloud environment, wherein the first and the second network configuration information enable traffic to be communicated between the first cloud environment and the second cloud environment.
2. The method of claim 1 , wherein the network-link is created between a first virtual network in the first cloud environment and a second virtual network in the second cloud environment, the first virtual network in the first cloud environment being previously created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment.
3. The method of claim 1 , wherein the control plane of the multi-cloud infrastructure is further configured for:
transmitting a first request to a first resource manager of the first cloud environment to provision the first set of resources in the first cloud environment; and
sending a second request to a second resource manager of the second cloud environment to provision the second set of resources in the second cloud environment.
4. The method of claim 1 , wherein the second set of resources in the second cloud environment includes: (i) a first link-enabling virtual network including a first pair of virtual network adaptors, and (ii) a second link-enabling virtual network including a pair of virtual network forwarders.
5. The method of claim 4 , wherein
each virtual network adaptor included in the first pair of virtual network adaptors is configured to encapsulate traffic received from a second virtual network in the second cloud environment to generate encapsulated traffic, and
each virtual network forwarded included in the pair of virtual network forwarders is configured to forward encapsulated traffic received from the first link-enabling virtual network to a hub virtual network included in the second cloud environment.
6. The method of claim 4 , wherein the first link-enabling virtual network in the second cloud environment includes a first private endpoint of the one or more private endpoints, and wherein the second network configuration information is distributed to the first pair of virtual network adaptors via the first private endpoint.
7. The method of claim 4 , wherein the second link-enabling virtual network in the second cloud environment includes a second private endpoint of the one or more private endpoints, and wherein the second network configuration information is distributed to the pair of virtual network forwarders via the second private endpoint.
8. The method of claim 1 , wherein the first set of resources in the first cloud environment includes a third link-enabling virtual network including a second pair of virtual network adaptors, each of which is configured to decapsulate, encapsulated traffic received from the second cloud environment.
9. The method of claim 1 , wherein the first network configuration information includes information corresponding to an IP address of a corresponding resource included in the first set of resources.
10. The method of claim 1 , wherein the second network configuration information includes information corresponding to an IP address of a corresponding resource included in the second set of resources.
11. The method of claim 1 , further comprising:
creating, by the control plane a tunnel that communicatively couples the control plane to a service virtual network in the second cloud environment, and wherein the control plane distributes the second network configuration information to the second set of resources in the second cloud environment via the tunnel.
12. The method of claim 1 , further comprising:
polling, by the control plane, each of the first set of resources and the second set of resources to obtain a corresponding health status, the polling being conducted in a periodic manner having a predetermined polling interval.
13. One or more computer readable non-transitory media storing computer-executable instructions that, when executed by one or more processors, cause:
executing, by a control plane of a multi-cloud infrastructure included in a first cloud environment, a workflow to create a network-link between the first cloud environment and a second cloud environment, wherein the workflow is configured for provisioning a first set of resources in the first cloud environment and a second set of resources in the second cloud environment;
responsive to the first set of resources being provisioned in the first cloud environment, distributing, by the control plane of the multi-cloud infrastructure, first network configuration information to the first set of resources via a virtual network interface card; and
responsive to the second set of resources being provisioned in the second cloud environment, distributing, by the control plane of the multi-cloud infrastructure, second network configuration information to the second set of resources via one or more private endpoints deployed in the second cloud environment, wherein the first and the second network configuration information enable traffic to be communicated between the first cloud environment and the second cloud environment.
14. The one or more computer readable non-transitory media storing computer-executable instructions of claim 13 , wherein the network-link is created between a first virtual network in the first cloud environment and a second virtual network in the second cloud environment, the first virtual network in the first cloud environment being previously created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment.
15. The one or more computer readable non-transitory media storing computer-executable instructions of claim 13 , wherein the second set of resources in the second cloud environment includes: (i) a first link-enabling virtual network including a first pair of virtual network adaptors, and (ii) a second link-enabling virtual network including a pair of virtual network forwarders.
16. The one or more computer readable non-transitory media storing computer-executable instructions of claim 15 , wherein
each virtual network adaptor included in the first pair of virtual network adaptors is configured to encapsulate traffic received from a second virtual network in the second cloud environment to generate encapsulated traffic, and
each virtual network forwarded included in the pair of virtual network forwarders is configured to forward encapsulated traffic received from the first link-enabling virtual network to a hub virtual network included in the second cloud environment.
17. The one or more computer readable non-transitory media storing computer-executable instructions of claim 15 , wherein the first link-enabling virtual network in the second cloud environment includes a first private endpoint of the one or more private endpoints, and wherein the second network configuration information is distributed to the first pair of virtual network adaptors via the first private endpoint.
18. The one or more computer readable non-transitory media storing computer-executable instructions of claim 15 , wherein the second link-enabling virtual network in the second cloud environment includes a second private endpoint of the one or more private endpoints, and wherein the second network configuration information is distributed to the pair of virtual network forwarders via the second private endpoint.
19. The one or more computer readable non-transitory media storing computer-executable instructions of claim 13 , wherein the first network configuration information includes information corresponding to an IP address of a corresponding resource included in the first set of resources, and wherein the second network configuration information includes information corresponding to an IP address of a corresponding resource included in the second set of resources.
20. A computing device comprising:
one or more processors; and
a memory including instructions that, when executed with the one or more processors, cause the computing device to, at least:
execute, by a control plane of a multi-cloud infrastructure included in a first cloud environment, a workflow to create a network-link between the first cloud environment and a second cloud environment, wherein the workflow is configured for provisioning a first set of resources in the first cloud environment and a second set of resources in the second cloud environment;
responsive to the first set of resources being provisioned in the first cloud environment, distribute, by the control plane of the multi-cloud infrastructure, first network configuration information to the first set of resources via a virtual network interface card; and
responsive to the second set of resources being provisioned in the second cloud environment, distribute, by the control plane of the multi-cloud infrastructure, second network configuration information to the second set of resources via one or more private endpoints deployed in the second cloud environment, wherein the first and the second network configuration information enable traffic to be communicated between the first cloud environment and the second cloud environment.