High-availability egress access with consistent source IP addresses for workloads
AssigneeVMware, Inc.
InventorsQuan Tian, Jianjun Shen, Donghai Han, Shuyang Xin, Wenqi Qiu
Life of this patent
Estimating the term…
Abstract
Systems and methods for configuring an egress node for an egress pod set comprising one or more pods are provided. The egress pod set may be allocated one or more egress internet protocol (IP) addresses. The egress node may be selected among nodes of a cluster including the one or more pods. The egress node may be configured as the routing destination for an egress IP address selected among the one or more egress internet protocol (IP) addresses.
Claims20
A method for configuring an egress node for an egress pod set comprising one or more pods, the method comprising:
- selecting a node of a cluster of nodes to act as the egress node for the egress pod set, wherein the egress pod set is allocated a plurality of egress internet protocol (IP) addresses;
- determining an egress IP address of the plurality of egress IP addresses to be an active egress IP address of the egress pod set based on an IP address of the egress node;
- configuring the egress node to receive packets with a destination IP address set to the active egress IP address;
- receiving, at the egress node, an encapsulated packet comprising:
- an outer header including a destination IP address set as the active egress IP address, and or more pods;
- an inner header including a source IP address set as an IP address of one of the one of the one or more pods;
- decapsulating the encapsulated packet to generate a packet with a header that is the inner header;
- and
- translating the source IP address of the header of the packet by setting the source IP address as the active egress IP address.
One or more non-transitory computer readable media comprising instructions that, when executed by one or more processors of a computing system, cause the computing system to perform operations for configuring an egress node for an egress pod set comprising one or more pods, the operations comprising:
- selecting a node of a cluster of nodes to act as the egress node for the egress pod set, wherein the egress pod set is allocated a plurality of egress internet protocol (IP) addresses;
- determining an egress IP address of the plurality of egress IP addresses to be an active egress IP address of the egress pod set based on an IP address of the egress node;
- configuring the egress node to receive packets with a destination IP address set to the active egress IP address;
- receiving, at the egress node, an encapsulated packet comprising:
- an outer header including a destination IP address set as the active egress IP address, and or more pods;
- an inner header including a source IP address set as an IP address of one of the one of the one or more pods;
- decapsulating the encapsulated packet to generate a packet with a header that is the inner header;
- and
- translating the source IP address of the header of the packet by setting the source IP address as the active egress IP address.
A computer system, the computer system comprising:
- one or more memories;
- and
- one or more processors, the one or more processors being configured to perform operations for configuring an egress node for an egress pod set comprising one or more pods, the operations comprising:
- selecting a node of a cluster of nodes to act as the egress node for the egress pod set, wherein the egress pod set is allocated a plurality of egress internet protocol (IP) addresses;
- determining an egress IP address of the plurality of egress IP addresses to be an active egress IP address of the egress pod set based on an IP address of the egress node;
- configuring the egress node to receive packets with a destination IP address set to the active egress IP address;
- receiving, at the egress node, an encapsulated packet comprising:
- an outer header including a destination IP address set as the active egress IP address, and or more pods;
- an inner header including a source IP address set as an IP address of one of the one of the one or more pods;
- decapsulating the encapsulated packet to generate a packet with a header that is the inner header;
- and
- translating the source IP address of the header of the packet by setting the source IP address as the active egress IP address.
Dependencies are inferred from the claim text.