Systems and methods for isolating network traffic of multiple users across networks of computing platforms

A system for isolating network traffic of multiple users across a network of a computing platform, the system comprising:

• a plurality of hosts within the computing platform;
• a networking device connected to the plurality of hosts;
• and
• a plurality of broadcast domains, each broadcast domain being associated with one or more hosts of the plurality of hosts and connecting the one or more hosts;
• wherein the networking device is configured to:
• receive data from a first host of the plurality of hosts;
• identify a user of the multiple users based at least in part on the received data;
• identify a routing table of a plurality of routing tables based at least in part on the identified user, each routing table of the plurality of routing tables being associated with a different user of multiple users of the computing platform, each routing table including a route to provide data to at least one of the plurality of hosts within the computing platform;
• determine a route from the identified routing table based at least in part on the received data;
• and
• send the received data across a first network of the computing platform, by:
• encapsulating a frame of the received data for sending from a first broadcast domain of a plurality of broadcast domains to a second broadcast domain of the plurality of broadcast domains, the first broadcast domain and the second broadcast domain being associated with the identified user;
• and
• sending the encapsulated frame of the received data from the first broadcast domain to the second broadcast domain using a network layer of the first network;
• wherein:
• each broadcast domain of the plurality of broadcast domains is isolated from any other broadcast domain of the plurality of broadcast domains;
• one or more routes are copied from a second routing table of the plurality of routing tables into the identified routing table, and the second routing table is associated with a second user, the second user being different from the identified user;
• and
• each encapsulated frame includes a first network address associated with the first broadcast domain and a second network address associated with the second broadcast domain;
• wherein the computing platform is a multi-tenant computing platform which provides services to multiple customers, and wherein each user of the computing platform is associated with only one customer of the multi-tenant computing platform.

An apparatus for isolating network traffic of multiple users of a multi-tenant computing platform, the apparatus comprising:

• a plurality of routing tables, each routing table of the plurality of routing tables being associated with a different user of multiple users of the multi-tenant computing platform and each routing table including a route to provide data to at least one of a plurality of hosts within the multi-tenant computing platform;
• the apparatus is configured to isolate network traffic of multiple users across a network of a computer platform by at least:
• receiving data at a networking device configured to connect to a plurality of hosts within the computing platform;
• identifying, based at least in part on the received data, a routing table of the plurality of routing tables that corresponds to a user of the multiple users;
• determining a route from the identified routing table based at least in part on the received data;
• and
• sending the received data across a first network of the computing platform, by:
• encapsulating a frame of the received data for sending from a first broadcast domain of a plurality of broadcast domains to a second broadcast domain of the plurality of broadcast domains, the first broadcast domain and the second broadcast domain being associated with the user;
• and
• sending the encapsulated frame of the received data from the first broadcast domain to the second broadcast domain using a network layer of the first network;
• wherein the second broadcast domain of the plurality of broadcast domains is further associated with a different second user of the multiple users of the computing platform;
• wherein one or more routes are copied from a second routing table of the plurality of routing tables into the identified routing table, and the second routing table is associated with the different second user;
• wherein each encapsulated frame includes a first network address associated with the first broadcast domain and a second network address associated with the second broadcast domain;
• and
• wherein the first broadcast domain includes a first domain identification number, the second broadcast domain includes a second domain identification number, and the first domain identification number and the second domain identification number are the same and associated with a unique user identification number related to the identified user.