FEDERATED FIREWALL MANAGEMENT FOR MOVING WORKLOAD ACROSS DATA CENTERS

摘要

A method of providing firewall support for moving a data compute node (DCN) across data centers. The method receives a set of global firewall rules to enforce across multiple data centers. The set of global firewall rules utilize unique identifiers that are recognized by the network manager of each data center. The method distributes the specified set of global firewall rules to the network managers. The method receives an indication that a DCN operating on a first host in a first data center is migrating to a second host operating in a second data center. The method sends a set of firewall session states to the network manager of the second data center. The method receives an indication that the DCN on the second host has started and enforces firewall rules for the DCN on the second host by using the firewall session states and the global firewall rules.

主权项

1. A method of providing firewall support for moving a data compute node (DCN) across data centers, each data center comprising a network manager, the method comprising:
receiving a set of global firewall rules to enforce across a plurality of data centers, the set of global firewall rules utilizing unique identifiers recognized by the network manager of each of the plurality of data centers; distributing the set of global firewall rules to the network manager of each data center; receiving an indication that a DCN operating on a first host in a first data center is migrating to a second host operating in a second data center; sending a set of firewall session states to the network manager of the second data center; receiving an indication that the migrated DCN on the second host is powered on; and enforcing firewall rules for the migrated DCN using the firewall session states and the global firewall rules.