Generating flexible, programmable, and scalable network tunnels on demand

• US 10,644,901 B2
• Filed: 09/27/2018
• Issued: 05/05/2020
• Est. Priority Date: 09/27/2018
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Kommula, Sunanda, Baban, Alex, Shokarev, Dmitry A., Wania, Jamsheed, Windisch, Kurt J., Paramashiva, Nandan, Gadela, Sri Karthik Goud
• Primary Examiner(s): Huq, Obaidul
• Application Number:
  US16/144,726
• Publication Number:
  US 20200106641A1
• Time in Patent Office: 586 Days
• Field of Search: 370351, 370389
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 2212/00 Encapsulation of packets
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 45/72 Routing based on the source address

Abstract

A device receives network information associated with a network and server information associated with one or more server devices, wherein the network is associated with a network device and the one or more server devices. The device generates, based on the network information and the server information, an encapsulation profile for a tunnel encapsulation path and a route profile for the tunnel encapsulation path. The device provides, to the network device, the encapsulation profile for the tunnel encapsulation path and the route profile for the tunnel encapsulation path, and provides, to the one or more server devices, the encapsulation profile for the tunnel encapsulation path. The tunnel encapsulation path is provided between the network device and the one or more server devices, via the network, based on the encapsulation profile for the tunnel encapsulation path and the route profile for the tunnel encapsulation path.

Claims

1. A method, comprising:

receiving, by a device, network information associated with a network and server information associated with one or more server devices,

wherein the network is associated with a network device and the one or more server devices;

generating, by the device and based on the network information and the server information, an encapsulation profile for a tunnel encapsulation path;

generating, by the device and based on the network information and the server information, a route profile for the tunnel encapsulation path;

providing, by the device and to the network device, the encapsulation profile for the tunnel encapsulation path and the route profile for the tunnel encapsulation path; and

providing, by the device and to the one or more server devices, the encapsulation profile for the tunnel encapsulation path,

wherein the tunnel encapsulation path is provided between the network device and the one or more server devices, via the network, based on the encapsulation profile for the tunnel encapsulation path and the route profile for the tunnel encapsulation path.

2. The method of claim 1, further comprising:

generating a decapsulation profile for a tunnel decapsulation path based on the network information and the server information;

providing, to the network device, the decapsulation profile for the tunnel decapsulation path; and

providing, to the one or more server devices, the decapsulation profile for the tunnel decapsulation path,

wherein the tunnel decapsulation path is provided between the network device and the one or more server devices, via the network, based on the decapsulation profile for the tunnel decapsulation path.

3. The method of claim 2, further comprising:

generating another decapsulation profile for another tunnel decapsulation path based on the network information and the server information;

aggregating the other decapsulation profile and the decapsulation profile to generate an aggregated decapsulation profile for an aggregated tunnel decapsulation path,

wherein the aggregated tunnel decapsulation path combines the tunnel decapsulation path and the other tunnel decapsulation path;

providing, to the network device, the aggregated decapsulation profile for the aggregated tunnel decapsulation path; and

providing, to the one or more server devices, the aggregated decapsulation profile for the aggregated tunnel decapsulation path,

wherein the aggregated tunnel decapsulation path is provided between the network device and the one or more server devices, via the network, based on the aggregated decapsulation profile.

4. The method of claim 1, further comprising:

receiving a tunnel parameter change for the tunnel encapsulation path; and

causing the tunnel parameter change to be implemented by the network device and the one or more server devices, via the network.

5. The method of claim 1, wherein the encapsulation profile for the tunnel encapsulation path includes an application programming interface (API).

6. The method of claim 1, wherein the encapsulation profile for the tunnel encapsulation path includes information indicating one or more of:

a source address for the tunnel encapsulation path,

a destination address for the tunnel encapsulation path,

a source port range for the tunnel encapsulation path,

a destination port for the tunnel encapsulation path, or

features to be associated with the tunnel encapsulation path.

7. The method of claim 1, wherein the one or more server devices include one or more virtual machines, and

wherein the tunnel encapsulation path is provided between the network device and one of the one or more virtual machines.

8. A device, comprising:

one or more memories; and

one or more processors to;

receive network information associated with a network and server information associated with one or more server devices,

wherein the network is associated with a network device and the one or more server devices;

generate an encapsulation profile for a tunnel encapsulation path based on the network information and the server information;

generate a route profile for the tunnel encapsulation path based on the network information and the server information;

generate a decapsulation profile for a tunnel decapsulation path based on the network information and the server information;

provide, to the network device, the encapsulation profile for the tunnel encapsulation path, the route profile for the tunnel encapsulation path, and the decapsulation profile for the tunnel decapsulation path; and

provide, to the one or more server devices, the encapsulation profile for the tunnel encapsulation path and the decapsulation profile for the tunnel decapsulation path,

wherein the tunnel encapsulation path and the tunnel decapsulation path is provided between the network device and the one or more server devices, via the network, based on the encapsulation profile for the tunnel encapsulation path and the route profile for the tunnel encapsulation path, and

wherein the tunnel decapsulation path is provided between the network device and the one or more server devices, via the network, based on the decapsulation profile for the tunnel decapsulation path.

9. The device of claim 8, wherein each of the encapsulation profile and the decapsulation profile includes an application programming interface (API).

10. The device of claim 8, wherein the one or more processors are further to:

generate another decapsulation profile for another tunnel decapsulation path based on the network information and the server information;

aggregate the other decapsulation profile and the decapsulation profile to generate an aggregated decapsulation profile for an aggregated tunnel decapsulation path,

wherein the aggregated tunnel decapsulation path combines the tunnel decapsulation path and the other tunnel decapsulation path;

provide, to the network device, the aggregated decapsulation profile for the aggregated tunnel decapsulation path; and

provide, to the one or more server devices, the aggregated decapsulation profile for the aggregated tunnel decapsulation path,

wherein the aggregated tunnel decapsulation path is provided between the network device and the one or more server devices, via the network, based on the aggregated decapsulation profile.

11. The device of claim 10, wherein the aggregated decapsulation profile includes an application programming interface (API).

12. The device of claim 8, wherein the one or more processors are further to:

receive a tunnel parameter change for the tunnel decapsulation path; and

cause the tunnel parameter change to be implemented by the network device and the one or more server devices, via the network.

13. The device of claim 8, wherein the encapsulation profile for the tunnel encapsulation path includes information indicating one or more of:

a source address for the tunnel encapsulation path,

a destination address for the tunnel encapsulation path,

a source port range for the tunnel encapsulation path,

a destination port for the tunnel encapsulation path, or

features to be associated with the tunnel encapsulation path.

14. The device of claim 8, wherein the decapsulation profile for the tunnel decapsulation path includes information indicating one or more of:

a source address for the tunnel decapsulation path,

a destination address for the tunnel decapsulation path, or

a destination port for the tunnel decapsulation path.

15. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions that, when executed by one or more processors of a device, cause the one or more processors to;

receive network information associated with a network and server information associated with one or more server devices,

wherein the network is associated with a network device and the one or more server devices;

generate, based on the network information and the server information, an encapsulation profile for a tunnel encapsulation path;

generate, based on the network information and the server information, a route profile for the tunnel encapsulation path;

provide, to the network device, the encapsulation profile for the tunnel encapsulation path and the route profile for the tunnel encapsulation path;

provide, to the one or more server devices, the encapsulation profile for the tunnel encapsulation path,

wherein the tunnel encapsulation path is provided between the network device and the one or more server devices, via the network, based on the encapsulation profile for the tunnel encapsulation path and the route profile for the tunnel encapsulation path;

receive a tunnel parameter change for the tunnel encapsulation path; and

cause the tunnel parameter change to be implemented by the network device and the one or more server devices, via the network.

16. The non-transitory computer-readable medium of claim 15, wherein the instructions further comprise:

one or more instructions that, when executed by the one or more processors, cause the one or more processors to;

generate a decapsulation profile for a tunnel decapsulation path based on the network information and the server information;

provide, to the network device, the decapsulation profile for the tunnel decapsulation path; and

provide, to the one or more server devices, the decapsulation profile for the tunnel decapsulation path,

wherein the tunnel decapsulation path is provided between the network device and the one or more server devices, via the network, based on the decapsulation profile for the tunnel decapsulation path.

17. The non-transitory computer-readable medium of claim 16, wherein the instructions further comprise:

one or more instructions that, when executed by the one or more processors, cause the one or more processors to;

generate another decapsulation profile for another tunnel decapsulation path based on the network information and the server information;

aggregate the other decapsulation profile and the decapsulation profile to generate an aggregated decapsulation profile for an aggregated tunnel decapsulation path,

wherein the aggregated tunnel decapsulation path combines the tunnel decapsulation path and the other tunnel decapsulation path;

provide, to the network device, the aggregated decapsulation profile for the aggregated tunnel decapsulation path; and

provide, to the one or more server devices, the aggregated decapsulation profile for the aggregated tunnel decapsulation path,

wherein the aggregated tunnel decapsulation path is provided between the network device and the one or more server devices, via the network, based on the aggregated decapsulation profile.

18. The non-transitory computer-readable medium of claim 16, wherein the decapsulation profile for the tunnel decapsulation path includes information indicating one or more of:

a source address for the tunnel decapsulation path,

a destination address for the tunnel decapsulation path, or

a destination port for the tunnel decapsulation path.

19. The non-transitory computer-readable medium of claim 15, wherein the encapsulation profile for the tunnel encapsulation path includes information indicating one or more of:

a source address for the tunnel encapsulation path,

a destination address for the tunnel encapsulation path,

a source port range for the tunnel encapsulation path,

a destination port for the tunnel encapsulation path, or

features to be associated with the tunnel encapsulation path.

20. The non-transitory computer-readable medium of claim 15, wherein the one or more server devices include one or more virtual machines, and

wherein the tunnel encapsulation path is provided between the network device and one of the one or more virtual machines.