Group-based policy encoding for network virtualization overlays
AssigneeHewlett Packard Enterprise Development LP
InventorsHarish Pandey, Vinod Kumar Mahadev Gornal
Life of this patent
Estimating the term…
Abstract
A first network device of a first data center may encode a source tenant system interface (TSI) group identifier into a tag protocol identifier and a group-based policy identifier, and may encode the tag protocol identifier and the group-based policy identifier into a virtual extensible local area network (VXLAN) packet with the source TSI group identifier, where the source TSI group identifier is not included in a header of the VXLAN packet. The first network device may provide the VXLAN packet, with the source TSI group identifier, to a second network device of a second data center, via an Ethernet virtual private network (EVPN) multiprotocol label switching (MPLS) network.
Claims20
A method, comprising:
- encoding, by a first network device of a first data center, a source tenant system interface (TSI) group identifier into a tag protocol identifier and a group-based policy identifier;
- encoding, by the first network device, the tag protocol identifier and the group-based policy identifier into a virtual extensible local area network (VXLAN) packet with the source TSI group identifier,
- wherein the source TSI group identifier is not included in a header of the VXLAN packet;
- and
- providing, by the first network device, the VXLAN packet, with the source TSI group identifier, to a second network device of a second data center, via an Ethernet virtual private network (EVPN) multiprotocol label switching (MPLS) network.
A first network device of a first data center, the first network device comprising:
- one or more memories;
- and
- one or more processors to:
- encode a source tenant system interface (TSI) group identifier into a tag protocol identifier and a group-based policy identifier;
- encode the tag protocol identifier and the group-based policy identifier into a virtual extensible local area network (VXLAN) packet with the source TSI group identifier,
- wherein the source TSI group identifier is not included in a header of the VXLAN packet;
- and
- provide the VXLAN packet, with the source TSI group identifier, to a second network device of a second data center, via an Ethernet virtual private network (EVPN) multiprotocol label switching (MPLS) network,
- wherein the second network device is to apply a policy associated with the source TSI group identifier of the VXLAN packet.
A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
- one or more instructions that, when executed by one or more processors of a first network device of a first data center, cause the first network device to:
- encode a source tenant system interface (TSI) group identifier into a tag protocol identifier and a group-based policy identifier;
- encode the tag protocol identifier and the group-based policy identifier into a virtual extensible local area network (VXLAN) packet with the source TSI group identifier,
- wherein the source TSI group identifier is included in a payload of the VXLAN packet;
- and
- provide the VXLAN packet, with the source TSI group identifier, to a second network device of a second data center, via an Ethernet virtual private network (EVPN) multiprotocol label switching (MPLS) network.
Dependencies are inferred from the claim text.