Efficient TRILL forwarding

Abstract

One embodiment of the present invention provides a switch. The switch includes a storage and a lookup mechanism. The storage stores a first table that contains an entry corresponding to a media access control (MAC) address of a device and an identifier of a remote switch associated with the device. The storage also stores a second table that contains an entry indicating a local outgoing interface corresponding to the remote switch. The lookup mechanism identifies the local outgoing interface corresponding to the device based on the first table and the second table.

Description

BACKGROUND

1. Field

The present disclosure relates to network management. More specifically, the present disclosure relates to a method and system for constructing scalable forwarding tables that reduce the number of modifications to the entries in the tables during an update.

2. Related Art

The growth of the Internet has brought with it an increasing demand for bandwidth. As a result, equipment vendors race to build larger and faster switches, each capable of supporting a large number of end devices, to move more traffic efficiently. The forwarding table in such a switch grows substantial with a large number of coupled end devices. Furthermore, an update to the forwarding table in the switch may lead to a large number of changes to the entries in the table. More importantly, because an overly large forwarding table often does not scale, simply increasing the size of a forwarding table in a switch may become unviable due to the increased complexity and operations.

Meanwhile, layer-2 (e.g., Ethernet) switching technologies continue to evolve. More routing-like functionalities, which have traditionally been the characteristics of layer-3 (e.g., Internet Protocol or IP) networks, are migrating into layer-2. Notably, the recent development of the Transparent Interconnection of Lots of Links (TRILL) protocol allows Ethernet switches to function more like routing devices. TRILL overcomes the inherent inefficiency of the conventional spanning tree protocol, which forces layer-2 switches to be coupled in a logical spanning-tree topology to avoid looping. TRILL allows routing bridges (RBridges) to be coupled in an arbitrary topology without the risk of looping by implementing routing functions in switches and including a hop count in the TRILL header.

While TRILL brings many desirable features to layer-2 networks, some issues remain unsolved when scalable and easy-to-update forwarding tables are desired.

SUMMARY

One embodiment of the present invention provides a switch. The switch includes a storage and a lookup mechanism. The storage stores a first table that contains an entry corresponding to a media access control (MAC) address of a device and an identifier of a remote switch associated with the device. The storage also stores a second table that contains an entry indicating a local outgoing interface corresponding to the remote switch. The lookup mechanism identifies the local outgoing interface corresponding to the device based on the first table and the second table.

In a variation on this embodiment, the entry in the first table contains a virtual local area network (VLAN) tag associated with the device.

In a variation on this embodiment, the identifier to the remote switch is a Transparent Interconnection of Lots of Links (TRILL) routing bridge (RBridge) identifier.

In a variation on this embodiment, the remote switch is a virtual switch comprising a number of physical switches and the storage also stores a third table that contains one or more entries which map the identifier of the virtual switch to one or more identifiers of the physical switches.

In a further variation on this embodiment, the remote virtual switch is a virtual RBridge and the identifier of the remote virtual switch is a virtual RBridge identifier.

In a variation on this embodiment, the switch also includes an updating mechanism that updates the entry in the second table in response to a route change to the remote switch.

In a variation on this embodiment, the switch also includes a logical switch management mechanism that maintains a membership in a logical switch, wherein the logical switch is configured to accommodate a plurality of switches and operates as a single logical switch.

BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 illustrates an exemplary network that includes a large number of end devices coupled to an RBridge, in accordance with an embodiment of the present invention.

FIG. 2A illustrates an exemplary layer-2 forwarding table that stores a mapping between the MAC address of a device and an RBridge identifier to a remote RBridge associated with the device, in accordance with an embodiment of the present invention.

FIG. 2B illustrates an exemplary RBridge route table that stores a mapping between an RBridge identifier and a corresponding local outgoing interface, in accordance with an embodiment of the present invention.

FIG. 3 illustrates an exemplary network where a virtual RBridge identifier is assigned to two physical TRILL RBridges which are coupled to end devices via virtually aggregated links, in accordance with an embodiment of the present invention.

FIG. 4A illustrates an exemplary layer-2 forwarding table that stores a mapping between the MAC address of a device, and an RBridge identifier or a virtual link aggregation identifier, in accordance with an embodiment of the present invention.

FIG. 4B illustrates an exemplary virtual link aggregation mapping table that stores a mapping between a virtual link aggregation identifier and a list of corresponding RBridge identifiers, in accordance with an embodiment of the present invention.

FIG. 4C illustrates an exemplary RBridge route table that stores a mapping between an RBridge identifier and a corresponding local outgoing interface, in accordance with an embodiment of the present invention.

FIG. 5A presents a flowchart illustrating the process of an RBridge updating the forwarding information in hierarchical tables, in accordance with an embodiment of the present invention.

FIG. 5B presents a flowchart illustrating the process of an RBridge using the forwarding information in hierarchical tables to make a forwarding decision, in accordance with an embodiment of the present invention.

FIG. 6 illustrates a scenario where one of the RBridges associated with an end device experiences a link failure, in accordance with an embodiment of the present invention.

FIG. 7 illustrates an exemplary architecture of a switch with hierarchical forwarding tables, in accordance with an embodiment of the present invention.

DETAILED DESCRIPTION

The following description is presented to enable any person skilled in the art to make and use the invention, and is provided in the context of a particular application and its requirements. Various modifications to the disclosed embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other embodiments and applications without departing from the spirit and scope of the present invention. Thus, the present invention is not limited to the embodiments shown, but is to be accorded the widest scope consistent with the claims.

Overview

In embodiments of the present invention, the problem of constructing a scalable and flexible way of storing layer-2 forwarding information in an RBridge in a TRILL network is solved by storing the forwarding information in hierarchical tables. The hierarchical tables allow forwarding information to be divided into coherent parts, with each such part stored in a separate table. As a result, in response to a change in the network, an update only to the corresponding table may be sufficient while the other tables may remain unchanged. On the other hand, in a conventional TRILL network, such layer-2 forwarding information is usually saved in a large table. A single change in the network may require several modifications to the table. For example, a single change in some networks may result in several thousand such updates.

In some embodiments of the present invention, whenever an RBridge learns about an end device associated with the TRILL network, the RBridge stores the MAC address of the end device and the egress RBridge identifier associated with the end device in a first table, and the egress RBridge identifier and a corresponding local outgoing interface in a second table. The outgoing interface indicates that all traffic destined to the egress RBridge should be sent via the interface. Whenever a packet is sent to the end device, the RBridge maps the egress RBridge identifier associated with the device in the first table to the outgoing interface corresponding to the egress RBridge in the second table, and transmits the packet via the interface. In some embodiments, a single RBridge identifier can be associated with several thousand end devices. However, only one outgoing interface is typically associated with an RBridge. As a result, if there is a change in the network and the outgoing interface associated with the RBridge should be changed, only one modification to the second table is sufficient. For example, a link failure in the network may cause the RBridge to route traffic on a different path to the egress RBridge. Only one modification in the second table can reflect the new path to the egress RBridge.

In some embodiments, the RBridge can learn the MAC address from a virtual link aggregation. Under such a scenario, the RBridge stores the MAC address of the end device and a virtual link aggregation identifier associated with the end device in a first table, the virtual link aggregation identifier and identifiers to the RBridges participating in the link aggregation in a second table, and each RBridge identifier and a corresponding local outgoing interface in a third table. Whenever a packet is sent to the end device, the RBridge maps the virtual link aggregation identifier associated with the end device in the first table to the participating RBridge identifiers in the second table. The RBridge then identifies the primary RBridge in the link aggregation, maps the corresponding RBridge identifier to the outgoing interface in the third table, and transmits the packet via the interface.

Although the present disclosure is presented using examples based on the TRILL protocol, embodiments of the present invention are not limited to TRILL networks, or networks defined in a particular Open System Interconnection Reference Model (OSI reference model) layer.

The term “RBridge” refers to routing bridges, which are bridges implementing the TRILL protocol as described in IETF Request for Comments (RFC) “Routing Bridges (RBridges): Base Protocol Specification,” available at http://tools.ietf.org/html/rfc6325, which is incorporated by reference herein. Embodiments of the present invention are not limited to the application among RBridges. Other types of switches, routers, and forwarders can also be used.

In this disclosure, the term “edge port” refers to a port on an RBridge which sends/receives data frames in native Ethernet format. The term “TRILL port” refers to a port which sends/receives data frames encapsulated with a TRILL header and outer MAC header.

The term “end device” refers to a network device that is typically not TRILL-capable. “End device” is a relative term with respect to the TRILL network. However, “end device” does not necessarily mean that the network device is an end host. An end device can be a host, a conventional layer-2 switch, or any other type of network device. Additionally, an end device can be coupled to other switches or hosts further away from the TRILL network. In other words, an end device can be an aggregation point for a number of network devices to enter the TRILL network.

The term “RBridge identifier” refers to a group of bits that can be used to identify an RBridge. Note that the TRILL standard uses “RBridge ID” to denote a 48-bit intermediate-system-to-intermediate-system (IS-IS) System ID assigned to an RBridge, and “RBridge nickname” to denote a 16-bit value that serves as an abbreviation for the “RBridge ID.” In this disclosure, “RBridge identifier” is used as a generic term and is not limited to any bit format, and can refer to “RBridge ID” or “RBridge nickname” or any other format that can identify an RBridge.

The term “dual-homed end device” refers to an end device that has an aggregate link to two or more TRILL RBridges, where the aggregate link includes multiple physical links to the different RBridges. The aggregate link, which includes multiple physical links, functions as one logical link to the end station. Although the term “dual” is used here, the term “dual-homed end device” does not limit the number of physical RBridges sharing the aggregate link to two. In various embodiments, other numbers of physical RBridges can share the same aggregate link. Where “dual-homed end device” is used in the present disclosure, the term “multi-homed end device” can also be used.

The term “frame” refers to a group of bits that can be transported together across a network. “Frame” should not be interpreted as limiting embodiments of the present invention to layer-2 networks. “Frame” can be replaced by other terminologies referring to a group of bits, such as “packet,” “cell,” or “datagram.”

In this disclosure, the term “forwarding information” is used in a generic sense and refers to any information that is associated with a forwarding decision in a layer-2 or a TRILL network. The terms “interface” and “port” are used interchangeably in this disclosure.

Network Architecture

FIG. 1 illustrates an exemplary network that includes a large number of end devices coupled to an RBridge, in accordance with an embodiment of the present invention. As illustrated in FIG. 1, a TRILL network 100 includes RBridges 101, 102, 104, 105, and 106. A large number of end devices, from 122-1 to 122-N, are coupled to RBridge 106. RBridge 101 is coupled to end device 124 and RBridge 104 is coupled to a non-TRILL network 140. RBridges in network 100 use edge ports to communicate to end devices and TRILL ports to communicate to other RBridges. For example, RBridge 106 is coupled to end devices 122-1 to 122-N via edge ports and to RBridges 101, 102, and 105 via TRILL ports. An end device coupled to an edge port may be a host machine or an aggregation node. For example, end devices 122-1 to 122-N are host machines directly coupled to network 100, and end device 124 is coupled to network 100 via an aggregation node, a layer-2 bridge 134.

During operation, end device 122-1 sends a packet to network 140 via ingress RBridge 106 and egress RBridge 104. During this process, RBridge 104 learns the MAC address of end device 122-1, an identifier to RBridge 106, and a local interface 152 through which the packet was received. RBridge 104 stores the MAC address and the corresponding RBridge identifier to a layer-2 forwarding table, and the RBridge identifier and the corresponding interface in an RBridge route table. The entry in the forwarding table indicates that end device 122-1 can be reached via RBridge 106, and the entry in the route table indicates that all TRILL packets destined to RBridge 106 should be sent via interface 152. When a packet destined to end device 122-1 arrives at RBridge 104 from network 140, RBridge 104 maps the RBridge identifier from the forwarding table with the local interface in the route table. As a result, RBridge 104 determines that the packet to end device 122-1 should be sent via interface 152. Note that the intermediate RBridge 105 also learns the MAC address of end device 122-1 and saves the corresponding RBridge identifier and local interface in its local forwarding and route tables, respectively.

Similarly, during operation, when end devices 122-2 to 122-N send packets to network 140, RBridge 104 stores the MAC addresses of end devices 122-2 to 122-N and the identifier to RBridge 106 to the forwarding table. However, as the interface information regarding RBridge 106 is already saved in the RBridge route table, RBridge 104 does not need to reenter the data. In some embodiments, TRILL network 100 may support multipath routing. Under such a scenario, packets from RBridge 106 can be received at RBridge 104 via a separate interface 154. RBridge 104 then stores the RBridge identifier and the corresponding interface information in the route table. All subsequent packets from RBridge 104 can be sent to RBridge 106 over multiple paths via interfaces 152 and 154.

During operation that does not involve storing forwarding information in hierarchical tables, an RBridge in the TRILL network may store all forwarding information in a single table. For example, in FIG. 1, when end device 122-1 sends a packet to network 140, egress RBridge 104 learns the MAC address of the device, the identifier to ingress RBridge 106, and the corresponding interface 152 in a single forwarding information table. Similarly, when end devices 122-2 to 122-N send packets to network 140, RBridge 104 learns the respective forwarding information and stores them in the forwarding information table. Under the scenario where network 100 supports multipath routing, when RBridge 104 learns another route to RBridge 106 via interface 154, RBridge 104 needs to add the new interface information to all entries corresponding to all end devices coupled to RBridge 106. Furthermore, if the path to RBridge 106 through interface 152 becomes unavailable (e.g., during a link failure), RBridge 104 needs to modify all entries corresponding to all end devices coupled to RBridge 106 as well. As a result, forwarding information management becomes inefficient and each update operation may lead to a large number of changes in the forwarding information table.

In embodiments of the present invention, as illustrated in FIG. 1, adding an additional interface for supporting multiple paths to RBridge 106 requires RBridge 104 to modify a single entry in the RBridge route table. For all packets destined to a MAC address associated with the RBridge 106 identifier in the forwarding table, RBridge 104 obtains the corresponding interface information (e.g., interfaces 152 and 154) from the route table and may choose to use either of or both the interfaces. Similarly, if the path to RBridge 106 through interface 152 becomes unavailable due to a failure, RBridge 104 modifies just one entry corresponding to interface 152 and RBridge 106 in the route table. Note that though each link in FIG. 1 has an interface at each end-point of the link, in FIG. 1, only interfaces 152 and 154 are shown.

In some embodiments, TRILL network 100 may be a virtual cluster switch (VCS). In a VCS, any number of RBridges in any arbitrary topology may logically operate as a single switch. Any new RBridge may join or leave the VCS in “plug-and-play” mode without any manual configuration.

Note that TRILL is only used as a transport between the switches within network 100. This is because TRILL can readily accommodate native Ethernet frames. Also, the TRILL standards provide a ready-to-use forwarding mechanism that can be used in any routed network with arbitrary topology. Embodiments of the present invention should not be limited to using only TRILL as the transport. Other protocols (such as Internet Protocol (IP) or Multi-Protocol Label Switching (MPLS)), either public or proprietary, can also be used for the transport.

Forwarding Information Management

In some embodiments, a respective RBridge maintains two hierarchical tables to store forwarding information learned from a TRILL network. The first table is a layer-2 forwarding table that stores lookup keys for a respective end device learned at the RBridge and the corresponding ingress RBridge identifier. The second table is an RBridge route table that stores local interface information associated with a respective RBridge in the network. Mapping the RBridge identifiers in these two hierarchical tables provides interface information for a respective end device.

FIG. 2A illustrates an exemplary layer-2 forwarding table that stores a mapping between the MAC address of a device and an RBridge identifier to a remote RBridge associated with the device, in accordance with an embodiment of the present invention. Layer-2 forwarding table 200 in FIG. 2A stores lookup key 202 associated with each end device and a corresponding result 204. Lookup key 202 includes MAC address 212 of the end device. An RBridge uses lookup key 202 to obtain result 204 that provides necessary forwarding information associated with the device. Result 204 includes RBridge identifier 220 corresponding to an RBridge to which the device is coupled. Essentially, looking up MAC address 212 in table 200 provides the corresponding RBridge identifier 220. In some embodiments, lookup key 202 also includes an identifier 214 to a VLAN to which the end device belongs. Under such a scenario, both MAC address 212 and VLAN identifier 214 are used to determine RBridge identifier 220. For example, in some embodiments, a single end device may belong to different VLANs and be associated with different RBridges accordingly. Hence, with a different VLAN identifier in the lookup key, the same MAC address may provide a different RBridge identifier. On the other hand, a VLAN can be associated with multiple RBridges and end devices coupled to different RBridges may belong to the VLAN. Hence, with different MAC addresses in the lookup key, the same VLAN identifier may provide different RBridge identifiers.

FIG. 2B illustrates an exemplary RBridge route table that stores a mapping between an RBridge identifier and a corresponding local outgoing interface, in accordance with an embodiment of the present invention. RBridge route table 230 in FIG. 2B includes a lookup key 232 and a corresponding result 234. Lookup key 232 includes the RBridge identifier 220. Note that the same RBridge identifier in tables 200 and 230 corresponds to the same RBridge. Result 234 includes an outgoing interface 244 through which the RBridge associated with identifier 220 can be reached and a next-hop RBridge MAC address 242. Essentially, looking up RBridge identifier 220 in table 230 provides the corresponding outgoing interface 240 and next-hop MAC address 242. MAC address 242 is used as the destination address of the outer Ethernet header of a TRILL frame sent via interface 244.

Virtual Link Aggregation

FIG. 3 illustrates an exemplary network where a virtual RBridge identifier is assigned to two physical TRILL RBridges which are coupled to end devices via virtually aggregated links, in accordance with an embodiment of the present invention. As illustrated in FIG. 3, a TRILL network 300 includes RBridges 301, 302, 304, 305, and 306. RBridge 304 is coupled to a non-TRILL network 340. End devices 322 and 324 are both dual-homed and coupled to RBridges 301 and 302. The goal is to allow a dual-homed end station to use both physical links to two separate TRILL RBridges as a single, logical aggregate link, with the same media access control (MAC) address. Such a configuration would achieve true redundancy and facilitate fast protection switching.

RBridges 301 and 302 are configured to operate in a special “trunked” mode for end devices 322 and 324. End devices 322 and 324 view RBridges 301 and 302 as a common virtual RBridge 330, with a corresponding virtual RBridge identifier. Dual-homed end devices 322 and 324 are considered to be logically coupled to virtual RBridge 330 via logical links represented by dotted lines. Virtual RBridge 330 is considered to be logically coupled to both RBridges 301 and 302, optionally with zero-cost links (also represented by dotted lines). Among the links in a link trunk, one link is selected to be a primary link. For example, the primary link for end device 322 can be the link to RBridge 301. RBridges which participate in link aggregation and form a virtual RBridge are referred to as “partner RBridges.” Operation of virtual RBridges for multi-homed end devices is specified in U.S. patent application Ser. No. 12/725,249, entitled “Redundant Host Connection in a Routed Network,” by inventors Somesh Gupta, Anoop Ghawani, Phanidhar Koganti, and Shunjia Yu, filed 16 Mar. 2010, the disclosure of which is incorporated herein in its entirety.

When end device 322 sends a packet to network 340 via virtual RBridge 330, egress RBridge 304 receives the packet and recognizes that the packet is from a dual-homed end device. Hence, RBridge 304 stores the MAC address of end device 322 and a corresponding virtual link aggregation identifier in a layer-2 forwarding table. In some embodiments, the virtual link aggregation identifier is a virtual RBridge identifier associated with virtual RBridge 330. RBridge 304 also stores the virtual link aggregation identifier and identifiers to RBridges 301 and 302 in a virtual link aggregation mapping table. In other words, the mapping table contains the list of partner RBridges associated with a virtual RBridge. RBridge 304 associates the local interface from which the frame was received with the ingress RBridge and stores identifiers to the ingress RBridge and the associated interface in an RBridge route table, as described in conjunction with FIG. 2B. For example, when RBridge 304 learns that RBridge 301 can be reached via interface 352, the information is saved in the route table.

FIG. 4A illustrates an exemplary layer-2 forwarding table that stores a mapping between the MAC address of a device, and an RBridge identifier or a virtual link aggregation identifier, in accordance with an embodiment of the present invention. Layer-2 forwarding table 400 in FIG. 4A stores lookup key 402 associated with a respective end device and a corresponding result 404. Lookup key 402 includes MAC address 412 of the end device. If the end device is dual-homed, result 404 includes virtual link aggregation identifier 425 associated with the end device. Otherwise, result 404 includes an RBridge identifier 440 corresponding to an RBridge to which the end device is coupled. In some embodiments, lookup key 402 also includes an identifier 414 to a VLAN to which the end device belongs.

FIG. 4B illustrates an exemplary virtual link aggregation mapping table that stores a mapping between a virtual link aggregation identifier and a list of corresponding RBridge identifiers, in accordance with an embodiment of the present invention. Virtual link aggregation mapping table 430 in FIG. 4B stores lookup key 432 and a corresponding result 434. Lookup key 432 includes a virtual link aggregation identifier 425 and result 434 includes a list of physical RBridges 445 participating in the link aggregation associated with identifier 425. An RBridge maps virtual link aggregation identifier 425 in tables 400 and 430, and recognizes the physical RBridges coupled to a dual-homed end device. This table allows an ingress RBridge to send data to a dual-homed end device over multiple paths. For example, in FIG. 3, RBridge 304 stores an identifier to virtual RBridge 330 and identifiers to associated physical RBridges 301 and 302 in a virtual link aggregation mapping table. RBridge 304 thus can send packets to dual-homed end device 322 over multiple paths via both RBridges 301 and 302 by checking their association with virtual RBridge 330 from the virtual link aggregation mapping table.

FIG. 4C illustrates an exemplary RBridge route table that stores a mapping between an RBridge identifier and a corresponding local outgoing interface, in accordance with an embodiment of the present invention. RBridge route table 450 in FIG. 4C includes a lookup key 452 and a corresponding result 454. Lookup key 452 includes an RBridge identifier 440. In some embodiments, RBridge identifier 440 can be included in list 445, if the RBridge associated with RBridge identifier 440 participates in the virtual link aggregation associated with virtual link aggregation identifier 425. Result 454 includes an outgoing interface 464 through which the RBridge associated with identifier 440 can be reached and a next-hop RBridge MAC address 462.

Frame Processing

In some embodiments, an RBridge in a TRILL network learns MAC addresses of end devices coupled to the network from the frames it processes, and updates forwarding and route tables accordingly. In some embodiments, an RBridge can be a member switch in a VCS and learn MAC addresses from messages sent by other member switches in the VCS. FIG. 5A presents a flowchart illustrating the process of an RBridge updating the forwarding information in hierarchical tables, in accordance with an embodiment of the present invention. The RBridge first receives a frame from a local interface (operation 502). The local interface can be either an edge port or a TRILL port. The RBridge then checks whether the MAC address of the end device is in the layer-2 forwarding table (operation 504). If not, then the RBridge checks whether the end device is dual-homed (operation 506). If the device is not dual-homed, then the MAC address of the end device and the ingress RBridge identifier are added to the layer-2 forwarding table (operation 508). If the device is dual-homed, then the RBridge adds the virtual link aggregation identifier and all physical RBridges associated with the aggregation to the virtual link aggregation mapping table (operation 512) and adds the MAC address of the end device and the virtual link aggregation identifier to the layer-2 forwarding table (operation 514). In some embodiments, a respective entry is added to a virtual link aggregation mapping table (operation 512) when a respective virtual link aggregation is created.

If the MAC address is already in the forwarding table (operation 504), then the device has already learned about the end device and the associated RBridge. Hence, after finding the MAC address in the forwarding table (operation 504) or updating the forwarding table with the MAC address (operations 508 or operation 514), the RBridge checks whether the ingress RBridge information is already in the route table (operation 520). If the ingress RBridge information is not in the route table, the local interface from which the frame is received is added to the RBridge route table as the outgoing interface associated with the ingress RBridge identifier (operation 524). If the ingress RBridge information is in the route table and the frame is received from an interface already associated with the ingress RBridge, then the forwarding information associated with the ingress RBridge is already learned and not update to the hierarchical tables is needed.

FIG. 5B presents a flowchart illustrating the process of an RBridge using the forwarding information in hierarchical tables to make a forwarding decision, in accordance with an embodiment of the present invention. The RBridge first checks whether the MAC address of a destination end device is already known (operation 552). If not, then the RBridge obtains the MAC address of the end device and the ingress RBridge identifier using ARP (operation 554) and updates the forwarding table, the mapping table, and the route table, as needed, using the obtained information (operation 556), as described in conjunction with FIG. 5A. If the end device MAC address is already known (operation 552) or the tables are updated (operation 556), the RBridge then checks whether the end device is multi-homed (operation 560). If so, then the RBridge maps the virtual link aggregation identifier in the forwarding table to the corresponding virtual link aggregation identifier in the mapping table, and obtains the list of associated physical RBridges (operation 562). The RBridge then selects the egress RBridge from the list of physical RBridges (operation 564). In some embodiments, the RBridge can forward packets to the multi-homed destination end device over multiple paths by sending the packet via multiple physical RBridges associated with the virtual link aggregation.

Once the egress RBridge is identified, the RBridge maps the egress RBridge identifier in the mapping table to the corresponding RBridge identifier in the route table, and obtains the outgoing interface associated with the egress RBridge (operation 566). If the end device is not multi-homed (operation 560), the RBridge maps the egress RBridge identifier associated with destination the end device in the forwarding table with the corresponding RBridge identifier the route table, and obtains the outgoing interface associated with the egress RBridge (operation 566). After obtaining the outgoing interface, the RBridge encapsulates the frame in a TRILL header and transmits the frame via the outgoing interface (operation 568).

Failure Handling

FIG. 6 illustrates a scenario where one of the RBridges associated with an end device experiences a link failure, in accordance with an embodiment of the present invention. In this example, a TRILL network 600 includes RBridges 601, 602, 604, 605, and 606. A large number of end devices, denoted by end devices 622-1 to 622-N, are coupled to RBridge 606. RBridge 601 is coupled to a non-TRILL network 650. During operation, end devices 622-1 to 622-N send packets to network 650 through RBridge 601 via link 642 and interface 652. As a result, RBridge 601 stores MAC addresses of these end devices and an identifier to RBridge 606 in a layer-2 forwarding table, and stores interface 652 and an identifier to RBridge 606 in an RBridge route table.

Suppose that link 642 fails. As a result, interface 652 cannot send packets to RBridge 606 any longer. However, another path from RBridge 606 to RBridge 601 can be established via links 644 and 646. Under such a scenario, interface 654 to link 646 becomes the outgoing interface for all packets destined to RBridge 606. RBridge 601 then updates only one entry corresponding to RBridge 606 in the RBridge route table and replace interface 652 with interface 654. All entries for end devices 622-1 to 622-N in the forwarding table remain unchanged.

On the other hand, if all forwarding information is stored in a single table, each entry for an end device contains both associated RBridge information and the outgoing interface in the table. For example, for end device 622-1, RBridge 601 stores RBridge 606 as the associated RBridge and interface 652 as the outgoing interface in a single entry in the table. Similar entries are saved for end devices 622-2 to 622-N. As a result, when the outgoing interface for RBridge 606 is changed from interface 652 to interface 654, all forwarding entries corresponding to RBridge 606, such as entries for end devices 622-1 to 622-N, are changed. Note that though each link in FIG. 6 has an interface at each end-point of the link, in FIG. 6, only interfaces 652 and 654 are shown.

Exemplary Switch System

FIG. 7 illustrates an exemplary architecture of a switch with hierarchical forwarding tables, in accordance with an embodiment of the present invention. In this example, an RBridge 700 includes a number of TRILL ports 704, a TRILL management module 720, an Ethernet frame processor 710, and a storage 750. TRILL management module 720 further includes a TRILL header processing module 722, a lookup module 728, and an updating module 726. TRILL ports 704 include inter-switch communication channels for communication with one or more RBridges. An inter-switch communication channel can be implemented via a regular communication port and based on any open or proprietary format. Furthermore, the inter-switch communication between RBridges is not required to be direct port-to-port communication.

During operation, TRILL ports 704 receive TRILL frames from (and transmit frames to) other RBridges. TRILL header processing module 722 processes TRILL header information of the received frames and updating module 726 updates forwarding information stored in storage 750 based on their TRILL headers, as described in conjunction with FIG. 5A. To forward a packet, lookup module 728 looks up forwarding information in storage 750, as described in conjunction with FIG. 5B.

In some embodiments, RBridge 700 may participate in a virtual link aggregation and form a virtual RBridge, wherein TRILL management module 720 further includes a virtual RBridge configuration module 724. TRILL header processing module 722 generates the TRILL header and outer Ethernet header for ingress frames corresponding to the virtual RBridge. Virtual RBridge configuration module 724 manages the communication with RBridges associated with the virtual RBridge and handles various inter-switch communications, such as link and node failure notifications. Virtual RBridge configuration module 724 allows a user to configure and assign the identifier for the virtual RBridges.

In some embodiments, RBridge 700 may include a number of edge ports 702, as described in conjunction with FIG. 1. Edge ports 702 receive frames from (and transmit frames to) end devices. Ethernet frame processor 710 extracts and processes header information from the received frames.

In some embodiments, RBridge 700 may maintain a membership in a logical switch, wherein RBridge 700 also includes a virtual switch management module 740 and a logical switch 742, as described in conjunction with FIG. 1. Virtual switch management module 740 maintains a configuration database in storage 750 that maintains the configuration state of every switch within the logical switch. Virtual switch management module 740 maintains the state of logical switch 742, which is used to join other switches. In some embodiments, logical switch 742 can be configured to operate in conjunction with Ethernet frame processor 710 as a logical Ethernet switch.

Note that the above-mentioned modules can be implemented in hardware as well as in software. In one embodiment, these modules can be embodied in computer-executable instructions stored in a memory which is coupled to one or more processors in RBridge 700. When executed, these instructions cause the processor(s) to perform the aforementioned functions.

In summary, embodiments of the present invention provide a switch, a method and a system for constructing scalable forwarding tables that reduce the number of modifications to the entries in the tables during an update. In one embodiment, the switch includes a storage and a lookup mechanism. The storage stores a layer-2 forwarding table that contains an entry corresponding to a MAC address of a device and an identifier of a remote switch associated with the device. The storage also stores a route table that contains an entry indicating a local outgoing interface corresponding to the remote switch. The lookup mechanism identifies the local outgoing interface corresponding to the device based on the layer-2 forwarding table and the route table.

The methods and processes described herein can be embodied as code and/or data, which can be stored in a computer-readable non-transitory storage medium. When a computer system reads and executes the code and/or data stored on the computer-readable non-transitory storage medium, the computer system performs the methods and processes embodied as data structures and code and stored within the medium.

The methods and processes described herein can be executed by and/or included in hardware modules or apparatus. These modules or apparatus may include, but are not limited to, an application-specific integrated circuit (ASIC) chip, a field-programmable gate array (FPGA), a dedicated or shared processor that executes a particular software module or a piece of code at a particular time, and/or other programmable-logic devices now known or later developed. When the hardware modules or apparatus are activated, they perform the methods and processes included within them.

The foregoing descriptions of embodiments of the present invention have been presented only for purposes of illustration and description. They are not intended to be exhaustive or to limit this disclosure. Accordingly, many modifications and variations will be apparent to practitioners skilled in the art. The scope of the present invention is defined by the appended claims.

Claims

1. A switch for facilitating packet forwarding in a network of interconnected switches, wherein the network comprises at least the switch and an egress switch, and wherein the egress switch is a virtual switch associated with a number of physical switches; andwherein the switch comprises a storage device storing: a first data entry indicating a media access control (MAC) address of an end device and an identifier of the egress switch to which the end device is coupled;a second data entry which is separate from the first data entry and which indicates an outgoing interface corresponding to the egress switch; anda third data entry which maps an identifier of the virtual switch to one or more identifiers of the physical switches.

2. The switch of claim 1, wherein the first data entry is stored in a first data structure; wherein the second data entry is stored in a second data structure; andwherein the first data structure and the second data structure are separate from each other.

3. The switch of claim 1, wherein the first data includes a virtual local area network (VLAN) identifier associated with the end device.

4. The switch of claim 1, further comprising an update module adapted to update the identifier of the outgoing interface corresponding to the egress switch in the second data entry, while the first data entry remains unchanged.

5. The switch of claim 1, wherein the second entry includes a second outgoing interface corresponding to the egress switch.

6. The switch of claim 1, wherein the network is formed based on an Internet Protocol (IP), Multi-protocol Label Switching (MPLS), or (Transparent Interconnection of Lots of Links) TRILL protocol.

7. The switch of claim 1, further comprising a lookup module adapted to look up the first data entry to obtain the egress switch identifier based on the MAC address.

8. The switch of claim 1, further comprising a lookup module adapted to select one of the number of physical switches for forwarding a packet.

9. A method for facilitating packet forwarding in a network of interconnected switches, wherein the network comprises at least a switch and an egress switch, and wherein the egress switch is a virtual switch associated with a number of physical switches; and

10. The method of claim 9, wherein the first data entry is stored in a first data structure; wherein the second data entry is stored in a second data structure; andwherein the first data structure and the second data structure are separate from each other.

11. The method of claim 9, wherein the first data entry includes a virtual local area network (VLAN) identifier associated with the end device.

12. The method of claim 9, further comprising updating the identifier of the outgoing interface corresponding to the egress switch in the second data entry, while the first data entry remains unchanged.

13. The method of claim 9, wherein the second entry includes a second outgoing interface corresponding to the egress switch.

14. The method of claim 9, wherein the network is formed based on an Internet Protocol (IP), Muti-protocol Label Switching (MPLS), or (Transparent Interconnection of Lots of Links) TRILL protocol.

15. The method of claim 9, further comprising looking up the first data entry to obtain the egress switch identifier based on the MAC address.

16. The method of claim 9, further comprising selecting one of the number of physical switches for forwarding a packet.

17. A storage device storing instructions which when executed by a processor cause the processor to perform a method for facilitating packet forwarding in a network of interconnected switches, wherein the network comprises at least a switch and an egress switch, and wherein the egress switch is a virtual switch associated with a number of physical switches; and

18. The storage device of claim 17, wherein the first data entry is stored in a first data structure; wherein the second data entry is stored in a second data structure; andwherein the first data structure and the second data structure are separate from each other.

19. The storage device of claim 17, wherein the first data entry in the first data structure further includes a virtual local area network (VLAN) identifier associated with the device.

20. The storage device of claim 17, wherein the method further comprises updating the identifier of the outgoing interface corresponding to the egress switch in the second data entry, while the first data entry remains unchanged.

21. The storage device of claim 17, wherein the second entry includes a second outgoing interface corresponding to the egress switch.

22. The storage device of claim 17, wherein the network is formed based on an Internet Protocol (IP), Muti-protocol Label Switching (MPLS), or (Transparent Interconnection of Lots of Links) TRILL protocol.

23. The storage device of claim 17, wherein the method further comprises looking up the first data entry to obtain the egress switch identifier based on the MAC address.

24. The storage device of claim 17, wherein the method further comprises selecting one of the number of physical switches for forwarding a packet.