Shared L2 bridging domains for L3 virtual networks

摘要

Systems and/or methods that facilitate the segmentation of layer 3 (L3) data to more than one virtual private network (VPN) or virtual network (vNET) are presented. An application classifier component can be used to facilitate the classification of L2 to and from hosts and/or other networking components that are attached to a network based on the type of application with which the network traffic is associated. The innovation associates multiple Virtual Local Area Networks (VLANs) with the same L2 forwarding table ahead of bridging into shadow VLANs (SVLANs) which can be associated with different L3 vNETs. The application classifier component can classify data traffic at the switch port through Switching Virtual Interfaces (SVIs) into SVLANs which can be associated with different L3 vNETs. Each vNET can be optimized and provide services specific to which type of application in which the vNET is associated.

主权项

1. A system, comprising:
a processor implemented application classifier component that segments routable data traffic prior to bridging layer 2 (L2) data traffic within a shared access virtual local area network (VLAN) and facilitates delivery of the routable data traffic to a plurality of application-specific layer 3 (L3) shadow VLANs (SVLANs),
wherein the segmentation comprises determining that the routable data traffic is to be delivered to a specific one or more of the application-specific L3 SVLANs, based on an application-specific tag embedded within the routable data traffic by a host that is a member of one or more of the application-specific L3 SVLANs, the tag indicating an application type to which the routable data traffic is associated, wherein the segmentation is performed at an L2 level, and wherein facilitating delivery of the routable data traffic comprises associating the application-specific L3 SVLANs with an L2 forwarding table and bridging the segmented data traffic to the application-specific L3 SVLANs using the L2 forwarding table; a plurality of application-specific switched virtual interfaces (SVIs) that associate the application-specific L3 SVLANs to a plurality of application-specific L3 virtual networks (vNETs), wherein the application-specific SVIs are configured to perform L3 processing; and a transmission component that delivers the segmented data traffic to one or more of the application-specific L3 vNETs associated with the specific one or more of the application-specific L3 SVLANs, via one or more of the application-specific SVIs associated with the specific one or more of the application-specific L3 SVLANs.