Per-namespace IP address management method for container networks

A method of sending data in a network comprising s worker node, the worker node executing one or more sets of containers and a virtual switch, the virtual switch comprising a gateway interface, a virtual local area network (VLAN) tunnel interface, and a set of virtual Ethernet interfaces associated with the set of one or more sets of containers, the method comprising:

• configuring the gateway interface of the worker node to associate the gateway interface with a plurality of subnets, wherein each subnet is associated with a namespace, and the worker node executes at least (i) first and second sets of containers of a first namespace, and (ii) a third set of containers of a second namespace;
• sending data between the first and second sets of containers through a first virtual Ethernet interface associated with the first set of containers and a second virtual Ethernet interface associated with the second set of containers;
• sending data between the first set of containers and the third set of containers through the first virtual Ethernet interface associated with the first set of containers, the gateway interface, and a third virtual Ethernet interface associated with the third set of containers;
• assigning a static IP address to the first set of containers by storing the static IP address in a configuration file of the first set of containers;
• and
• migrating the first set of containers from the first worker node to a second worker node while maintaining the static IP address of the first set of containers.

A method of sending data in a network comprising a worker node, the worker node executing one or more sets of containers and a virtual switch, the virtual switch comprising a gateway interface, a virtual local area network (VLAN) tunnel interface, and a set of virtual Ethernet interfaces associated with the set of one or more sets of containers, the method comprising:

• configuring the gateway interface of a worker node to associate the gateway interface with a plurality of subnets, wherein each subnet is associated with a namespace, and the worker node executes at least (i) first and second sets of containers of a first namespace, and (ii) a third set of containers of a second namespace;
• sending data between the first and second sets of containers through a first virtual Ethernet interface associated with the first set of containers and a second virtual Ethernet interface associated with the second set of containers;
• and
• sending data between the first set of containers and the third set of containers through the first virtual Ethernet interface associated with the first set of containers, the gateway interface, and a third virtual Ethernet interface associated with the third set of containers,
• wherein the first set of containers execute within a first pod of the first namespace on the worker node, the second set of containers execute within a second pod of the second namespace on the worker node, and the third set of containers execute within a third pod of the second namespace on the worker node.

A method of sending data in a network comprising a worker node, the worker node executing one or more sets of containers and a virtual switch, the virtual switch comprising a gateway interface, a virtual local area network (VLAN) tunnel interface, and a set of virtual Ethernet interfaces associated with the set of one or more sets of containers, the method comprising:

• configuring the gateway interface of the worker node to associate the gateway interface with a plurality of subnets, wherein each subnet is associated with a namespace, and the worker node executes at least (i) first and second sets of containers of a first namespace, and (ii) a third set of containers of a second namespace;
• sending data between the first and second sets of containers through a first virtual Ethernet interface associated with the first set of containers and a second virtual Ethernet interface associated with the second set of containers;
• sending data between the first set of containers and the third set of containers through the first virtual Ethernet interface associated with the first set of containers, the gateway interface, and a third virtual Ethernet interface associated with the third set of containers, wherein each namespace is assigned a set of IP addresses, and a fourth set of containers of the first namespace is instantiated on the worker node,
• sending, from a network interface of the worker node, a remote procedure call (RPC) request to a server of the container network;
• and
• in response to the RPC, receiving an IP address for the fourth set of containers from the set of IP addresses of the first namespace.

A non-transitory machine readable medium storing a program for execution by a set of processing units, the program for sending data in a network comprising a worker node, the worker node executing one or more sets of containers and a virtual switch, the virtual switch comprising a gateway interface, a virtual local area network (VLAN) tunnel interface, and a set of virtual Ethernet interfaces associated with the set of one or more sets of containers, the program comprising sets of instructions for:

• configuring the gateway interface of the worker node to associate the gateway interface with a plurality of subnets, wherein each subnet is associated with a namespace, and the worker node executes at least (i) first and second sets of containers of a first namespace, and (ii) a third set of containers of a second namespace;
• sending data between the first and second sets of containers through a first virtual Ethernet interface associated with the first set of containers and a second virtual Ethernet interface associated with the second set of containers;
• sending data between the first set of containers and the third set of containers through the first virtual Ethernet interface associated with the first set of containers, the gateway interface, and a third virtual Ethernet interface associated with the third set of containers, wherein the worker node executes on a host computer;
• and
• sending data between the first set of containers and a compute worker node external to the host computer through (i) the first virtual Ethernet interface associated with the first set of containers, (ii) the gateway interface, and (iii) a NIC (network interface card) of the host computer.

A non-transitory machine readable medium storing a program for execution by a set of processing units, the program for sending data in a network comprising a worker node, the worker node executing one or more sets of containers and a virtual switch, the virtual switch comprising a gateway interface, a virtual local area network (VLAN) tunnel interface, and a set of virtual Ethernet interfaces associated with the set of one or more sets of containers, the program comprising sets of instructions for:

• configuring the gateway interface of the worker node to associate the gateway interface with a plurality of subnets, wherein each subnet is associated with a namespace, and the worker node executes at least (i) first and second sets of containers of a first namespace, and (ii) a third set of containers of a second namespace;
• sending data between the first and second sets of containers through a first virtual Ethernet interface associated with the first set of containers and a second virtual Ethernet interface associated with the second set of containers;
• sending data between the first set of containers and the third set of containers through the first virtual Ethernet interface associated with the first set of containers, the gateway interface, and a third virtual Ethernet interface associated with the third set of containers;
• assigning a static IP address to the first set of containers by storing the static IP address in a configuration file of the first set of containers;
• and
• migrating the first set of containers from the first worker node to a second worker node while maintaining the static IP address of the first set of containers.

A non-transitory machine readable medium storing a program for execution by a set of processing units, the program for sending data in a network comprising a worker node, the worker node executing one or more sets of containers and a virtual switch, the virtual switch comprising a gateway interface, a virtual local area network (VLAN) tunnel interface, and a set of virtual Ethernet interfaces associated with the set of one or more sets of containers, the program comprising sets of instructions for:

• configuring the gateway interface of the worker node to associate the gateway interface with a plurality of subnets, wherein each subnet is associated with a namespace, and the worker node executes at least (i) first and second sets of containers of a first namespace, and (ii) a third set of containers of a second namespace;
• sending data between the first and second sets of containers through a first virtual Ethernet interface associated with the first set of containers and a second virtual Ethernet interface associated with the second set of containers;
• and
• sending data between the first set of containers and the third set of containers through the first virtual Ethernet interface associated with the first set of containers, the gateway interface, and a third virtual Ethernet interface associated with the third set of containers,
• wherein the first set of containers execute within a first pod of the first namespace on the worker node, the second set of containers execute within a second pod of the second namespace on the worker node, and the third set of containers execute within a third pod of the second namespace on the worker node.

A non-transitory machine readable medium storing a program for execution by a set of processing units, the program for sending data in a network comprising a worker node, the worker node executing one or more sets of containers and a virtual switch, the virtual switch comprising a gateway interface, a virtual local area network (VLAN) tunnel interface, and a set of virtual Ethernet interfaces associated with the set of one or more sets of containers, the program comprising sets of instructions for:

• configuring the gateway interface of the worker node to associate the gateway interface with a plurality of subnets, wherein each subnet is associated with a namespace, and the worker node executes at least (i) first and second sets of containers of a first namespace, and (ii) a third set of containers of a second namespace;
• sending data between the first and second sets of containers through a first virtual Ethernet interface associated with the first set of containers and a second virtual Ethernet interface associated with the second set of containers;
• sending data between the first set of containers and the third set of containers through the first virtual Ethernet interface associated with the first set of containers, the gateway interface, and a third virtual Ethernet interface associated with the third set of containers, wherein each namespace is assigned a set of IP addresses, the first namespace is assigned a first set of IP addresses, the second namespace is assigned a second set of IP addresses, the first set of IP addresses has a different number of IP addresses than the second set of IP addresses, a fourth set of containers of the first namespace is instantiated on the worker node;
• sending, from a network interface of the worker node, a remote procedure call (RPC) request to a server of the container network;
• and
• in response to the RPC, receiving an IP address for the fourth set of containers from the set of IP addresses of the first namespace.