Edge node cluster network redundancy and fast convergence using an underlay anycast vtep ip

Abstract

Some embodiments provide a method for providing redundancy and fast convergence for modules operating in a network. The method configures modules to use a same anycast inner IP address, anycast MAC address, and to associate with a same anycast VTEP IP address. In some embodiments, the modules are operating in an active-active mode and all nodes running modules advertise the anycast VTEP IP addresses with equal local preference. In some embodiments, modules are operating in active-standby mode and the node running the active module advertises the anycast VTEP IP address with higher local preference.

1 - 20 . (canceled) 
     
     
         21 . A method for providing redundancy in a virtualized environment comprising:
 configuring a plurality of service routers executing on a plurality of edge nodes to use a same anycast inner internet protocol (IP) address;   configuring the plurality of edge nodes to use a same anycast virtual extensible local area network tunnel end point (VTEP) IP address; and   configuring a distributed router to use the inner anycast IP address of the plurality of service routers as a default gateway.   
     
     
         22 . The method of  claim 21  further comprising:
 configuring a first service router as an active service router, the edge node on which the active service router executes advertising the VTEP IP address with higher local preference than other edge nodes on which service routers in the plurality of service routers execute, 
 wherein, upon failure of the connection to the first service router, traffic to the service router is directed to a second, standby service router acting as a current, active service router in the plurality of service routers. 
 
     
     
         23 . The method of  claim 22  wherein the failure of the first service router is detected by a fault detection protocol along a path from the first edge node to a hardware switch. 
     
     
         24 . The method of  claim 23  wherein the fault detection protocol is a bidirectional forwarding detection protocol. 
     
     
         25 . The method of  claim 22  wherein, upon failure of the first service router, the anycast inner IP address is advertised as unavailable at the first edge node. 
     
     
         26 . The method of  claim 25  wherein, upon recovery of the first service router, the first service router advertises the availability of the anycast inner IP address at the first service node. 
     
     
         27 . The method of  claim 21  wherein configuring the distributed router to use the inner anycast IP address of the plurality of service routers as the default gateway further comprises configuring the distributed router to associate the inner anycast IP address of the plurality of service routers with the anycast VTEP IP address. 
     
     
         28 . A non-transitory machine readable medium storing a program which when executed by at least one processing unit provides redundancy in a virtualized environment, the program comprising sets of instructions for:
 configuring a plurality of service routers executing on a plurality of edge nodes to use a same anycast inner internet protocol (IP) address;   configuring the plurality of edge nodes to use a same anycast virtual extensible local area network tunnel end point (VTEP) IP address; and   configuring a distributed router to use the inner anycast IP address of the plurality of service routers as a default route.   
     
     
         29 . The machine readable medium of  claim 28 , the program further comprising a set of instructions for:
 configuring a first service router as an active service router, the edge node on which the active service router executes advertising the VTEP IP address with higher local preference than other edge nodes on which service routers in the plurality of service routers execute,   wherein, upon failure of the connection to the first service router, traffic to the service router is directed to a second, standby service router acting as a current, active service router in the plurality of service routers.   
     
     
         30 . The machine readable medium of  claim 29  wherein the failure of the first service router is detected by a fault detection protocol along a path from the first edge node to a hardware switch. 
     
     
         31 . The machine readable medium of  claim 30  wherein the fault detection protocol is a bidirectional forwarding detection protocol. 
     
     
         32 . The machine readable medium of  claim 29  wherein, upon failure of the first service router, the anycast inner IP address is advertised as unavailable at the first edge node. 
     
     
         33 . The machine readable medium of  claim 32  wherein, upon recovery of the first service router, the first service router advertises the availability of the anycast inner IP address at the first service node. 
     
     
         34 . The machine readable medium of  claim 28  wherein the set of instructions for configuring the distributed router to use the inner anycast IP address of the plurality of service routers as the default gateway further comprises a set of instructions for configuring the distributed router to associate the inner anycast IP address of the plurality of service routers with the anycast VTEP IP address. 
     
     
         35 . At a first forwarding element that provides network access to a first edge node on which a first service router executes, a method comprising:
 receiving advertisement of an anycast tunnel endpoint network address from the first edge node, wherein (i) a plurality of service routers that use a same anycast inner network address execute on a plurality of edge nodes that use the same anycast tunnel endpoint network address, (ii) the first service router is designated as an active service router, and (iii) the first host computer advertises the anycast tunnel endpoint network address with a higher preference than the other host computers;   detecting failure of a connection to the first edge node; and   advertising to other forwarding elements of the network that the anycast VTEP IP is not currently available via the first forwarding element.   
     
     
         36 . The method of  claim 35 , wherein detecting failure of the connection to the first edge node comprises using a fault detection protocol session with the first edge node to detect the failure. 
     
     
         37 . The method of  claim 35  further comprising:
 detecting that the connection to the first edge node has been restored; and 
 in response to detecting that the connection to the first edge node has been restored, advertising to the other forwarding elements of the network that the anycast VTEP IP is again available via the first forwarding element. 
 
     
     
         38 . The method of  claim 35  further comprising, before detecting failure of the connection to the first edge node, advertising to the other forwarding elements of the network that the anycast VTEP IP is available via the first forwarding element. 
     
     
         39 . The method of  claim 35 , wherein the first forwarding element is a leaf hardware switch in a leaf-spine network topology of a datacenter. 
     
     
         40 . The method of  claim 35  further comprising, upon detection of the failure of the connection, removing an association between the edge node and the second anycast tunnel endpoint network address from a forwarding table of the first forwarding element.