Abstract: In general, this disclosure describes techniques for providing a hybrid data plane that can include a kernel-based data plane and a Data Plane Development Kit (DPDK)-based data plane. An example system includes a DPDK-based virtual router configured to send and receive packets via a physical network interface, and a kernel network stack configured to perform tunneling processing for packets destined to a containerized application and received by the DPDK-based virtual router via the physical interface.

Abstract: The disclosure describes techniques for concurrently operating multiple network stacks, one operating natively and one operating remotely, to control the routing table within a router of a network. An example network device includes a control unit comprising one or more processors. A native routing stack executes on the control unit to exchange routing protocol advertisements with a peer network device in accordance with a routing protocol. The native routing stack is configured to insert first routing entries into a routing table. The first routing entries are based on the routing protocol advertisements. A controller interface executed by the control unit receives second routing entries from a network controller and inserts the second routing entries into the routing table. A routing process generates a forwarding table based on the first and second routing entries.

Abstract: The disclosure relates to computer networking and, more specifically, to service chaining a containerized network function (CNF) using a containerized router, the CNF and containerized router both deployed to the same server. In an example, a method comprises executing, with a computing device: a containerized network function; a virtual router to implement a data plane for a containerized router; and a containerized routing protocol daemon to implement a control plane for the containerized router, wherein the containerized network function and containerized routing protocol daemon execute on the same computing device, and wherein a first virtual network interface of the computing device enables communications between the containerized network function and the virtual router; and forwarding, by the virtual router, based on a static route, traffic destined for a prefix to the first virtual network interface to send the traffic to the containerized network function.

Abstract: In general, this disclosure describes techniques for providing a hybrid data plane that can include a kernel-based data plane and a Data Plane Development Kit (DPDK)-based data plane. An example system includes a DPDK-based virtual router configured to send and receive packets via a physical network interface, and a kernel network stack configured to perform tunneling processing for packets destined to a containerized application and received by the DPDK-based virtual router via the physical interface.

Abstract: Techniques for EVPN Host Routed Bridging (HRB) and EVPN cloud-native data center with Host Routed Bridging (HRB) are described. A host computing device of a data center includes one or more containerized user-level applications. A cloud native virtual router is configured for dynamic deployment by the data center application orchestration engine and operable in a user space of the host computing device. Processing circuitry is configured for execution of the containerized user-level applications and the cloud native virtual router. The cloud native virtual router comprises a containerized routing protocol process configured to operate as a control plane, and a data plane for the containerized router. The data plane is configured to operate an ethernet virtual private network (EVPN) encapsulation/decapsulation data path of an overlay network for communicating layer two (L2) network traffic of the containerized user applications over a switch fabric of the data center.

Abstract: Techniques for EVPN Host Routed Bridging (HRB) and EVPN cloud-native data center with Host Routed Bridging (HRB) are described. A host computing device of a data center includes one or more containerized user-level applications. A cloud native virtual router is configured for dynamic deployment by the data center application orchestration engine and operable in a user space of the host computing device. Processing circuitry is configured for execution of the containerized user-level applications and the cloud native virtual router. The cloud native virtual router comprises a containerized routing protocol process configured to operate as a control plane, and a data plane for the containerized router. The data plane is configured to operate an ethernet virtual private network (EVPN) encapsulation/decapsulation data path of an overlay network for communicating layer two (L2) network traffic of the containerized user applications over a switch fabric of the data center.

Abstract: In general, techniques are described for deploying virtualized cell site routers (vCSRs) capable of layer 2 (L2) forwarding to cell site servers to support management and orchestration of functional units for mobile networks executing on the cell site servers. In an example, a method comprises receiving, at a forwarding plane of a virtualized cell site router (vCSR) of a first Distributed Unit (DU) of a plurality of DU servers of a cell site for a 5G radio access network, the vCSR having a containerized routing protocol process and a forwarding plane configured to perform Layer 2 (L2) switching, L2 packets on a second interface for a second physical link connecting the first DU server to an L2 switch; and switching, by the forwarding plane of the vCSR of the first DU, the L2 packets on a first interface for a first physical link connecting the first DU server to a second DU server of the plurality of DU servers.

Abstract: In general, this disclosure describes techniques for a containerized router operating within a cloud native orchestration framework. In an example, a computing device comprises processing circuitry; a containerized set of workloads; a containerized routing protocol process configured to execute on the processing circuitry and configured to receive routing information; a kernel network stack executing on the processing circuitry and configured to forward packets based on first routing information from the containerized routing protocol process; and a data plane development kit (DPDK)-based virtual router executing on processing circuitry and configured to forward traffic to and from the workloads based on second routing information from the containerized routing protocol process.

Abstract: In general, this disclosure describes techniques for providing a hybrid data plane that can include a kernel-based data plane and a Data Plane Development Kit (DPDK)-based data plane. An example system includes a DPDK-based virtual router configured to send and receive packets via a physical network interface, and a kernel network stack configured to perform tunneling processing for packets destined to a containerized application and received by the DPDK-based virtual router via the physical interface.

Abstract: In general, this disclosure describes techniques for a containerized router operating within a cloud native orchestration framework. In an example, a computing device comprises processing circuity; a containerized set of workloads; a containerized routing protocol process configured to execute on the processing circuitry and configured to receive routing information; a kernel network stack executing on the processing circuitry and configured to forward packets based on first routing information from the containerized routing protocol process; and a data plane development kit (DPDK)-based virtual router executing on processing circuitry and configured to forward traffic to and from the workloads based on second routing information from the containerized routing protocol process.

Abstract: Techniques for EVPN Host Routed Bridging (HRB) and EVPN cloud-native data center with Host Routed Bridging (HRB) are described. A host computing device of a data center includes one or more containerized user-level applications. A cloud native virtual router is configured for dynamic deployment by the data center application orchestration engine and operable in a user space of the host computing device. Processing circuitry is configured for execution of the containerized user-level applications and the cloud native virtual router. The cloud native virtual router comprises a containerized routing protocol process configured to operate as a control plane, and a data plane for the containerized router. The data plane is configured to operate an ethernet virtual private network (EVPN) encapsulation / decapsulation data path of an overlay network for communicating layer two (L2) network traffic of the containerized user applications over a switch fabric of the data center.

Abstract: The disclosure describes techniques for concurrently operating multiple network stacks, one operating natively and one operating remotely, to control the routing table within a router of a network. An example network device includes a control unit comprising one or more processors. A native routing stack executes on the control unit to exchange routing protocol advertisements with a peer network device in accordance with a routing protocol. The native routing stack is configured to insert first routing entries into a routing table. The first routing entries are based on the routing protocol advertisements. A controller interface executed by the control unit receives second routing entries from a network controller and inserts the second routing entries into the routing table. A routing process generates a forwarding table based on the first and second routing entries.

Abstract: In general, this disclosure describes techniques for leveraging a containerized routing protocol process to implement virtual private networks using routing protocols. In an example, a system comprises a container orchestration system for a cluster of computing devices, the cluster of computing devices including a computing device, wherein the container orchestration system is configured to: deploy a containerized application to a compute node; and in response to deploying the containerized application to the compute node, configure in the compute node a virtual routing and forwarding (VRF) instance to implement a virtual private network (VPN) for the containerized application.

Abstract: In general, this disclosure describes techniques for a containerized router operating within a cloud native orchestration framework. In an example, a computing device comprises processing circuity; a containerized set of workloads; a containerized routing protocol process configured to execute on the processing circuitry and configured to receive routing information; a kernel network stack executing on the processing circuitry and configured to forward packets based on first routing information from the containerized routing protocol process; and a data plane development kit (DPDK)-based virtual router executing on processing circuitry and configured to forward traffic to and from the workloads based on second routing information from the containerized routing protocol process.

Abstract: In general, this disclosure describes techniques for a containerized router operating within a cloud native orchestration framework. In an example, a virtualized cell site router comprises a computing device configured with a containerized router, the computing device comprising: a containerized virtual router configured to execute on the processing circuitry and configured to implement a data plane for the containerized router; a containerized routing protocol process configured to execute on the processing circuitry and configured to implement a control plane for the containerized router; and a pod comprising a containerized distributed unit, wherein the containerized routing protocol process is configured to advertise routing information comprising reachability information for the containerized distributed unit.

Abstract: In general, techniques are described for a dynamic prefix list for route filtering. In one example, a network device comprises a control unit comprising one or more processors; one or more interface cards coupled to the control unit; a routing protocol process configured to execute on the control unit to exchange, using the interface cards, routing protocol advertisements with a peer network device in accordance with a routing protocol; and a configuration database comprising a routing policy that references a dynamic prefix list comprising one or more prefixes. The routing policy includes at least one action for application to routes for import or export, by the network device via a routing protocol, that match any of the one or more prefixes of the dynamic prefix list. The dynamic prefix list comprises a routing table to store the one or more prefixes, the routing table separate from the configuration database.

Abstract: In general, techniques are described for a dynamic prefix list for route filtering. In one example, a network device comprises a control unit comprising one or more processors; one or more interface cards coupled to the control unit; a routing protocol process configured to execute on the control unit to exchange, using the interface cards, routing protocol advertisements with a peer network device in accordance with a routing protocol; and a configuration database comprising a routing policy that references a dynamic prefix list comprising one or more prefixes. The routing policy includes at least one action for application to routes for import or export, by the network device via a routing protocol, that match any of the one or more prefixes of the dynamic prefix list. The dynamic prefix list comprises a routing table to store the one or more prefixes, the routing table separate from the configuration database.