Transmitting network overlay information in a service function chain

• US 10,382,596 B2
• Filed: 06/23/2016
• Issued: 08/13/2019
• Est. Priority Date: 06/23/2016
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Jeuk, Sebastian, Salgueiro, Gonzalo
• Primary Examiner(s): Jangbahadur, Lakeram
• Application Number:
  US15/190,641
• Publication Number:
  US 20170373990A1
• Time in Patent Office: 1,146 Days
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 45/38 Flow based routing
• CPC Class Codes: H04L 45/64 using an overlay routing layer
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A packet is received at a device configured to provide a service function within a network service chain. A network overlay and/or segmentation identifier is extracted from a header of the packet. The service function is applied to the packet according to policies specific to a network overlay and/or segmentation identified in the network overlay and/or segmentation identifier.

Claims

1. A method comprising:

receiving, at a device configured to provide a network service via a service function within a network service chain, a packet encapsulated by a network service header, wherein the network service header is configured to route the packet through the network service chain;

extracting, via the service function, a Universal Cloud Classifier from a metadata field of the network service header, wherein the Universal Cloud Classifier identifies a network overlay protocol or segmentation protocol applied to the packet encapsulated by the network service header, and wherein the Universal Cloud Classifier comprises a hierarchical identifier that identifies a cloud, a service and a tenant associated with a particular packet;

determining, via the service function from the Universal Cloud Classifier, the network overlay protocol or segmentation protocol applied to the packet encapsulated by the network service header; and

applying the network service to the packet according to policies specific for the network overlay protocol or segmentation protocol determined from the Universal Cloud Classifier by encapsulating the packet according to a network overlay protocol or a segmentation protocol that differs from the network overlay protocol or the segmentation protocol determined from the Universal Cloud Classifier.

2. The method of claim 1, further comprising extracting metadata stored in the network service header of the packet that is different than the Universal Cloud Classifier,

wherein applying the network service to the packet comprises applying policies specific to the network overlay protocol or segmentation protocol and the metadata.

3. The method of claim 1, wherein the Universal Cloud Classifier identifies a specific instance of a network overlay environment or segmentation environment.

4. The method of claim 1, wherein the network overlay protocol determined from the Universal Cloud Classifier comprises one or more of Virtual Extensible Local Area Networks (VxLANs), Generic Routing Encapsulation (GRE) or Virtual Private Network (VPN) Tunnels.

5. The method of claim 1, wherein network overlay protocol or segmentation protocol determined from the Universal Cloud Classifier is applied to the packet such that a payload of the packet is encrypted, and wherein applying the network service to the packet comprises decrypting the packet.

6. The method of claim 1, wherein applying the network service to the packet comprises encapsulating the packet accordingly to one or more of a Virtual Extensible Local Area Networks (VxLANs) protocol, Generic Routing Encapsulation (GRE) protocol or Virtual Private Network (VPN) Tunnels protocol.

7. The method of claim 1, wherein the service function comprises a final service function in the network service chain.

8. An apparatus comprising:

a memory storing data indicating policies specific for a network overlay protocol or segmentation protocol;

a network interface unit configured to enable network connectivity; and

a processor, wherein the processor is configured to;

provide a network service via a service function within a network service chain;

receive, via the network interface unit, a packet encapsulated by a network service header, wherein the network service header is configured to route the packet through the network service chain;

extract, via the service function, a Universal Cloud Classifier from a metadata field of the network service header, wherein the Universal Cloud Classifier identifies the network overlay protocol or segmentation protocol applied to the packet encapsulated by the network service header, and wherein the Universal Cloud Classifier comprises a hierarchical identifier that identifies a cloud, a service and a tenant associated with a particular packet;

determine, via the Universal Cloud Classifier, the network overlay protocol or segmentation protocol applied to the packet encapsulated by the network service header; and

apply the network service to the packet according to the policies specific for the network overlay protocol or segmentation protocol determined from the Universal Cloud Classifier by encapsulating the packet according to a network overlay protocol or a segmentation protocol that differs from the network overlay protocol or the segmentation protocol determined from the Universal Cloud Classifier.

9. The apparatus of claim 8, wherein the processor is configured to:

extract metadata stored in the network service header of the packet that is different than the Universal Cloud Classifier; and

apply the network service to the packet based on policies specific to the network overlay protocol or segmentation protocol and the metadata.

10. The apparatus of claim 8, wherein the Universal Cloud Classifier identifies a specific instance of a network overlay environment or segmentation environment.

11. The apparatus of claim 8, wherein the network overlay protocol determined from the Universal Cloud Classifier comprises one or more of Virtual Extensible Local Area Networks (VxLANs), Generic Routing Encapsulation (GRE) or Virtual Private Network (VPN) Tunnels.

12. The apparatus of claim 8, wherein network overlay protocol or segmentation protocol determined from the Universal Cloud is applied to the packet such that a payload of the packet is encrypted, and wherein the processor is configured to apply the network service to the packet by decrypting the packet.

13. The apparatus of claim 8, wherein the processor is configured to apply the network service to the packet by encapsulating the packet accordingly to one or more of a Virtual Extensible Local Area Networks (VxLANs) protocol, Generic Routing Encapsulation (GRE) protocol or Virtual Private Network (VPN) Tunnels protocol.

14. The apparatus of claim 8, wherein the service function comprises a final service function in the network service chain.

15. A non-transitory computer-readable storage media encoded with software comprising computer executable instructions and when the software is executed operable to:

receive, at a device configured to provide a network service via a service function within a network service chain, a packet encapsulated by a network service header, wherein the network service header is configured to route the packet through the network service chain;

extract, via the service function, a Universal Cloud Classifier from a metadata field of the network service header, wherein the Universal Cloud Classifier identifies a network overlay protocol or segmentation protocol applied to the packet encapsulated by the network service header;

determine, via the service function from the Universal Cloud Classifier, the network overlay protocol or segmentation protocol applied to the packet encapsulated by the network service header; and

apply the network service to the packet according to policies specific for the network overlay protocol or segmentation protocol determined from the Universal Cloud Classifier by encapsulating the packet according to a network overlay protocol or a segmentation protocol that differs from the network overlay protocol or the segmentation protocol determined from the Universal Cloud Classifier.

16. The computer-readable storage media of claim 15, further comprising instructions operable to extract metadata stored in the network service header of the packet that is different than the Universal Cloud Classifier,

wherein the instructions operable to apply the network service to the packet comprise instructions operable to apply policies specific to the network overlay protocol or segmentation protocol and the metadata.

17. The computer-readable storage media of claim 15, wherein the Universal Cloud Classifier identifies a specific instance of a network overlay environment or segmentation environment.

18. The computer-readable storage media of claim 15, wherein the network overlay protocol determined from the Universal Cloud Classifier comprises one or more of Virtual Extensible Local Area Networks (VxLANs), Generic Routing Encapsulation (GRE) or Virtual Private Network (VPN) Tunnels.

19. The computer-readable storage media of claim 15, wherein the network overlay protocol or segmentation protocol determined from the Universal Cloud Classifier is applied to the packet such that a payload of the packet is encrypted, and wherein the instructions operable to apply the network service to the packet comprise instructions operable to decrypt the packet.

20. The computer-readable storage media of claim 15, wherein the instruction operable to apply the network service to the packet are operable to encapsulate the packet accordingly to one or more of a Virtual Extensible Local Area Networks (VxLANs) protocol, Generic Routing Encapsulation (GRE) protocol or Virtual Private Network (VPN) Tunnels protocol.