| CPC H04L 45/54 (2013.01) [H04L 12/4641 (2013.01); H04L 45/586 (2013.01); H04L 45/745 (2013.01)] | 10 Claims |

|
1. A service device operable to be communicatively coupled between a first network switch and a second network switch of a data center, the service device comprising:
a service unit implemented in circuitry and configured to apply a physical network layer function (PNF) to network packets; and
a processing system comprising one or more processors implemented in circuitry, the processing system being configured to:
receive, from a controller, configuration data representing a set of service virtual routing and forwarding (VRF) tables for diverting network traffic to the service unit for application of at the PNF, wherein the set of service VRF tables includes a first service VRF table specific to a first tenant of the data center, the first service VRF table for forwarding inter-tenant network traffic to the service unit from the first network switch, and a second service VRF table specific to a second tenant of the data center for forwarding the inter-tenant network traffic from the service unit to the second network switch, the second service VRF table being separate from the first service VRF table;
based on the configuration data from the controller, forward the inter-tenant network traffic received from the first network switch to the service unit using the first service VRF table to determine an interface by which to direct the inter-tenant network traffic to the service unit; and
based on the configuration data from the controller, forward the inter-tenant network traffic from the service unit to the second network switch using the second service VRF table to determine an interface by which to output the inter-tenant network traffic to reach the second network switch,
wherein the inter-tenant network traffic comprises network traffic originating from first one or more server devices associated with a first tenant of the data center and destined for second one or more server devices associated with a second tenant of the data center.
|