SYSTEM AND METHOD FOR IMPROVING SPOKE TO SPOKE COMMUNICATION IN A COMPUTER NETWORK

• US 20090097417A1
• Filed: 10/12/2007
• Published: 04/16/2009
• Est. Priority Date: 10/12/2007
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Sethi, Pratima Pramod, Khalid, Mohamed, Asati, Rajiv, Weis, Brian E.
• Granted Patent: US 8,625,610 B2
• Time in Patent Office: Days
• US Class Current: 370/255
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 45/17 Shortcut routing, e.g. using next hop resolution protocol [NHRP]
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

Various embodiments of the disclosed subject matter provide methods and systems for improved efficiency in spoke-to-spoke network communication. Embodiments provide systems and methods for registering a spoke with a hub, updating at least one database with spoke registration information at the hub, and advertising the spoke registration information to other spokes using a single control plane that includes transport security, peer discovery, and unicast routing information.

Claims

1. A method comprising:

registering a spoke with a hub;

updating at least one database with spoke registration information at the hub; and

advertising the spoke registration information to other spokes using a single control plane to integrate transport security, peer discovery, and unicast routing information.

2. The method as claimed in claim 1 including sending information corresponding to at least a portion of the at least one database to a plurality of registered spokes via a Group Key Management Protocol (GKMP).

3. The method as claimed in claim 2 wherein the GKMP is Group Domain of Interpretation (GDOI).

4. The method as claimed in claim 3 wherein a set of GDOI extensions carry information pertaining to the single control plane.

5. The method as claimed in claim 3 wherein a set of GDOI extensions carry information pertaining to the single control plane, the information including next-hop mapping information.

6. The method as claimed in claim 3 wherein a set of GDOI extensions carry information pertaining to the single control plane, the information including prefix reachability information.

7. A method comprising:

registering a spoke with a hub via a Group Key Management Protocol (GKMP);

updating at least one database with spoke registration information;

sending information corresponding to at least a portion of the at least one database to a plurality of registered spokes via GKMP; and

using the updated at least one database at a sending spoke in next hop resolution.

8. The method as claimed in claim 7 wherein the GKMP is Group Domain of Interpretation (GDOI).

9. The method as claimed in claim 7 wherein registering a spoke with a hub includes providing, in a GKMP message for the hub, spoke registration information including an IP address, and next hop mapping information corresponding to a registering spoke.

10. The method as claimed in claim 7 wherein registering a spoke with a hub includes providing, in a GKMP message for the hub, spoke registration information including an IP address, next hop mapping information, and local prefix reachability information corresponding to a registering spoke.

11. The method as claimed in claim 9 wherein the next hop mapping information corresponds to an association of one or more next-hop IP addresses with one or more IP addresses.

12. The method as claimed in claim 7 including obtaining next hop mapping information and local prefix reachability information from the at least one database.

13. The method as claimed in claim 7 including obtaining next hop mapping information and local prefix reachability information in either an aggregated manner or an individual manner.

14. The method as claimed in claim 7 wherein the hub maintains the at least one database.

15. The method as claimed in claim 7 wherein the spoke maintains a local spoke database which includes information corresponding to at least a portion of the at least one database.

16. The method as claimed in claim 15 wherein the spoke uses the information from the local spoke database to update IP routing or forwarding table entries in the spoke.

17. The method as claimed in claim 7 wherein the hub uses the information from the at least one database to update IP routing or forwarding table entries in the hub.

18. A method comprising:

registering a spoke with a hub using a Group Key Management Protocol (GKMP) message to provide spoke registration information including an IP address, next hop mapping information, and local prefix reachability information corresponding to a registering spoke;

updating at least one database with the spoke registration information; and

sending information corresponding to at least a portion of the at least one database to a plurality of registered spokes via a GKMP message.

19. The method as claimed in claim 18 wherein the hub maintains the at least one database.

20. The method as claimed in claim 18 wherein the spoke maintains a local spoke data store which includes information corresponding to at least a portion of the at least one database.

21. A Virtual Private Network (VPN) system comprising a single control plane to integrate transport security, peer discovery and unicast routing in a unified control plane.

22. The VPN system as claimed in claim 21 being configured to send information corresponding to the unified control plane to a plurality of registered spokes via a Group Key Management Protocol (GKMP).

23. An apparatus comprising:

means for registering a spoke with a hub via a Group Key Management Protocol (GKMP);

means for updating at least one database with spoke registration information;

means for sending information corresponding to at least a portion of the at least one database to a plurality of registered spokes via GKMP; and

means for using information corresponding to at least a portion of the at least one database at a sending spoke in next hop resolution.

24. The apparatus as claimed in claim 23 wherein the GKMP is Group Domain of Interpretation (GDOI).

25. A hub apparatus comprising:

a hub/spoke interface to receive a spoke registration message from a spoke via a Group Key Management Protocol (GKMP);

a hub database for storage of spoke registration information from the spoke registration message; and

a hub updater to send information corresponding to at least a portion of the hub database to a plurality of registered spokes via GKMP.

26. The hub apparatus as claimed in claim 25 wherein the s spoke registration message includes an IP address, next hop mapping information, and local prefix

reachability information corresponding to a registering spoke.