Versa Service-Vnf Router for Two Controllers

Director can’t work with more than one Controller without a router between them. why do we need two controllers? Because of redundancy. Also, Director does not support dynamic routing. We can only write a static route on Director. When we add two static routes towards the controller for overlay network such as 10.0.0.0/8 and because the health of the route is not checked, sometimes some requests hang.

We use the service vnf router for Director to communicate with each controller dynamically. The below topology shows it.

I used Eve-ng for this topology.

The service vnf router is located between the controller's control network and Director's control network.

Adding the service vnf router to Director;

Configuration Service vnf router. This part consist of

1. Adding new interface on Service-vnf

2. To assign interfaces to Network

3. Creating virtual router

4. To assign the interfaces to SERVICE-VNF virtual router.

5. Adding Static route on Director towards to Service-vnf router for 10.0.0.0/8

6. Configuring routing protocol between Service vnf router and Controllers

7. To allow the traffic between Controllers and Director.

1. Adding new interface on Service-vnf ;

2. To assign interfaces to Network ;

3. Creating Virtual Router;

We need a virtual router inside of the Service-vnf Router because of routing

4. To assign the interfaces to SERVICE-VNF virtual router;

After Assigning the interfaces to SERVICE-VNF virtual router, you will see output like below,

5. Adding Static route on Director towards to Service-vnf router for 10.0.0.0/8

6. Configuring routing protocol between Service vnf router and Controllers;

You should configure the OSPF on Controllers like above or You can configure OSPF while you add the controller to Director.

6. To allow the traffic between Controllers and Director;

Before adding the access rule between the External and Contnetworkswork, you see like below so Director can't access the branch offices.

7. To allow the traffic between Controllers and Director.

After adding these rules on service-vnf's firewall, you will see the branch offices are up on Director.

Troubleshooting;

Check the OSPF communication between the service-vnf router and controllers.

Check the ping access between Controllers and Director. You should throw ping from controller's control network to Director control network.

Controller-1;

Controller-2;

Everything is ok.

Thanks for Reading.