Replicating firewall policy across multiple data centers

A non-transitory machine readable medium storing a program that when executed by at least one processing unit replicates firewall rules across a plurality of data centers, each data center comprising a set of hosts and a network manager, each host configured to host a set of data compute nodes (DCNs), the program comprising sets of instructions for:

• identifying a first DCN on a host in a primary data center, the first DCN associated with a set of global firewall rules utilizing unique identifiers recognized by the network manager of each data center;
• allocating storage for a second DCN on a host in a secondary data center to replicate the first DCN;
• replicating, prior to the second DCN being powered on, the set of global firewall rules associated with the first DCN into the storage allocated for the second DCN;
• and
• enforcing, in response to receiving an indication that the second DCN is powered on, the set of global firewall rules for the second DCN using the replicated set of global firewall rules.

A system comprising:

• a plurality of data centers, each data center comprising:
• a network manager;
• a set of hosts configured to host a set of data compute nodes (DCN);
• and
• a site recovery manager configured to:
• identify a first DCN on a host in a primary data center, the first DCN associated with a set of global firewall rules utilizing unique identifiers recognized by the network manager of each data center;
• allocate storage for a second DCN on a host in a secondary data center to replicate the first DCN;
• replicate, prior to powering on the second DCN, the set of global firewall rules associated with the first DCN into the storage allocated for the second DCN;
• and
• enforce, in response to receiving an indication that the second DCN is powered on, the set of global firewall rules for the second DCN using the replicated set of global firewall rules.