Abstract: Some embodiments provide a method for implementing a logical network. Based on logical network configuration data, the method identifies a route for a set of network addresses to add to a routing table of the logical router, and also identifies a route type for the identified route. The method determines whether to include the identified route as a route for the logical router to advertise based on the route type of the identified route. The method distributes a routing table comprising the identified route to a computing device that implements the logical router, where the computing device advertises the identified route when the route type is specified for advertisement.

Abstract: Some embodiments provide a method for a controller that manages a physical network that implements multiple logical networks that include multiple logical routers. The method receives a command to change a particular centralized routing component of a logical router to an inactive state. At least two centralized routing components of the logical router are implemented on at least two different host machines in the physical network. The method identifies a host machine on which the particular centralized routing component operates. Other centralized routing components of other logical routers also operate on the identified host machine. The method sends a message to the identified host machine to cause the particular centralized routing component to change to an inactive state, without modifying a state of the identified host machine or the other centralized routing components operating on the identified host machine.

Abstract: Some embodiments provide a method for configuring a set of logical routers in a logical network. The method receives a configuration of an advertised route for a first logical router and a set of allowable routes for a second logical router to which the first logical router connects. The method determines whether the set of allowable routes for the second logical router includes the advertised route as an allowed route from the first logical router. Only when the advertised route is an allowed route from the first logical router, the method adds the advertised route to a routing table for at least one component of the second logical router.

Abstract: Some embodiments provide a method for a controller that manages a physical network that implements multiple logical networks that include multiple logical routers. The method receives a command to change a particular centralized routing component of a logical router to an inactive state. At least two centralized routing components of the logical router are implemented on at least two different host machines in the physical network. The method identifies a host machine on which the particular centralized routing component operates. Other centralized routing components of other logical routers also operate on the identified host machine. The method sends a message to the identified host machine to cause the particular centralized routing component to change to an inactive state, without modifying a state of the identified host machine or the other centralized routing components operating on the identified host machine.

Abstract: Some embodiments provide a method or tool for automatically configuring a logical router on one or more edge nodes of an edge cluster (e.g., in a hosting system such as a datacenter). The method of some embodiments configures the logical router on the edge nodes based on a configuration policy that dictates the selection method of the edge nodes. In some embodiments, an edge cluster includes several edge nodes (e.g., gateway machines), through which one or more logical networks connect to external networks (e.g., external logical and/or physical networks). In some embodiments, the configured logical router connects a logical network to an external network through the edge nodes.

Abstract: A system provisions global logical entities that facilitate the operation of logical networks that span two or more datacenters. These global logical entities include global logical switches that provide L2 switching as well as global routers that provide L3 routing among network nodes in multiple datacenters. The global logical entities operate along side local logical entities that are for operating logical networks that are local within a datacenter.

Abstract: Some embodiments provide a method for implementing a logical router in a logical network. In some embodiments, the method receives a configuration of a static route for the logical router, which includes several routing components with separate routing tables. The method identifies which of the routing components require addition of a route to a corresponding routing table to implement the configuration of the static route. The method adds the routes to the corresponding separate routing tables of the identified routing components.

Abstract: Some embodiments provide a method or tool for automatically configuring a logical router on one or more edge nodes of an edge cluster (e.g., in a hosting system such as a datacenter). The method of some embodiments configures the logical router on the edge nodes based on a configuration policy that dictates the selection method of the edge nodes. In some embodiments, an edge cluster includes several edge nodes (e.g., gateway machines), through which one or more logical networks connect to external networks (e.g., external logical and/or physical networks). In some embodiments, the configured logical router connects a logical network to an external network through the edge nodes.

Abstract: A method of defining policy for a network virtualization platform of a data center is provided. The method receives a registration of one or more actions provided by each of a plurality of data center services. The method defines a policy template by receiving the identification of a set of data center resources and a set of actions registered by a set of data center services to be applied to each identified resource. The method instantiates the template into a set of policy instances that each includes an identification of one or more resources and identification of one or more actions identified in the policy template. The policy is then enforced by the set of data center services by applying the actions identified in each policy instance to the resources identified in the policy instance.

Abstract: Some embodiments provide a method for configuring a logical router to exchange routing data with a neighboring router through a dynamic routing protocol. The logical router is implemented as multiple routing components. The method receives identification data for the neighboring router with which to peer the logical router. Based on the identification data, the method identifies a subset of the routing components to peer with the neighboring router. The method generates configuration data for each routing component in the identified subset. Each identified routing component uses the configuration data to exchange routing data with the neighboring router through the dynamic routing protocol.

Abstract: A system provisions global logical entities that facilitate the operation of logical networks that span two or more datacenters. These global logical entities include global logical switches that provide L2 switching as well as global routers that provide L3 routing among network nodes in multiple datacenters. The global logical entities operate along side local logical entities that are for operating logical networks that are local within a datacenter.

Abstract: Some embodiments provide a method for implementing a logical router in a logical network. In some embodiments, the method receives a configuration of a static route for the logical router, which includes several routing components with separate routing tables. The method identifies which of the routing components require addition of a route to a corresponding routing table to implement the configuration of the static route. The method adds the routes to the corresponding separate routing tables of the identified routing components.

Abstract: Some embodiments provide a method for configuring a set of logical routers in a logical network. The method receives a configuration of an advertised route for a first logical router and a set of allowable routes for a second logical router to which the first logical router connects. The method determines whether the set of allowable routes for the second logical router includes the advertised route as an allowed route from the first logical router. Only when the advertised route is an allowed route from the first logical router, the method adds the advertised route to a routing table for at least one component of the second logical router.

Abstract: Some embodiments provide a method for implementing a logical router (LR) in a logical network. The method receives configuration data connecting a first LR to a second LR, which includes several logical routing components with separate routing tables. For each of one or more routes configured for the first LR, the method adds a route to the routing table of a distributed routing component of the second LR. The added route has a next hop address of an interface of the first LR. The method also adds, for each of the one or more routes configured for the first LR, a route to the routing tables of each of one or more centralized routing components of the second LR. The next hop address of the added route is an address of an interface of the distributed routing component that is internal to the second LR.

Abstract: Some embodiments provide a method for configuring a set of logical routers in a logical network. The method receives a configuration of an advertised route for a first logical router and a set of allowable routes for a second logical router to which the first logical router connects. The method determines whether the set of allowable routes for the second logical router includes the advertised route as an allowed route from the first logical router. Only when the advertised route is an allowed route from the first logical router, the method adds the advertised route to a routing table for at least one component of the second logical router.

Abstract: Some embodiments provide a method for configuring a logical router in a logical network. The method receives a configuration of a rule for network address translation (NAT) used by a first logical router to translate a set of network addresses to a particular network address. The method automatically configures advertisement of a route for the particular network address to a second logical router. The method automatically adds the advertised route for the particular network address to a routing table for at least one component of the second logical router.

Abstract: Some embodiments provide a method for configuring a logical router to exchange routing data with a neighboring router through a dynamic routing protocol. The logical router is implemented as multiple routing components. The method receives identification data for the neighboring router with which to peer the logical router. Based on the identification data, the method identifies a subset of the routing components to peer with the neighboring router. The method generates configuration data for each routing component in the identified subset. Each identified routing component uses the configuration data to exchange routing data with the neighboring router through the dynamic routing protocol.

Abstract: Some embodiments provide a method for a controller that manages a physical network that implements multiple logical networks that include multiple logical routers. The method receives a command to change a particular centralized routing component of a logical router to an inactive state. At least two centralized routing components of the logical router are implemented on at least two different host machines in the physical network. The method identifies a host machine on which the particular centralized routing component operates. Other centralized routing components of other logical routers also operate on the identified host machine. The method sends a message to the identified host machine to cause the particular centralized routing component to change to an inactive state, without modifying a state of the identified host machine or the other centralized routing components operating on the identified host machine.

Abstract: A method for visualizing network flows of a network is provided. The method monitors network flows between a group of machines in a network. The method associates identifiers with the monitored network flows. The method aggregates the monitored network flows into a set of groups based on the associated identifiers. The method displays a set of flow records for the each group of the set of groups.

Abstract: A system provisions global logical entities that facilitate the operation of logical networks that span two or more datacenters. These global logical entities include global logical switches that provide L2 switching as well as global routers that provide L3 routing among network nodes in multiple datacenters. The global logical entities operate along side local logical entities that are for operating logical networks that are local within a datacenter.