Support for optimized microsegmentation of end points using layer 2 isolation and proxy-ARP within data center

An apparatus comprising:

• a network interface unit configured to communicate with a plurality of endpoints;
• a memory configured to store network addresses and endpoint tags associated with each of the plurality of endpoints;
• and
• a processor configured to:
• receive via the network interface unit, a first request for a destination address associated with a destination endpoint among the plurality of endpoints, the first request originating from an isolated source endpoint;
• determine whether the destination address is stored in the memory in association with the destination endpoint;
• and
• responsive to a determination that the destination address is not stored in association with the destination endpoint, generate a proxy request for the destination address, send the proxy request to the plurality of endpoints via the network interface unit, receive a proxy response from the destination endpoint via the network interface unit with the destination address, and store the destination address in the memory in association with the destination endpoint.

One or more non-transitory computer readable storage media encoded with software comprising computer executable instructions and, when the software is executed by a processor on a network device, operable to cause the processor to:

• receive a first request for a destination address associated with a destination endpoint, the first request originating from an isolated source endpoint;
• determine whether the destination address is stored on the network device in association with the destination endpoint;
• and
• responsive to a determination that the destination address is not stored in association with the destination endpoint, generate a proxy request for the destination address, send the proxy request to at least one endpoint attached to the network device, receive a proxy response from the destination endpoint with the destination address, and store the destination address in association with the destination endpoint.