Forwarding policies on a virtual service network

• US 10,341,427 B2
• Filed: 12/29/2016
• Issued: 07/02/2019
• Est. Priority Date: 12/06/2012
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: Jalan, Rajkumar, Kamat, Gurudeep
• Primary Examiner(s): Donabed, Ninos
• Application Number:
  US15/394,669
• Publication Number:
  US 20170111441A1
• Time in Patent Office: 915 Days
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

In providing packet forwarding policies in a virtual service network that includes a network node and a pool of service load balancers serving a virtual service, the network node: receives a virtual service session request from a client device, the request including a virtual service network address for the virtual service; compares the virtual service network address in the request with the virtual service network address in each at least one packet forwarding policy; in response to finding a match between the virtual service network address in the request and a given virtual service network address in a given packet forwarding policy, determines the given destination in the given packet forwarding policy; and sends the request to a service load balancer in the pool of service load balancers associated with the given destination, where the service load balancer establishes a virtual service session with the client device.

Claims

1. A method for processing a client service session of a network service and forwarding the client service session to a pool of service load balancers using at least one packet forwarding policy in a virtual service network, the virtual service network comprising at least one network node and the pool of service load balancers serving a virtual service associated with a virtual service network address, comprising:

receiving a virtual service session request from a client device by the at least one network node, the virtual service session request comprising the virtual service network address for the virtual service served by the pool of service load balancers and a client device network address;

selecting a service load balancer based on the at least one packet forwarding policy by the at least one network node, wherein the selecting comprises;

determining whether a first packet forwarding policy or a second packet forwarding policy is applied to the virtual service session request, wherein a client network address of the first packet forwarding policy is different from a client network address of the second packet forwarding policy, the determining comprising;

comparing the client network address and a virtual service network address of the second packet forwarding policy with the client device network address and the virtual service network address of the virtual service session request;

in response to not finding a match between the client network address of the second packet forwarding policy and the client device network address, comparing the client network address and a virtual service network address of the first packet forwarding policy with the client device network address and the virtual service network address of the virtual service session request; and

in response to finding a match between the client network address and the virtual service network address of the first packet forwarding policy with the client device network address and the virtual service network address of the virtual service session request, applying the first packet forwarding policy to the virtual service session request;

sending the virtual service session request to a selected service load balancer by the at least one network node;

establishing a virtual service session with the client device by the selected service load balancer;

sending a virtual service request through the established virtual service session to the selected service load balancer by the client device; and

sending a virtual service data packet from the client device to a server by the selected service load balancer.

2. The method of claim 1, wherein the criteria to match against the virtual service session request comprise at least one of a virtual service network address, a transport layer address, a client network address, a range of virtual service network addresses, a range of transport layer addresses, and a range of client network addresses.

3. The method of claim 1, wherein the selecting comprises:

comparing, by the network node, criteria of the at least one packet forwarding policy against the virtual service session request; and

in response to finding a match between criteria of the at least one packet forwarding policy and the virtual service session request, applying the packet forwarding policy to the virtual service session request.

4. The method of claim 1, wherein after the client device sends the virtual service request to the service load balancer, the method further comprises:

selecting the server to service the virtual service request;

sending the service load balancer a service request response to the virtual service request by the server; and

creating and sending a virtual service request response to the client device by the service load balancer.

5. The method of claim 1, wherein the virtual service network comprises a first network node connected with a second network node and the service load balancer, wherein the first network node selects the second network node to receive and process the virtual service data packet from the first network node.

6. The method of claim 1, further comprising a network configuration module for configuring the at least one network node with at least one packet forwarding policy, wherein the network configuration module:

connects to the selected service load balancer;

detects a change to the selected service load balancer; and

in response to detecting a change to the service load balancer, generates at least one packet forwarding policy.

7. The method of claim 6, the method further comprising:

detecting a change in at least one of the network node, the selected service load balancer, the data network, and the virtual service network; and

determining the at least one packet forwarding policy is to be removed.

8. The method of claim 1, wherein the selecting comprises:

determining whether a first packet forwarding policy or a second packet forwarding policy is applied to the virtual service session request, wherein criteria of the first packet forwarding policy is the same as criteria of the second packet forwarding policy, the determining comprising;

selecting the first packet forwarding policy or the second packet forwarding policy based on additional information.

9. The method of claim 8, wherein the additional information comprises at least one of a multi-path factor and a traffic policy.

10. The method of claim 9, wherein a multi-path factor of the first packet forwarding policy indicates a primary path and a multi-path factor of the second forwarding policy indicates a secondary path.

11. A non-transitory computer readable storage medium having computer readable program code embodied therewith for processing a client service session of a network service and forwarding the client service session to a pool of service load balancers using at least one packet forwarding policy in a virtual service network, the virtual service network comprising at least one network node and the pool of service load balancers serving a virtual service associated with a virtual service network address, the computer readable program code configured to:

receive a virtual service session request from a client device by the at least one network node, the virtual service session request comprising the virtual service network address for the virtual service served by the pool of service load balancers and a client device network address;

select a service load balancer based on the at least one packet forwarding policy by the at least one network node, wherein the computer readable program code configured to select is further configured to;

determine whether a first packet forwarding policy or a second packet forwarding policy is applied to the virtual service session request, wherein a client network address of the first packet forwarding policy is different from a client network address of the second packet forwarding policy, the determine comprising;

compare the client network address and a virtual service network address of the second packet forwarding policy with the client device network address and the virtual service network address of the virtual service session request;

in response to not finding a match between the client network address of the second packet forwarding policy and the client device network address, compare the client network address and a virtual service network address of the first packet forwarding policy with the client device network address and the virtual service network address of the virtual service session request; and

in response to finding a match between the client network address and the virtual service network address of the first packet forwarding policy with the client device network address and the virtual service network address of the virtual service session request, apply the first packet forwarding policy to the virtual service session request;

send the virtual service session request to a selected service load balancer by the at least one network node;

establish a virtual service session with the client device by the selected service load balancer;

send a virtual service request through the established virtual service session to the selected service load balancer by the client device; and

send a virtual service data packet from the client device to a server by the selected service load balancer.

12. The medium of claim 11, wherein the criteria to match against the virtual service session request comprise at least one of a virtual service network address, a transport layer address, a client network address, a range of virtual service network addresses, a range of transport layer addresses, and a range of client network addresses.

13. The medium of claim 11, wherein the computer readable program code configured to select is further configured to:

compare, by the network node, criteria of the at least one packet forwarding policy against the virtual service session request; and

in response to finding a match between criteria of the at least one packet forwarding policy and the virtual service session request, apply the packet forwarding policy to the virtual service session request.

14. The medium of claim 11, further comprising a network configuration module for configuring the at least one network node with at least one packet forwarding policy, wherein the network configuration module is configured to:

connect to the selected service load balancer;

detect a change to the selected service load balancer; and

in response to detecting a change to the selected service load balancer, generate at least one packet forwarding policy.

15. The medium of claim 14, wherein the computer readable program code is further configured to:

detect a change in at least one of the network node, the selected service load balancer, the data network, and the virtual service network; and

determine the at least one packet forwarding policy is to be removed.

16. The medium of claim 11, wherein the computer readable program code configured to select is further configured to:

determine whether a first packet forwarding policy or a second packet forwarding policy is applied to the virtual service session request, wherein criteria of the first packet forwarding policy is the same as criteria of the second packet forwarding policy, the determine comprising;

select the first packet forwarding policy or the second packet forwarding policy based on additional information.

17. The medium of claim 16, wherein the additional information comprises at least one of a multi-path factor and a traffic policy.

18. The medium of claim 17, wherein a multi-path factor of the first packet forwarding policy indicates a primary path and a multi-path factor of the second forwarding policy indicates a secondary path.