Filters for advertised routes from tenant gateways in a software-defined data center

A non-transitory computer readable medium comprising instructions to be executed in a computing device to cause the computing device to carry out a method of implementing a logical network in a software-defined data center (SDDC), the method comprising:

• receiving, at a control plane of the SDDC, first configurations for first logical routers comprising advertised routes and a second configuration for a second logical router comprising a global in-filter, the global in-filter including filter rules, applicable to all southbound logical routers, which determine a set of allowable routes for the second logical router, the first logical routers connected to a southbound interface of the second logical router;
• determining, based on the filter rules, that a first advertised route is an allowed route;
• determining, based on the filter rules, that a second advertised route is a disallowed route;
• and
• distributing, from the control plane, routing information to a host of the SDDC that implements at least a portion of the second logical router, the routing information including a route for the first advertised route and excluding any route for the second advertised route.

A computing system, comprising:

• a hardware platform;
• and
• a control plane, executing on the hardware platform, configured to implement a logical network in a software-defined data center (SDDC), the control plane configured to:
• receive first configurations for first logical routers comprising advertised routes and a second configuration for a second logical router comprising a global in-filter, the global in-filter including filter rules, applicable to all southbound logical routers, which determine a set of allowable routes for the second logical router, the first logical routers connected to a southbound interface of the second logical router;
• determine, based on the filter rules, that a first advertised route is an allowed route;
• determine, based on the filter rules, that a second advertised route is a disallowed route;
• and
• distribute routing information to a host of the SDDC that implements at least a portion of the second logical router, the routing information including a route for the first advertised route and excluding any route for the second advertised route.