Abstract: In one embodiment, a method includes generating, by a first controller of a network, an overlay domain digest using a first domain digest associated with the first controller of the network and a second domain digest associated with a second controller of the network. The method also includes communicating, by the first controller, the overlay domain digest to an edge device of the network, updating, by the first controller, the overlay domain digest to generate an updated overlay domain digest, and communicating, by the first controller, the updated overlay domain digest to the edge device of the network. The method further includes detecting, by the edge device, a difference between the overlay domain digest and the updated overlay domain digest and re-establishing, by the edge device, a connection with an orchestrator of the network to determine a control plane domain change within the network.

Abstract: In one embodiment, a method includes generating, by a first controller of a network, an overlay domain digest using a first domain digest associated with the first controller of the network and a second domain digest associated with a second controller of the network. The method also includes communicating, by the first controller, the overlay domain digest to an edge device of the network, updating, by the first controller, the overlay domain digest to generate an updated overlay domain digest, and communicating, by the first controller, the updated overlay domain digest to the edge device of the network. The method further includes detecting, by the edge device, a difference between the overlay domain digest and the updated overlay domain digest and re-establishing, by the edge device, a connection with an orchestrator of the network to determine a control plane domain change within the network.

Abstract: In one embodiment, a method includes onboarding, by an edge router, a first tenant from a network management system and determining, by the edge router, a mapping of a tenant identifier associated with the first tenant to a controller identifier associated with a controller. The method also includes reserving, by the edge router, a port number in a kernel for the first tenant and inserting, by the edge router, the tenant identifier into a first control packet. The method further includes communicating, by the edge router, the first control packet to the controller via an encrypted control connection during a first peering session. The first peering session shares the encrypted control connection with a second peering session.

Abstract: In one embodiment, a method includes onboarding, by an edge router, a first tenant from a network management system and determining, by the edge router, a mapping of a tenant identifier associated with the first tenant to a controller identifier associated with a controller. The method also includes reserving, by the edge router, a port number in a kernel for the first tenant and inserting, by the edge router, the tenant identifier into a first control packet. The method further includes communicating, by the edge router, the first control packet to the controller via an encrypted control connection during a first peering session. The first peering session shares the encrypted control connection with a second peering session.

Abstract: In one embodiment, a method includes generating, by a first controller of a network, an overlay domain digest using a first domain digest associated with the first controller of the network and a second domain digest associated with a second controller of the network. The method also includes communicating, by the first controller, the overlay domain digest to an edge device of the network, updating, by the first controller, the overlay domain digest to generate an updated overlay domain digest, and communicating, by the first controller, the updated overlay domain digest to the edge device of the network. The method further includes detecting, by the edge device, a difference between the overlay domain digest and the updated overlay domain digest and re-establishing, by the edge device, a connection with an orchestrator of the network to determine a control plane domain change within the network.

Abstract: In one embodiment, a method includes onboarding, by an edge router, a first tenant from a network management system and determining, by the edge router, a mapping of a tenant identifier associated with the first tenant to a controller identifier associated with a controller. The method also includes reserving, by the edge router, a port number in a kernel for the first tenant and inserting, by the edge router, the tenant identifier into a first control packet. The method further includes communicating, by the edge router, the first control packet to the controller via an encrypted control connection during a first peering session. The first peering session shares the encrypted control connection with a second peering session.