Techniques for rotating network addresses in prefab regions
Techniques are disclosed for rotating network addresses following the installation of a prefab region network at a destination site. A manager service executing within a distributed computing system can allocate a rotation network address pool to a root allocator service that may be configured to provide network addresses from network address pools to dependent nodes within the distributed computing system, with each dependent node associated with a corresponding first network address of the network address pools. The manager service can receive an indication that a second network address of the rotation network address pool is associated with a dependent node. In response, the manager service can execute and a migration operation for the dependent node to redirect network traffic within the distributed computing system from the first network address to the second network address.
1 . A computer-implemented method, comprising:
allocating, by a manager service, a rotation network address pool to a root allocator service, the root allocator service configured to provide network addresses from network address pools to dependent nodes within a distributed computing system at a first data center, the network address pools managed by the root allocator service, and each dependent node associated with a corresponding first network address of the network address pools;
receiving, by the manager service, an indication that a second network address of the rotation network address pool is associated with a dependent node, the second network address associated with the dependent node after one or more computing devices of the distributed computing system are successfully connected to a network fabric at a second data center; and
responsive to the indication, executing, by the manager service, a migration operation for the dependent node to redirect network traffic within the distributed computing system from the first network address to the second network address, the migration operation releasing the first network address for reuse by the root allocator service.
2 . The computer-implemented method of claim 1 , wherein the dependent node of the dependent nodes comprises a first networking interface associated with the first network address, and wherein executing the migration operation comprises:
generating a second networking interface at the dependent node, the second networking interface associated with the second network address from the rotation network address pool;
instructing the dependent nodes within the distributed computing system to direct networking traffic to the second networking interface; and
deprecating the first networking interface of the dependent node.
3 . The computer-implemented method of claim 2 , wherein instructing the dependent nodes to direct networking traffic to the second networking interface comprises updating a domain name system (DNS) record to be associated with the second network address from the rotation network address pool.
4 . The computer-implemented method of claim 1 , wherein the dependent node of the dependent nodes is a first dependent node associated with the first network address, and wherein executing the migration operation comprises:
executing a second dependent node of the dependent nodes configured to provide the functionality of the first dependent node;
associating the second network address from the rotation network address pool to the second dependent node;
instructing the dependent nodes within the distributed computing system to direct networking traffic to the second network address of the second dependent node; and
removing the first dependent node.
5 . The computer-implemented method of claim 1 , wherein the dependent node is a singleton node associated with the first network address, wherein the first network address is a swappable network address, and wherein executing the migration operation comprises replacing the first network address of the singleton node with the second network address from the rotation network address pool.
6 . The computer-implemented method of claim 1 , wherein the dependent node is a singleton node associated with the first network address, wherein the first network address is a fixed network address, and wherein executing the migration operation comprises:
removing the singleton node; and
executing a replacement node associated with the second network address from the rotation network address pool.
7 . The computer-implemented method of claim 1 , wherein the dependent nodes of the distributed computing system comprise at least one first level allocator, and further comprising allocating a subset of the rotation network address pool by the first-level allocator to a subset of the dependent nodes.
8 . The computer-implemented method of claim 1 , further comprising:
receiving, by the manager service, an additional indication that an assigned pool of network addresses has been released to the root allocator service; and
identifying the assigned pool of network addresses as available for an allocation.
9 . The computer-implemented method of claim 1 , wherein associating the second network address with the dependent node comprises:
providing, by the root allocator service, the rotation network address pool to a dynamic host configuration protocol service; and
assigning, by the dynamic host configuration protocol service, the second network address to the dependent node.
10 . A distributed computing system, comprising:
one or more processors; and
one or more memories storing computer-executable instructions that, when executed by the one or more processors, cause the distributed computing system to:
allocate, by a manager service, a rotation network address pool to a root allocator service, the root allocator service configured to provide network addresses from network address pools to dependent nodes within a distributed computing system at a first data center, the network address pools managed by the root allocator service, and each dependent node associated with a corresponding first network address of the network address pools;
receive, by the manager service, an indication that a second network address of the rotation network address pool is associated with a dependent node, the second network address associated with the dependent node after one or more computing devices of the distributed computing system were successfully connected to a network fabric at a second data center; and
responsive to the indication, execute, by the manager service, a migration operation for the dependent node to redirect network traffic within the distributed computing system from the first network address to the second network address, the migration operation releasing the first network address for reuse by the root allocator service.
11 . The distributed computing system of claim 10 , wherein the dependent node of the dependent nodes comprises a first networking interface associated with the first network address, and wherein executing the migration operation comprises:
generating a second networking interface at the dependent node, the second networking interface associated with the second network address from the rotation network address pool;
instructing the dependent nodes within the distributed computing system to direct networking traffic to the second networking interface; and
deprecating the first networking interface of the dependent node.
12 . The distributed computing system of claim 11 , wherein instructing the dependent nodes to direct networking traffic to the second networking interface comprises updating a domain name system (DNS) record to be associated with the second network address from the rotation network address pool.
13 . The distributed computing system of claim 10 , wherein the dependent node of the dependent nodes is a first dependent node associated with the first network address, and wherein executing the migration operation comprises:
executing a second dependent node of the dependent nodes configured to provide the functionality of the first dependent node;
associating the second network address from the rotation network address pool to the second dependent node;
instructing the dependent nodes within the distributed computing system to direct networking traffic to the second network address of the second dependent node; and
removing the first dependent node.
14 . The distributed computing system of claim 10 , wherein the dependent node is a singleton node associated with the first network address, wherein the first network address is a swappable network address, and wherein executing the migration operation comprises replacing the first network address of the singleton node with the second network address from the rotation network address pool.
15 . The distributed computing system of claim 10 , wherein the dependent node is a singleton node associated with the first network address, wherein the first network address is a fixed network address, and wherein executing the migration operation comprises:
removing the singleton node; and
executing a replacement node associated with the second network address from the rotation network address pool.
16 . A non-transitory computer-readable medium storing computer-executable instructions that, when executed by one or more processors, cause a distributed computing system to:
allocate, by a manager service, a rotation network address pool to a root allocator service, the root allocator service configured to provide network addresses from network address pools to dependent nodes within a distributed computing system at a first data center, the network address pools managed by the root allocator service, and each dependent node associated with a corresponding first network address of the network address pools;
receive, by the manager service, an indication that a second network address of the rotation network address pool is associated with a dependent node, the second network address associated with the dependent node after one or more computing devices of the distributed computing system were successfully connected to a network fabric at a second data center; and
responsive to the indication, executing, by the manager service, a migration operation for the dependent node to redirect network traffic within the distributed computing system from the first network address to the second network address, the migration operation releasing the first network address for reuse by the root allocator service.
17 . The non-transitory computer-readable medium of claim 16 , wherein the dependent node of the dependent nodes comprises a first networking interface associated with the first network address, and wherein executing the migration operation comprises:
generating a second networking interface at the dependent node, the second networking interface associated with the second network address from the rotation network address pool;
instructing the dependent nodes within the distributed computing system to direct networking traffic to the second networking interface; and
deprecating the first networking interface of the dependent node.
18 . The non-transitory computer-readable medium of claim 17 , wherein instructing the dependent nodes to direct networking traffic to the second networking interface comprises updating a domain name system (DNS) record to be associated with the second network address from the rotation network address pool.
19 . The non-transitory computer-readable medium of claim 16 , wherein the dependent node of the dependent nodes is a first dependent node associated with the first network address, and wherein executing the migration operation comprises:
executing a second dependent node of the dependent nodes configured to provide the functionality of the first dependent node;
associating the second network address from the rotation network address pool to the second dependent node;
instructing the dependent nodes within the distributed computing system to direct networking traffic to the second network address of the second dependent node; and
removing the first dependent node.
20 . The non-transitory computer-readable medium of claim 16 , wherein the dependent node is a singleton node associated with the first network address, wherein the first network address is a swappable network address, and wherein executing the migration operation comprises replacing the first network address of the singleton node with the second network address from the rotation network address pool.