Patent Application
20140226674
1. Technical Field
The present disclosure relates generally to methods and apparatus for providing redundancy within physically separate networks through the use of separate spanning trees.
2. Description of the Related Art
Today, companies often have offices that are geographically dispersed. Each of these geographical locations typically supports a separate physical network. Each of these networks may provide access to data, applications, and other network resources. Such a network may be referred to as a “data center.”
In order to support communication among multiple geographically dispersed networks, companies often support a single Virtual Local Area Network (VLAN). In order to support communication among the geographically dispersed networks, a single spanning tree generated via the Spanning Tree Protocol (STP) is often deployed for the VLAN over the geographically dispersed networks.
With the increase of globally dispersed offices, the number of data centers is increasing. Unfortunately, the STP may not be reliable over a large number of hops and logical interfaces.
In the following description, numerous specific details are set forth in order to provide a thorough understanding of the disclosed embodiments. It will be obvious, however, to one skilled in the art, that the disclosed embodiments may be practiced without some or all of these specific details. In other instances, well-known process steps have not been described in detail in order not to unnecessarily obscure the disclosed embodiments.
In one embodiment, a system includes a first network, a second network, and a core network connecting the first network to the second network. The first network includes a first set of two or more network devices, wherein the first network has a first spanning tree associated therewith. Similarly, the second network includes a second set of two or more network devices, wherein the second network has a second spanning tree associated therewith, wherein the second spanning tree is separate from the first spanning tree.
Adding redundancy to an extended layer 2 network (e.g., Ethernet network) is typically accomplished through the use of a spanning tree to keep the topology free from loops. The Spanning Tree Protocol (STP) is an Open System Interconnection (OSI) layer-2 protocol that ensures a loop-free topology for any bridged LAN. STP allows a network design to include redundant links to provide automatic backup paths if an active link fails, without the danger of bridge loops that may be created by backup links, or the need for manual enabling/disabling of these backup links. It is important to prevent bridge loops, since they result in flooding the network.
Generally, the STP creates a spanning tree within a mesh network of connected Layer-2 bridges (e.g., Ethernet switches), and disables those links that are not part of the tree, leaving a single active path between any two network nodes.
There are a number of problems associated with the use of a single spanning tree in association with an extended Layer 2 network that spans multiple remote locations. Specifically, the STP does not provide robustness for large scale Layer 2 deployments. By means of exchanging bridge protocol data units (BPDUs) between network devices (e.g., bridges), the STP elects the ports that eventually forward or block traffic.
Conservative default values for the STP timers typically impose a maximum network diameter of seven hops. Therefore, two bridges cannot be more than seven hops away from each other. When a BPDU propagates from the root bridge of the spanning tree toward leave bridges of the spanning tree, an age provided in an age field of the BPDU increments each time the BPDU traverses a bridge. Eventually, the bridge discards the BPDU when the age exceeds the maximum age. Accordingly, convergence of the spanning tree will be affected if the root bridge is too far away from some bridges in the network.
An aggressive value for the maximum age parameter and the forward delay can lead to a very unstable STP topology. In such cases, the loss of some BPDUs can cause a loop to appear.
Network stability may be compromised as a result of slow response to network failures (slow convergence). Specifically, the STP is not built to accommodate link flapping conditions, high error rates, uni-directional failures or non report of loss of signal. These typical and frequent problems associated with long and medium distance links could lead to STP slow convergence or instability.
One of the reasons for multiple network sites such as multi-site data centers is disaster recovery. However, as data centers typically need Layer 2 connectivity, failure in one data center can affect other data centers, which could potentially lead to a black-out of all data centers at the same time.
Due to the scaling problem of the STP, the disclosed embodiments support a loop-free topology without the use of a spanning tree that spans multiple physical networks (e.g., data centers). This may be accomplished, in part, through the use of a separate spanning tree in association with each physical network (e.g., data center), rather than a single spanning tree that spans multiple physical networks. A loop-free topology may be maintained through the use of a communication protocol that ensures that only a single active path is present between any two network nodes. In the following description, a system architecture is set forth that enables multiple physical sites to be interconnected while ensuring a loop-free topology.
The core network 108 may be a Virtual Private LAN Service (VPLS) network, which supports Ethernet based multipoint to multipoint communication over Internet Protocol (IP) and Multi Protocol Label Switching (MPLS) networks. The VPLS allows geographically dispersed sites to share an Ethernet broadcast domain by connecting the sites through pseudo-wires. In a VPLS, Local Area Networks (LANs) at each site (e.g., represented by the networks 102, 104, 106) may be extended to the edge of the provider network (e.g., represented by the core network 108). The provider network may then emulate a switch or bridge to connect all of the LANs to create a single bridged LAN.
As shown in this example, each of the networks 102, 104, 106 may include a set of two or more network devices (e.g., bridges or routers). Specifically, each of the networks 102, 104, 106 and corresponding set of network devices may include at least two redundant network devices (e.g., bridges or routers) connected to the core network 108. Since these redundant network devices are at the edge of the provider network, they may be referred to as Provider Edge (PE) devices (e.g., routers). As shown in
In accordance with one embodiment, each of the two redundant network devices of a particular physical network runs a communication protocol (e.g., redundancy protocol) such as a semaphore to prevent both of the two redundant network devices of the network from simultaneously being in an active state, as will be described in further detail below. Specifically, the semaphores of a particular physical network may be announced via at least one connection between the two redundant network devices of the physical network. In this example, the semaphores of the first network 102 may be announced via at least one connection between the two redundant network devices 110, 112 of the first network 102 as shown at 122. Similarly, the semaphores of the second network 104 may be announced via at least one connection between the two redundant network devices 114, 116 of the second network 104 as shown at 124, and the semaphores of the third network 106 may be announced via at least one connection between the two redundant network devices 118, 120 of the third network 106 as shown at 126.
At any given point in time, the redundant network devices of a particular physical network include a single active network device and at least one backup network device. In accordance with various embodiments, only one of the two redundant network devices forwards traffic to and from the physical network at a given point in time. The active network device and the backup network device of each of the networks 102, 104, 106 may each be connected to the core network 108. In this example, the first network 102 has two redundant network devices 110, 112, the second network has two redundant network devices 114, 116, and the third network has two redundant network devices 118, 120. Specifically, the first network 102 includes an active network device 110 and a backup network device 112, the second network 104 includes an active network device 114 and a backup network device 116, and the third network 106 includes an active network device 118 and a backup network device 120.
It is important to note that should an active network device fail, the backup network device would take over for the active device. In other words, the backup network device would process traffic on behalf of the failed active device. The backup network device would then be considered the active device. Thus, a single network device may function as either a backup network device or an active network device at any given point in time.
An active network device may communicate with the backup network device via at least one connection between the active network device and the backup network device. In addition, the active network device may forward data packets to or from the core network 108 (e.g., between the core network 108 and the physical network). In accordance with one embodiment, traffic associated with the core network 108 cannot traverse the connection between the active network device and the backup network device.
In contrast, a backup network device (i.e., standby network device) may communicate with the active network device via at least one connection between the active network device and the backup network device. However, the backup network device may be incapable of forwarding data packets to or from the core network 108 (e.g., between the core network 108 and the physical network).
Each of the physical networks 102, 104, 106 may have a separate spanning tree associated therewith. In accordance with one embodiment, a STP domain is limited to a physical network (e.g., data center). In other words, a spanning tree associated with a particular network is not associated with other networks. Moreover, the spanning tree is not connected to another spanning tree (e.g., associated with another network). The core network 108 need not implement a spanning tree.
The redundant network devices (e.g., bridges) of each of the physical networks 102, 104, 106 may run the Spanning Tree Protocol. To break loops in a particular physical network (e.g., LAN) such as physical networks 102, 104, 106, the redundant network devices (e.g., bridges) of that network may compute a spanning tree. The spanning tree allows a network to include redundant links to provide automatic backup paths if an active link fails, without the danger of bridge loops or the need for manual enabling/disabling of these backup links.
Another advantage of the use of separate spanning trees is the effect on Topology Change Notifications (TCNs). Typically, when a physical topology changes, STP convergence forces a TCN toward all domain switches. Since each physical network has a separate spanning tree domain, TCNs are no longer required when a problem occurs in another, potentially distant, domain. Rather, TCNs may be transmitted only within the local STP domain.
Within each physical network, two redundant network devices each run a communication protocol to prevent both of the redundant network devices from simultaneously being in an active state.
Upon receiving the packet indicating that the primary is up at 306, the backup network device 304 may force the backup connection (e.g., port) to the core network down at 310 such that traffic to and from the core network via the backup network device 304 is blocked. The backup network device 304 may set the backup semaphore down at 312, and the backup network device 304 may send a packet to the primary network device 302 indicating that the backup network device 304 is down as shown at 314. Once the primary network device 302 receives the packet confirming that the backup network device 304 is not forwarding traffic, the primary network device 302 sets the primary connection (e.g., port) up at 316 such that traffic to and from the core network (e.g., between the core network and the physical network) is forwarded via the primary network device 302.
In the event that a failure occurs in the primary network device 302, this forces the primary connection down. More specifically, this is accomplished by forcing the semaphore of the primary network device 302 down. Through the use of a communication protocol such as the semaphore described herein, only a single active network device will be in communication with the core network.
Each of the redundant network devices associated with a particular physical network may be configured with semaphores supporting operation as both a primary network device and a backup network device. This enables a backup network device to act as an active network device in the event of failure of the backup network device. Moreover, once a failed active network device is brought up, it may act as a backup network device.
Generally, the techniques for performing the disclosed embodiments may be implemented on software and/or hardware. For example, they can be implemented in an operating system kernel, in a separate user process, in a library package bound into network applications, on a specially constructed machine, or on a network interface card. In a specific embodiment of this invention, the techniques of the present invention are implemented in software such as an operating system or in an application running on an operating system.
A software or software/hardware hybrid packet processing system of this invention may be implemented on a general-purpose programmable machine selectively activated or reconfigured by a computer program stored in memory. Such programmable machine may be a network device designed to handle network traffic. Such network devices typically have multiple network interfaces including frame relay and ISDN interfaces, for example. Specific examples of such network devices include routers and switches. A general architecture for some of these machines will appear from the description given below. Further, various embodiments may be at least partially implemented on a card (e.g., an interface card) for a network device or a general-purpose computing device.
The disclosed embodiments may be implemented at network devices such as switches or routers. Referring now to
The interfaces 1568 are typically provided as interface cards (sometimes referred to as “line cards”). Generally, they control the sending and receiving of data packets or data segments over the network and sometimes support other peripherals used with the router 1510. Among the interfaces that may be provided are Ethernet interfaces, frame relay interfaces, cable interfaces, DSL interfaces, token ring interfaces, and the like. In addition, various very high-speed interfaces may be provided such as fast Ethernet interfaces, Gigabit Ethernet interfaces, ATM interfaces, HSSI interfaces, POS interfaces, FDDI interfaces, LAN interfaces, WAN interfaces, metropolitan area network (MAN) interfaces and the like. Generally, these interfaces may include ports appropriate for communication with the appropriate media. In some cases, they may also include an independent processor and, in some instances, volatile RAM. The independent processors may control such communications intensive tasks as packet switching, media control and management. By providing separate processors for the communications intensive tasks, these interfaces allow the master microprocessor 1562 to efficiently perform routing computations, network diagnostics, security functions, etc. Although the system shown in
Regardless of network device's configuration, it may employ one or more memories or memory modules (such as, for example, memory block 1565) configured to store data, program instructions for the general-purpose network operations and/or the inventive techniques described herein. The program instructions may control the operation of an operating system and/or one or more applications, for example.
Because such information and program instructions may be employed to implement the systems/methods described herein, the disclosed embodiments relate to machine readable media that include program instructions, state information, etc. for performing various operations described herein. Examples of machine-readable media include, but are not limited to, magnetic media such as hard disks, floppy disks, and magnetic tape; optical media such as CD-ROM disks and DVDs; magneto-optical media such as floptical disks; and hardware devices that are specially configured to store and perform program instructions, such as read-only memory devices (ROM) and random access memory (RAM). Examples of program instructions include both machine code, such as produced by a compiler, and files containing higher level code that may be executed by the computer using an interpreter.
Although illustrative embodiments and applications of the disclosed embodiments are shown and described herein, many variations and modifications are possible which remain within the concept, scope, and spirit of the embodiments of the invention, and these variations would become clear to those of ordinary skill in the art after perusal of this application. For example, the various examples described herein relate to the use of semaphores by the redundant network devices to ensure that only one of the redundant network devices is active at any given point in time. However, the disclosed embodiments may also be performed using other redundancy protocols or signaling mechanisms. Moreover, the disclosed embodiments need not be performed using the steps described above. Accordingly, the present embodiments are to be considered as illustrative and not restrictive, and the disclosed embodiments are not to be limited to the details given herein, but may be modified within the scope and equivalents of the appended claims.
This application is a continuation of U.S. patent application Ser. No. 12/355,668, filed Jan. 16, 2009, titled “VPLS N-PE REDUNDANCY WITH STP ISOLATION,” the disclosure of which is hereby incorporated by reference in its entirety.
| Number | Date | Country | |
|---|---|---|---|
| Parent | 12355668 | Jan 2009 | US |
| Child | 14255855 | US |
