Cisco Technology, Inc.

Suresh Pasupula

Rajagopalan Janakiraman

Lukas Krattiger

Manju Ramesh

Christophe Paggen

Huyen Trung Duong

Sivakumar Ganapathy

Gaurav Badoni

Senthil Kenchiah

Sachin Gupta

Prashanth Matety

Priyanka Warade

Shashank Chaturvedi

Techniques for using more-specific routing to perform scalable Layer-2 (L2) stretching of subnets across hybrid-cloud environments. Routing tables in a public cloud may allow for routes that are more specific than the default local route, and the more-specific routes may be used to send all traffic to a dedicated, cloud router. The more-specific routes are set up for a VPC where a subnet resides such that the more specific-routes cover at least a portion of subnet range. The next hop for the more-specific routes point to the cloud router which is capable of doing host routing and segmentation extension. Thus, traffic originating from endpoints in a VPC is routed to the cloud router, and the cloud router determines whether the traffic is to be re-routed back to a destination endpoint in the VPC (or another cloud location), or sent to a destination endpoint residing in the on-premises site.

Specifying routes to enable Layer-2 mobility in hybrid-cloud environments

Specifying routes to enable layer-2 mobility in hybrid-cloud environments

Techniques for maintaining isolation and segregation for network paths through multi-cloud fabrics using VRF technologies. The techniques include running virtual routers in a cloud network that connect the cloud network to an on-premises network using a network overlay that preserves VRF information in data packets. Further, the virtual routers connect to individual gateways in the cloud network using tunnels, and each individual gateway is connected to multiple VPCs without overlapping subnets. The virtual routers may assign a sink VRF to each gateway connection that can be used to perform source-IP based VRF selection by mapping source IP addresses in each tunnel connection to appropriate VRFs for the source IP addresses. In this way, virtual routers may use sink VRFs to translate into the VRF information for data packets from the VPCs via source-IP based lookup, and use the corresponding VRF route table to determine next hops for data packets.

Isolation and segmentation in multi-cloud interconnects

Methods, devices, and computer-readable medium for preventing broadcast looping during a site merge are described herein. An example method can include detecting a site merge between a plurality of layer 2 (L2) networks using a spanning tree protocol (STP), blocking a data traffic port connecting the L2 networks in response to detecting the site merge, and performing an STP-Ethernet virtual private network (EVPN) handshake. The STP-EVPN handshake can include changing a root bridge in one of the L2 networks. Thereafter, the method can include unblocking the data traffic port connecting the L2 networks. In other words, the data traffic port connecting the L2 networks can be unblocked after changing the root bridge in the one of the L2 networks.

Methods, devices, and computer-readable media for preventing broadcast loops during a site merge

Growing community of inventors

Cupertino, CA, United States of America

Suresh Pasupula