Gateway using multicast to unicast conversion

• US 10,355,977 B2
• Filed: 08/09/2017
• Issued: 07/16/2019
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Extreme Networks, Inc.
• Original Assignee: Aerohive Networks Incorporated (Extreme Networks, Inc.)
• Inventors: Gast, Matthew Stuart, Wang, Liang
• Primary Examiner(s): Nguyen, Tu T
• Application Number:
  US15/673,216
• Publication Number:
  US 20170339046A1
• Time in Patent Office: 706 Days
• Field of Search: 709238
• CPC Class Codes: H04L 12/1886 with traffic restrictions for efficiency improvement, e.g. involving subnets or subdomains
• CPC Class Codes: H04L 45/16 Multipoint routing

Abstract

A multicast frame directed to a plurality of devices coupled to a network can be received, where the plurality of devices comprising at least one intended recipient device and at least one unintended recipient device. A destination unicast address corresponding to an intended recipient device can be identified. The multicast frame can be converted into a unicast frame directed to the intended recipient device, the unicast frame configured with the destination unicast address. The unicast frame can be blocked from accessing the unintended recipient device. The unicast frame can be provided to the intended recipient device.

Claims

1. A system comprising:

a multicast frame receiving engine configured to receive a multicast frame directed to a multicast group;

a destination unicast engine coupled to the multicast frame receiving engine and configured to identify a unicast address of an intended recipient device and a unicast address of an unintended recipient device, wherein the intended recipient device and the unintended recipient device are members of the multicast group;

a multicast frame expansion engine coupled to the destination unicast engine and configured to convert the multicast frame into a set of unicast frames including a first unicast frame and a second unicast frame, the first unicast frame being directed to the intended recipient device using the unicast address of the intended recipient device, the second unicast frame being directed to the unintended recipient device using the unicast address of the unintended recipient device;

an unintended recipient device frame removal engine coupled to the multicast frame expansion engine, the unintended recipient device frame removal engine configured to prevent any of the multicast frame or the second unicast frame from being sent to the unintended recipient device by removing the second unicast frame from the set of unicast frames;

an intended recipient device frame providing engine coupled to the multicast frame expansion engine and the unintended recipient device frame removal engine and configured to provide the first unicast frame to the intended recipient device.

2. The system of claim 1, wherein the system is incorporated into a user space of a kernel of a network access device.

3. The system of claim 1, wherein the multicast frame comprises multicast Domain Name Server (mDNS) traffic.

4. The system of claim 2, wherein the removing the second unicast frame from the set of unicast frames comprises removing the second unicast frame in the user space of the kernel of the network access device.

5. The system of claim 1, wherein the removing the second unicast frame from the set of unicast frames comprises caching the second unicast frame from the set of unicast frames in a specified location.

6. The system of claim 1, wherein the intended recipient device comprises a plurality of devices associated with a particular network private pre-shared key (PPSK).

7. The system of claim 1, wherein the intended recipient device comprises a plurality of devices associated with a particular virtual local area network (VLAN).

8. The system of claim 1, further comprising a multicast to unicast conversion setup engine coupled to the multicast frame receiving engine, the multicast to unicast conversion setup engine adapted to configure the system to convert all multicasts to the intended recipient device into unicasts to the intended recipient device.

9. The system of claim 1, wherein the system is incorporated into a network access device configured to control access to wireless network traffic.

10. The system of claim 9, wherein the network access device comprises one or more of a switch and a router.

11. A method comprising:

receiving a multicast frame directed to a multicast group, the multicast group including an intended recipient device and an unintended recipient device;

identifying a unicast address of an intended recipient device and a unicast address of an unintended recipient device, wherein the intended recipient device and the unintended recipient device are members of the multicast group;

converting the multicast frame into a set of unicast frames including a first unicast frame and a second unicast frame, the first unicast frame being directed to the intended recipient device using the unicast address of the intended recipient device, the second unicast frame being directed to the unintended recipient device using the unicast address of the unintended recipient device;

preventing any of the multicast frame or the second unicast frame from being sent to the unintended recipient device by removing the second unicast frame from the set of unicast frames;

sending the first unicast frame to the intended recipient device.

12. The method of claim 11, wherein the method is executed in a user space of a kernel of a network access device.

13. The method of claim 12, wherein the removing the second unicast frame from the set of unicast frames comprises removing the second unicast frame in the user space of the kernel of the network access device.

14. The method of claim 11, wherein the multicast frame comprises multicast Domain Name Server (mDNS) traffic.

15. The method of claim 11, wherein the removing the second unicast frame from the set of unicast frames comprises caching the second unicast frame from the set of unicast frames in a specified location.

16. The method of claim 11, wherein the intended recipient device comprises a plurality of devices associated with a particular network private pre-shared key (PPSK).

17. The method of claim 11, wherein the intended recipient device comprises a plurality of devices associated with a particular virtual local area network (VLAN).

18. The method of claim 11, further comprising converting all multicasts to the intended recipient device into unicasts to the intended recipient device.

19. The method of claim 11, wherein the method is performed by a system that is incorporated into one or more of a router configured to control access to wireless network traffic, and a switch configured to control access to wireless network traffic.

20. A system comprising:

one or more processors;

memory storing instructions that, when executed by the one or more processors, cause the system to perform;

receiving a multicast frame directed to a multicast group, the multicast group including an intended recipient device and an unintended recipient device;

identifying a unicast address of an intended recipient device and a unicast address of an unintended recipient device, wherein the intended recipient device and the unintended recipient device are members of the multicast group;

converting the multicast frame into a set of unicast frames including a first unicast frame and a second unicast frame, the first unicast frame being directed to the intended recipient device using the unicast address of the intended recipient device, the second unicast frame being directed to the unintended recipient device using the unicast address of the unintended recipient device;

preventing any of the multicast frame or the second unicast frame from being sent to the unintended recipient device by removing the second unicast frame from the set of unicast frames;

sending the first unicast frame to the intended recipient device.