Techniques for load balancing over a cluster of subscriber-aware application servers

• US 20070165622A1
• Filed: 01/17/2006
• Published: 07/19/2007
• Est. Priority Date: 01/17/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Batz, Robert, Shatzkamer, Kevin, O'Rourke, Christopher
• Granted Patent: US 7,694,011 B2
• Time in Patent Office: Days
• US Class Current: 370/389
• CPC Class Codes: H04L 12/287 Remote access server, e.g. BRAS
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

Techniques for distributing control plane traffic, from an end node in a packet switched network to a cluster of service gateway nodes that host subscriber-aware application servers, include receiving a control plane message for supporting data plane traffic from a particular subscriber. A particular service gateway node is determined among the cluster of service gateway nodes based on policy-based routing (PBR) for the data plane traffic from the particular subscriber. A message based on the control plane message is sent to a control plane process on the particular service gateway node. Thereby, data plane traffic and control plane traffic from the same subscriber are directed to the same gateway node, or otherwise related gateway nodes, of the cluster of service gateway nodes. This approach allows currently-available, hardware-accelerated PBR to be used with clusters of subscriber-aware service gateways that must also monitor control plane traffic from the same subscriber.

Claims

1. A method for distributing traffic from an end node in a packet switched network to a cluster of service gateway nodes that host subscriber-aware application servers, comprising the steps of:

receiving a control plane message for supporting data plane traffic from a particular subscriber;

determining a particular service gateway node among the cluster of service gateway nodes based on policy-based routing (PBR) for the data plane traffic from the particular subscriber; and

sending a message based on the control plane message to a control plane process on the particular service gateway node,

whereby data plane traffic and control plane traffic from the same subscriber are directed to one or more related gateway nodes of the cluster of service gateway nodes.

2. A method as recited in claim 1, wherein the one or more related gateway nodes are the same gateway node.

3. A method as recited in claim 1, said step of determining the particular service gateway node further comprising:

determining a unique network identifier for the particular subscriber,

providing the unique network identifier to a policy-based routing engine that determines a next hop network address for a message based on the unique network identifier; and

receiving the next hop network address from the policy-based routing engine; and

determining the particular service gateway node based on the next hop network address.

4. A method as recited in claim 3, said step of providing the unique network identifier to a policy-based routing engine further comprising providing the unique network identifier to a policy-based routing engine that compares the unique network identifier to an access control list (ACL).

5. A method as recited in claim 3, said step of providing the unique network identifier to the policy-based routing engine further comprising providing the unique network identifier to a policy-based routing engine that implements in software executing on general-purpose logic circuits identical policy-based routing as implemented in function-specific logic circuits for data plane traffic, whereby execution of the policy-based routing engine for data plane traffic is accelerated over an implementation using general-purpose logic circuits.

6. A method as recited in claim 3, said step of determining a unique network identifier for the particular subscriber further comprising determining an internet protocol (IP) address for the subscribed from within a payload of the control plane message.

7. A method as recited in claim 1, said step of receiving the control plane message further comprising receiving an Authentication, Authorization, Accounting (AAA) request.

8. A method as recited in claim 7, said step of receiving the AAA request further comprising receiving a Remote Authentication Dial-In User service (RADIUS) request.

9. A method as recited in claim 1, wherein a sticky table for recording information per subscriber based on a control plane response message directed to the network access server is not formed in memory on a device performing the method.

10. An apparatus for distributing traffic from an end node in a packet switched network to a cluster of service gateway nodes that host subscriber-aware application servers, comprising:

means for receiving a control plane message for supporting data plane traffic from a particular subscriber;

means for determining a particular service gateway node among the cluster of service gateway nodes based on policy-based routing (PBR) for the data plane traffic from the particular subscriber; and

means for sending a message based on the control plane message to a control plane process on the particular service gateway node,

whereby data plane traffic and control plane traffic from the same subscriber are directed to one or more related gateway nodes of the cluster of service gateway nodes.

11. An apparatus for distributing traffic from an end node in a packet switched network to a cluster of service gateway nodes that host subscriber-aware application servers, comprising:

a first network interface that is coupled to a network for communicating therewith a first data packet;

a different second network interface that is coupled to a network for communicating therewith a second data packet;

one or more processors;

a computer-readable medium; and

one or more sequences of instructions stored in the computer-readable medium, which, when executed by the one or more processors, causes the one or more processors to carry out the steps of;

receiving over the first interface a control plane message for supporting data plane traffic from a particular subscriber;

determining a particular service gateway node among the cluster of service gateway nodes based on policy-based routing (PBR) for the data plane traffic from the particular subscriber; and

sending over the second network interface a message based on the control plane message to a control plane process on the particular service gateway node,

whereby data plane traffic and control plane traffic from the same subscriber are directed to one or more related gateway nodes of the cluster of service gateway nodes.

12. An apparatus as recited in claim 11, wherein the one or more related gateway nodes are the same gateway node.

13. An apparatus as recited in claim 11, said step of determining the particular service gateway node further comprising:

determining a unique network identifier for the particular subscriber;

providing the unique network identifier to a policy-based routing engine that determines a next hop network address for a message based on the unique network identifier; and

receiving the next hop network address from the policy-based routing engine; and

determining the particular service gateway node based on the next hop network address.

14. An apparatus as recited in claim 13, said step of providing the unique network identifier to a policy-based routing engine further comprising providing the unique network identifier to a policy-based routing engine that compares the unique network identifier to an access control list (ACL).

15. An apparatus as recited in claim 14, wherein:

the apparatus further comprises function-specific logic circuits for PBR of data plane traffic based on the ACL, whereby execution of PBR of data plane traffic is accelerated over an implementation using general-purpose logic circuits; and

said step of providing the unique network identifier to the policy-based routing engine further comprising providing the unique network identifier to a policy-based routing engine that implements identical policy-based routing as implemented in the function-specific logic circuits for PBR of data plane traffic,

16. An apparatus as recited in claim 13, said step of determining a unique network identifier for the particular subscriber further comprising determining an internet protocol (IP) address for the subscribed from within a payload of the control plane message.

17. An apparatus as recited in claim 11, said step of receiving the control plane message further comprising receiving an Authentication, Authorization, Accounting (AAA) request.

18. An apparatus as recited in claim 17, said step of receiving the AAA request further comprising receiving a Remote Authentication Dial-In User service (RADIUS) request.

19. An apparatus as recited in claim 11, wherein a sticky table for recording information per subscriber based on a control plane response message directed to the network access server is not formed in the computer-readable medium.

20. A computer-readable medium carrying one or more sequences of instructions for distributing traffic from an end node in a packet switched network to a cluster of service gateway nodes that host subscriber-aware application servers, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:

receiving a control plane message for supporting data plane traffic from a particular subscriber;

determining a particular service gateway node among the cluster of service gateway nodes based on policy-based routing (PBR) for the data plane traffic from the particular subscriber; and

sending a message based on the control plane message to a control plane process on the particular service gateway node,

whereby data plane traffic and control plane traffic from the same subscriber are directed to one or more related gateway nodes of the cluster of service gateway nodes.