Tenant-based mapping for virtual routing and forwarding
AssigneeJuniper Networks, Inc.
InventorsAbilash Menon, Markus Jork, John M. Peterson
Life of this patent
Estimating the term…
Abstract
A network device is configured to associate a tenant of a plurality of tenants with a virtual routing and forwarding (VRF) instance of a plurality of VRF instances. The network device receives a packet comprising metadata specifying a tenant identifier for the tenant. The network device identifies, based on the tenant identifier specified by the metadata, the VRF instance associated with the tenant. The network device retrieves one or more routes from a routing information base (RIB) of the VRF instance associated with the tenant and forwards the packet toward a destination via the one or more routes.
Claims20
A method comprising:
- associating, by a network device, a tenant with a virtual routing and forwarding (VRF) instance of a plurality of VRF instances;
- receiving, by the network device, a packet comprising a first portion of metadata specifying a tenant identifier for the tenant and a second portion of metadata specifying a session identifier for a session associated with the packet;
- selecting, by the network device and based on the first portion of metadata specifying the tenant identifier, the VRF instance associated with the tenant;
- determining, by the network device and based on the second portion of metadata specifying the session identifier, the session associated with the packet;
- determining, by the network device and based on the session, a service associated with the session;
- retrieving, by the network device and from a forwarding information base (FIB) of the selected VRF instance associated with the tenant, an address of a destination for the packet;
- performing, by the network device and based on the determined service associated with the session, a lookup of one or more routes to the address of the destination;
- storing, by the network device and in a routing information base (RIB) of the selected VRF instance associated with the tenant, the one or more routes to the address of the destination;
- and
- forwarding, by the network device, the packet toward the destination for the packet via the one or more routes stored in the RIB of the selected VRF instance associated with the tenant.
A system comprising:
- processing circuitry;
- and
- memory operably coupled to the processing circuitry and comprising instructions configured to cause the processing circuitry to:
- associate a tenant with a virtual routing and forwarding (VRF) instance of a plurality of VRF instances;
- receive a packet comprising a first portion of metadata specifying a tenant identifier for the tenant and a second portion of metadata specifying a session identifier for a session associated with the packet;
- select, based on the first portion of metadata specifying the tenant identifier, the VRF instance associated with the tenant;
- determine, based on the second portion of metadata specifying the session identifier, the session associated with the packet;
- determine, based on the session, a service associated with the session;
- retrieve, from a forwarding information base (FIB) of the selected VRF instance associated with the tenant, an address of a destination for the packet;
- perform, based on the determined service associated with the session, a lookup of one or more routes to the address of the destination;
- store, in a routing information base (RIB) of the selected VRF instance associated with the tenant, the one or more routes to the address of the destination;
- and
- forward the packet toward the destination for the packet via the one or more routes stored in the RIB of the selected VRF instance associated with the tenant.
A non-transitory, computer-readable medium comprising instructions that, when executed, are configured to cause processing circuitry of a network device to:
- associate a tenant with a virtual routing and forwarding (VRF) instance of a plurality of VRF instances;
- receive a packet comprising a first portion of metadata specifying a tenant identifier for the tenant and a second portion of metadata specifying a session identifier for a session associated with the packet;
- select, based on the first portion of metadata specifying the tenant identifier, the VRF instance associated with the tenant;
- determine, based on the second portion of metadata specifying the session identifier, the session associated with the packet;
- determine, based on the session, a service associated with the session;
- retrieve, from a forwarding information base (FIB) of the selected VRF instance associated with the tenant, an address of a destination for the packet;
- perform, based on the determined service associated with the session, a lookup of one or more routes to the address of the destination;
- store, in a routing information base (RIB) of the selected VRF instance associated with the tenant, the one or more routes to the address of the destination;
- and
- forward the packet toward the destination for the packet via the one or more routes stored in the RIB of the selected VRF instance associated with the tenant.
Dependencies are inferred from the claim text.