Methods and apparatus for providing adaptive private network centralized management system discovery processes

• US 10,476,765 B2
• Filed: 12/17/2015
• Issued: 11/12/2019
• Est. Priority Date: 06/11/2009
• Status: Active Grant

• Current Assignee: Talari Networks Incorporated (Oracle Corporation)
• Original Assignee: Talari Networks Incorporated (Oracle Corporation)
• Inventors: Martin, Todd, Rovner, Sonia Kiang, Patterson, Justin Allen
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Chao, Michael W
• Application Number:
  US14/972,270
• Publication Number:
  US 20160182305A1
• Time in Patent Office: 1,426 Days
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/122 of virtualised topologies, e.g. software-defined networks [SDN] or network function virtualisation [NFV]
• CPC Class Codes: H04L 43/04 Processing captured monitoring data, e.g. for logfile generation
• CPC Class Codes: H04L 43/065 related to network devices
• CPC Class Codes: H04L 43/067 using time frame reporting
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 43/0894 Packet rate
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 43/103 with adaptive polling, i.e. dynamically adapting the polling rate
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/76 Routing in software-defined topologies, e.g. routing between virtual machines
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/12 Access point controller devices

Abstract

Systems and techniques are described for a centralized management system operating within a virtual machine which configures, monitors, analyzes, and manages an adaptive private network (APN) to provide a discovery process that learns about changes to the APN through a network control node (NCN) that is a single point of control of the APN. The discovery process automatically learns a new topology of the network without relying on configuration information of nodes in the APN. Network statistics are based on a timeline of network operations that a user selected to review. Such discovery and timeline review is separate from stored configuration information. If there was a network change, the changes either show up or not show up in the discovery process based on the selected time line. Configuration changes can be made from the APN VM system by loading the latest configuration on the APN under control of the NCN.

Claims

1. A method for discovery of nodes in an adaptive private network

(APN) comprising a central server, a network control node (NCN) operating as a single point of control of the APN, and a plurality of client nodes communicating with each other and the NCN utilizing changing interconnection links, the NCN having a configured management IP address which is separate from each client node, the NCN administering and controlling the plurality of client nodes within the APN, the method comprising:

configuring the APN with original APN topology information;

receiving in the NCN a management IP address from each client node of the plurality of client nodes for storage in the NCN;

querying the NCN by the central server for the management IP addresses of the plurality of client nodes; and

utilizing the management IP addresses of the plurality of client nodes to obtain current APN topology information and current connectivity information at a single point of access to the APN, wherein the client nodes do not have access to the management IP addresses of other client nodes and utilizing the management IP addresses of the client nodes to obtain current APN topology information and current connectivity information includes directly polling, by an APN virtual machine (VM), using the management IP addresses, and over a management network comprising a logical or physical network separate from a logical or physical network used to carry user data plane application traffic, each of the client nodes for the APN topology information and current connectivity information and receiving APN topology information and current connectivity information from the client nodes over the management network.

2. The method of claim 1 further comprising:

sending a public security certificate for use in the APN to the NCN; and

sending from the NCN the public security certificate to each client node in the APN.

3. The method of claim 1, wherein the step of querying the NCN further comprises:

sending a request for network management Internet protocol (IP) addresses to the NCN; and

returning a list of node management IP information structures containing information from each client node.

4. The method of claim 3, wherein the information structures comprise management network IP addresses of each client node in the APN.

5. The method of claim 3, wherein the information structures comprise client node IDs with each client node ID specifying status of a client node as a primary node or a secondary node in a high availability (HA) pair of client nodes.

6. The method of claim 3, wherein the information structures are transferred between each client node and the NCN.

7. The method of claim 1, further comprising:

monitoring APN resources for dynamic changes.

8. The method of claim 7, wherein the dynamic changes comprise addition or elimination of a client node.

9. The method of claim 1, wherein the central server automatically learns a new APN topology.

10. The method of claim 1, further comprising:

pushing security credentials from the NCN to all client nodes in the APN.

11. The method of claim 1, further comprising:

adding an additional client to the APN; and

learning the additional client dynamically.

12. The method of claim 1, further comprising:

polling for updates utilizing a centralized management virtual machine.

13. The method of claim 1 further comprising:

discovering changes in operating characteristics of the APN.