A method comprising: establishing, by a first workload executed on a first compute node a first routing session (306;310) with a first control node assigned to a first zone identifier, the first zone identifier associating the first workload with a first set of one or more control nodes to manage routers and/or switches that route data to and from the first workload, the first set of one or more control nodes including the first control node, wherein the first compute node is configured as a primary provider of a service; establishing, by a second workload executed on a second compute node a second routing session with a second control node assigned to a second zone identifier, the second zone identifier different than the first zone identifier, the second zone identifier associating the second workload with a second set of one or more control nodes to manage routers and/or switches that route data to and from the second workload, the second set of one or more control nodes including the second control node, wherein the second workload is configured as a secondary provider of the service; receiving one or more first service requests for the service by the first workload via a first virtual router at the first compute node, wherein the virtual router is managed by the first control node; in response to detecting a failure of the first control node, migrating the service to the second workload; and receiving one or more second service requests for the service by the second workload via a second virtual router at the second compute node, wherein the second virtual router is managed by the second control node. establishing, by a first workload executed on a first compute node a first routing session (306;310) with a first control node assigned to a first zone identifier, the first zone identifier associating the first workload with a first set of one or more control nodes to manage routers and/or switches that route data to and from the first workload, the first set of one or more control nodes including the first control node, wherein the first compute node is configured as a primary provider of a service; establishing, by a second workload executed on a second compute node a second routing session with a second control node assigned to a second zone identifier, the second zone identifier different than the first zone identifier, the second zone identifier associating the second workload with a second set of one or more control nodes to manage routers and/or switches that route data to and from the second workload, the second set of one or more control nodes including the second control node, wherein the second workload is configured as a secondary provider of the service; receiving one or more first service requests for the service by the first workload via a first virtual router at the first compute node, wherein the virtual router is managed by the first control node; in response to detecting a failure of the first control node, migrating the service to the second workload; and receiving one or more second service requests for the service by the second workload via a second virtual router at the second compute node, wherein the second virtual router is managed by the second control node.