Methods and apparatus for providing services in distributed switch

• US 10,097,481 B2
• Filed: 06/29/2012
• Issued: 10/09/2018
• Est. Priority Date: 06/29/2012
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Narayanaswamy, Krishna, Frailong, Jean-Marc, Venkatramani, Anjan, Jagannadhan, Srinivasan
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): AGA, SORI A
• Application Number:
  US13/538,344
• Publication Number:
  US 20140003433A1
• Time in Patent Office: 2,293 Days
• Field of Search: None
• CPC Class Codes: H04L 49/355 Application aware switches, e.g. for HTTP
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

In some embodiments, a non-transitory processor-readable medium stores code representing instructions to be executed by a processor. The code causes the processor to receive, from a source peripheral processing device, a portion of a data packet having a destination address associated with a destination peripheral processing device. The code causes the processor to identify, based on the destination address, a service to be performed on the portion of the data packet. The code causes the processor to select, based on the service, an identifier of a service module associated with the service. The code further causes the processor to send the portion of the data packet to the service module via a distributed switch fabric such that the service module performs the service on the portion of the data packet and sends the portion of the data packet to the destination peripheral processing device via the distributed switch fabric.

Claims

1. A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:

receive, from a source peripheral processing device, a portion of a data packet having a destination address associated with a destination peripheral processing device;

identify, based at least in part on the destination address and a data traffic type, a service to be performed on the portion of the data packet, the data traffic type being one of a web traffic type or a voice traffic type;

generate a timestamp of the portion of the data packet based on a time at which the portion of the data packet was received from the source peripheral processing device;

based on the service and the timestamp, and prior to sending the portion of the data packet to any service module from a set of service modules, select a service module from the set of service modules based on at least one of (1) selecting an identifier of the service module, the identifier being selected based on a result of a hash function having the destination address as an input to the hash function, (2) a physical proximity of the service module to one of (a) the source peripheral processing device, or (b) the destination peripheral processing device, or (3) a status of the service module; and

based on the selection of the service module, send the portion of the data packet to the service module via a distributed switch fabric such that the service module performs the service on the portion of the data packet and sends the portion of the data packet to the destination peripheral processing device via the distributed switch fabric.

2. The non-transitory processor-readable medium of claim 1, wherein the service module is within one of an edge device or a service peripheral processing device different from the source peripheral processing device and the destination peripheral processing device.

3. The non-transitory processor-readable medium of claim 1, wherein the service module is a first service module, the service is a first service, the code further comprising code to cause the processor to:

identify a second service to be performed on the portion of the data packet; and

select, based on the second service, an identifier associated with a second service module associated with the second service, the code to cause the processor to send includes code to cause the processor to send the portion of the data packet to the first service module via the distributed switch fabric such that the first service module performs the first service on the portion of the data packet and sends the portion of the data packet to the destination peripheral processing device via the distributed switch fabric and the second service module.

12. The non-transitory processor-readable medium of claim 1, wherein the code to cause the processor to select includes code to cause the processor to:

apply a hash function to the destination address;

select an identifier of the service module from a service table based on a result of applying the hash function, and

further select the service module, in part, based on the identifier of the service module.

13. The non-transitory processor-readable medium of claim 1, wherein the code to cause the processor to select includes code to cause the processor to further select the service module based in part on an identifier of the service module, the identifier being determined in part based on a randomly-generated number.

4. An apparatus, comprising:

an edge device configured to receive, from a first peripheral processing device, data to be sent to a second peripheral processing device via a distributed switch fabric, the edge device configured to determine a service to be provided to the data based on a data traffic type associated with the data, the edge device configured to select, prior to sending the data to any service module from a set of service modules, a virtual service module from the set of service modules to perform the service on the data, the data traffic type being one of a web traffic type or a voice traffic type, the edge device configured to send the data to the virtual service module to perform the service on the data via the distributed switch fabric such that the virtual service module performs the service on the data and sends the data to the second peripheral processing device via the distributed switch fabric.

5. The apparatus of claim 4, wherein the edge device is a first edge device, the first edge device configured to select based on a hash function a second edge device directly coupled to the virtual service module, the first edge device configured to send the data to the virtual service module via the distributed switch fabric and the second edge device.

6. The apparatus of claim 4, wherein the service is a first service, the edge device is a first edge device, the first edge device configured to send the data to the virtual service module associated with the first service such that the virtual service module associated with the first service performs the first service on the data and sends the data to the second peripheral processing device via a service module associated with a second service and via the distributed switch.

7. The apparatus of claim 4, wherein the edge device is a first edge device, the first edge device configured to select a second edge device directly coupled to the virtual service module based on at least one of an address associated with the first peripheral processing device or an address associated with the second peripheral processing device, the first edge device configured to send the data to the virtual service module via the distributed switch fabric and the second edge device.

8. The apparatus of claim 4, wherein the data is first data, the edge device configured to receive, from a third peripheral processing device, second data to be sent to a fourth peripheral processing device via the distributed switch fabric, the edge device configured to determine that a service is not to be provided to the second data, the edge device configured to send the second data to the fourth peripheral processing device via the distributed switch and without passing through a service module.

9. An apparatus, comprising:

a service module implemented in an edge device associated with a distributed switch fabric, the service module configured to receive a portion of a data packet from a source edge device different from the edge device associated with the distributed switch fabric and via the distributed switch fabric based at least on a data traffic type of the data packet, the service module being selected, based at least in part on a timestamp of the data packet and before any remaining service module within the distributed switch fabric both (1) is selected to receive the portion of the data packet, and (2) receives the portion of the data packet, to receive the portion of the data packet and to perform at least one of a security service or a load balancing service on the portion of the data packet, the timestamp indicating a time at which the portion of the data packet was received from the source peripheral processing device, the service module configured to perform at least one of the security service or the load balancing service, the service module configured to send the portion of the data packet to a destination edge device via the distributed switch fabric after performing the at least one of the security service or the load balancing service on the portion of the data packet, the service module being (1) from a plurality of service modules configured to perform the at least one of the security service or the load balancing service, and (2) selected by the source edge device based at least in part on an address associated with the destination edge device.

10. The apparatus of claim 9, wherein the service module is a first service module, the service is a first service,

the first service module configured to identify a second service module configured to perform a second service on the portion of the data packet, the first service module configured to send the portion of the data packet to the destination edge device via the distributed switch fabric and the second service module.

11. The apparatus of claim 9, wherein the service module is a virtual service module.