Route signaling driven service management

• US 10,250,562 B1
• Filed: 12/13/2016
• Issued: 04/02/2019
• Est. Priority Date: 03/31/2015
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Srinath, Harsha, Dalle, Gregory M., Ballal, Dhiraj D., Pal, Manas, Pianigiani, Jacopo, Agrawal, Sanjay, Sodhi, Sandesh Kumar, Subramanian, Saravanadas P.
• Primary Examiner(s): Pham, Chi H
• Assistant Examiner(s): Agureyev, Vladislav Y
• Application Number:
  US15/377,777
• Time in Patent Office: 840 Days
• Field of Search: None
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 67/1034 Reaction to server failures by a load balancer
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

A system and method for handling critical events in service gateways. Configuration information is received in a service gateway, the configuration information defining a redundancy set having a master redundancy state and a standby redundancy state, the configuration information including one or more redundancy policies associated with the redundancy set, a service redundancy policy defining changes to be made in a service when a transition occurs in the state of the redundancy set. The service gateway receives further configuration information defining events that cause a transition between the master and standby redundancy states in the redundancy set. In response to detecting a redundancy event in the service gateway, the service gateway transitions the redundancy set, within the service gateway, from the master redundancy state to the standby redundancy state, modifies a first signal-route state associated with the redundancy set and modifies the service based on the service redundancy policy.

Claims

1. A method, comprising:

receiving, in a service gateway, configuration information defining a redundancy set having a master redundancy state and a standby redundancy state, wherein the configuration information includes one or more redundancy policies associated with the redundancy set, the one or more redundancy policies including a service redundancy policy that defines changes to be made in a service when a transition occurs in the state of the redundancy set;

receiving, in a service gateway, configuration information defining events that cause a transition between the master and standby redundancy states in the redundancy set, wherein the events include a first event that causes a transition from the master redundancy state to the standby redundancy state in the redundancy set;

in response to receiving the configuration information, storing a plurality of signal-routes, including a first signal-route, wherein each signal-route is a route used by applications to signal changes in application state and wherein each signal-route is associated with one or more of the defined events, wherein the first signal-route is associated with the first event; and

in response to detecting the first event in the service gateway;

transitioning the redundancy set, within the service gateway, from the master redundancy state to the standby redundancy state;

modifying a first signal-route state associated with the redundancy set, wherein modifying includes adding the first signal-route to or removing the first signal-route from a routing information base and advertising, from the service gateway and to peer network devices, the change in the routing information base; and

modifying the service based on the service redundancy policy.

2. The method of claim 1, wherein modifying the service based on the service redundancy policy includes changing a firewall rule.

3. The method of claim 1, wherein modifying the service based on the service redundancy policy includes applying a service only when the first signal-route exists.

4. The method of claim 1, wherein the method further comprises:

transitioning, within the service gateway, from the first standby redundancy state to the first master redundancy state in response to detecting occurrence of the first event in a second service gateway, and

wherein modifying the service based on the service redundancy policy includes applying a service only when the first signal-route exists.

5. The method of claim 4, wherein each signal-route is a static route and wherein the first event is a critical event associated with a service provided by the first and second service gateways.

6. The method of claim 1, wherein each signal-route is a static route, wherein each service gateway includes an application layer and wherein changing the first signal-route state occurs at the application layer.

7. The method of claim 1, wherein advertising a change in the first signal-route state includes advertising a different Virtual Router Redundancy Protocol (VRRP) priority for the first signal-route.

8. The method of claim 1, wherein the service gateway is configured to support one or more redundancy sets, wherein each redundancy set is associated with one or more of the defined events, wherein each of the defined events triggers a transition from master redundancy state to standby redundancy state in a state machine of the redundancy sets associated with the defined event.

9. The method of claim 8, wherein advertising a change in the first signal-route state includes advertising a different Virtual Router Redundancy Protocol (VRRP) priority for the first signal-route.

10. The method of claim 8, wherein advertising a change in the first signal-route state includes sending a route update message from a routing protocol process.

11. The method of claim 1, wherein modifying the service based on the service redundancy policy includes marking one or more class usage bits used by a firewall engine.

12. A method, comprising:

receiving, in a service gateway, configuration information defining a redundancy set having a master redundancy state and a standby redundancy state, wherein the configuration information includes one or more redundancy policies associated with the redundancy set, the one or more redundancy policies including a service redundancy policy that defines changes to be made in a service when a transition occurs in the state of the redundancy set;

receiving, in a service gateway, configuration information defining events that cause a transition between the master and standby redundancy states in the redundancy set, wherein the events include a first event that causes a transition from the master redundancy state to the standby redundancy state in the redundancy set; and

in response to detecting the first event in the service gateway;

transitioning the redundancy set, within the service gateway, from the master redundancy state to the standby redundancy state;

modifying a first signal-route state associated with the redundancy set, wherein modifying includes advertising, from the service gateway and to peer network devices, the modification in the first signal-route state; and

modifying the service based on the service redundancy policy, wherein modifying the service based on the service redundancy policy includes marking bits used by a firewall engine.

13. The method of claim 12, wherein marking the bits used by a firewall engine includes marking one or more class usage bits used by the firewall engine.

14. The method of claim 13, wherein the method further comprises:

storing a plurality of signal-routes, including a first signal-route, wherein each signal-route is a route used by applications to signal changes in application state and wherein each signal-route is associated with one or more of the defined events, wherein the first signal-route is associated with the first event,

wherein advertising, from the service gateway and to peer network devices, the modification in the first signal-route state includes adding the first signal-route to or removing the first signal-route from a routing information base and advertising, from the service gateway and to peer network devices, the change in the routing information base.

15. A service gateway system, comprising:

a network; and

a plurality of service gateway network devices connected by the network, wherein the plurality of service gateway network devices includes a first service gateway network device and a second service gateway network device, wherein each service gateway network device includes a memory and one or more processors connected to the memory, wherein the one or more processors are configured to;

receive configuration information defining a redundancy set having a master redundancy state and a standby redundancy state, wherein the configuration information includes one or more redundancy policies associated with the redundancy set, the one or more redundancy policies including a service redundancy policy that defines changes to be made in a service when a transition occurs in the state of the redundancy set;

receive configuration information defining events that cause a transition between the master and standby redundancy states in the redundancy set, wherein the events include a first event that causes a transition from the master redundancy state to the standby redundancy state in the redundancy set;

store a plurality of signal-routes, including a first signal-route, wherein each signal-route is a route used by applications to signal changes in application state and wherein each signal-route is associated with one or more of the defined events, wherein the first signal-route is associated with the first event; and

in response to detecting the first event in the service gateway;

transition the redundancy set, within the service gateway, from the master redundancy state to the standby redundancy state;

modify a first signal-route state associated with the redundancy set, wherein modifying includes adding the first signal-route to or removing the first signal-route from a routing information base and advertising, from the service gateway and to peer network devices, the change in the routing information base; and

modify the service based on the service redundancy policy.

16. The system of claim 15, wherein a services redundancy process executing in the first service gateway network device makes a change in the first signal-route state via a message to a routing protocol process.

17. The system of claim 15, wherein each signal-route is a static route and wherein the first event is a critical event associated with a service provided by the first and second service gateway network devices.

18. The system of claim 15, wherein each service gateway network device further includes a communication interface and a user interface, wherein the user interface configures each service gateway network device to support one or more redundancy sets, wherein each redundancy set is associated with one or more of the defined events, wherein each of the defined events triggers a transition from master redundancy state to standby redundancy state in a state machine of the redundancy sets associated with the defined event.

19. The system of claim 18, wherein each service gateway network device advertises a change in the first signal-route state by sending a route update message from a routing protocol process.

20. The system of claim 15, wherein the one or more processors are further configured to modify the service based on the service redundancy policy by marking one or more class usage bits used by a firewall engine.

21. A service gateway system, comprising:

a network; and

a plurality of service gateway network devices connected by the network, wherein the plurality of service gateway network devices includes a first service gateway network device and a second service gateway network device, wherein each service gateway network device includes a memory and one or more processors connected to the memory, wherein the one or more processors are configured to;

receive configuration information defining a redundancy set having a master redundancy state and a standby redundancy state, wherein the configuration information includes one or more redundancy policies associated with the redundancy set, the one or more redundancy policies including a service redundancy policy that defines changes to be made in a service when a transition occurs in the state of the redundancy set;

receive configuration information defining events that cause a transition between the master and standby redundancy states in the redundancy set, wherein the events include a first event that causes a transition from the master redundancy state to the standby redundancy state in the redundancy set; and

in response to detecting the first event in the service gateway;

transition the redundancy set, within the service gateway, from the master redundancy state to the standby redundancy state;

modify a first signal-route state associated with the redundancy set, wherein modifying the first signal-route state includes executing a process in an application layer to modify the first signal-route state by adding or removing, at the application layer, a first signal-route from a routing information base and by advertising, from the service gateway and to peer network devices, the modification of the first signal-route state; and

modify the service based on the service redundancy policy.

22. The system of claim 21, wherein the service gateway network device advertises the change in the first signal-route state by advertising a different Virtual Router Redundancy Protocol (VRRP) priority for the first signal-route.

23. The system of claim 21, wherein the first service gateway network device advertises the change in the first signal-route state by sending a route update message from a routing protocol process in response to a message from a services redundancy process executing in the first service gateway network device.

24. The system of claim 21, wherein the one or more processors are further configured to:

store a plurality of signal-routes, including a first signal-route, wherein each signal-route is a route used by applications to signal changes in application state and wherein each signal-route is associated with one or more of the defined events, wherein the first signal-route is associated with the first event; and

advertise the modification in the first signal-route state by executing instructions to;

add the first signal-route to or remove the first signal-route from a routing information base; and

advertise the change in the routing information base.

25. A non-transitory computer-readable storage medium storing instructions that, when executed, cause one or more processors to:

receive configuration information defining a redundancy set having a master redundancy state and a standby redundancy state, wherein the configuration information includes one or more redundancy policies associated with the redundancy set, the one or more redundancy policies including a service redundancy policy that defines changes to be made in a service when a transition occurs in the state of the redundancy set;

receive configuration information defining events that cause a transition between the master and standby redundancy states in the redundancy set, wherein the events include a first event that causes a transition from the master redundancy state to the standby redundancy state in the redundancy set;

store a plurality of signal-routes, including a first signal-route, wherein each signal-route is a route used by applications to signal changes in application state and wherein each signal-route is associated with one or more of the defined events, wherein the first signal-route is associated with the first event; and

in response to detecting the first event in the service gateway;

transition the redundancy set, within the service gateway, from the master redundancy state to the standby redundancy state;

modify a first signal-route state associated with the redundancy set, wherein modifying includes adding the first signal-route to or removing the first signal-route from a routing information base and advertising, from the service gateway and to peer network devices, the change in the routing information base; and

modify the service based on the service redundancy policy.

26. The computer-readable storage medium of claim 25, wherein the computer-readable storage medium further includes instructions that, when executed, cause the one or more processors to modify the service based on the service redundancy policy by marking one or more class usage bits used by a firewall engine.

27. A method, comprising:

receiving, at a device having a processor, data defining a redundancy set, the redundancy state having a master state and at least one standby state, wherein the redundancy set includes one or more redundancy policies and one or more defined events;

storing a plurality of signal-routes, including a first signal-route, wherein each signal-route is a route used by applications to signal changes in application state and wherein each signal-route is associated with one or more defined events, wherein the first signal-route is associated with one or more of the defined events of the redundancy set;

detecting, by the processor, a change in state of the redundancy set;

based on the change in state of the redundancy set, adding the first signal-route to or removing the first signal-route from a routing information base and advertising, from the device and to peer network devices, the change in the routing information base; and

in response to detecting the change in state of the redundancy set, configuring, based on one of the redundancy policies, a service applied to network packets received by the device.

28. The method of claim 27, wherein the service is a firewall filter and wherein configuring the service includes configuring a firewall engine based on one of the redundancy policies to filter network packets received by the firewall engine.

29. The method of claim 27, wherein the data defining a redundancy set includes one or more redundancy policies, the method further comprising:

detecting, by a service redundancy daemon, a redundancy event; and

recording, by the service redundancy daemon, the change of state corresponding to the redundancy event in a signal-route vector.

30. The method of claim 29, wherein the service is a firewall filter and wherein configuring the service includes configuring a firewall engine based on one of the redundancy policies.

31. The method of claim 30, wherein the one or more redundancy policies are stored in a redundancy policy database, wherein configuring a firewall engine includes receiving, at the firewall engine and from the service redundancy daemon, configuration information derived from one of the redundancy policies stored in the redundancy policy database.

32. The method of claim 27, wherein the redundancy set binds one or more service-sets to drive a stateful synchronization state, related to the service sets, to synchronize service gateways based on the redundancy set.