Scalable Network Configuration with Consistent Updates in Software Defined Networks

• US 20150089032A1
• Filed: 09/25/2013
• Published: 03/26/2015
• Est. Priority Date: 09/25/2013
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Agarwal, Kanak B., Carter, John B., Dixon, Colin K., Felter, Wesley M., Stephens, Brent E.
• Granted Patent: US 9,350,607 B2
• Time in Patent Office: Days
• US Class Current: 709/221
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/0873 Checking configuration conflicts between network elements
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 41/5096 wherein the managed service relates to distributed or central networked applications
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/5038 for local use, e.g. in LAN or USB networks, or in a controller area network [CAN]

Abstract

Mechanisms are provided for configuring a data flow between a source device and a destination device in a network. The mechanisms receive, from a network control application, a request to establish a network configuration corresponding to a data flow between the source device and the destination device. The request comprises a fine grained header field tuple for defining the data flow. The mechanisms allocate, from a shadow address pool, a shadow address to be mapped to the fine grained header field tuple. The shadow address pool comprises addresses not being used by devices coupled to the network. The mechanisms configure a network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address.

Claims

1. A method, in a data processing system comprising a processor and a memory, for configuring a portion of network corresponding to a data flow between a source device and a destination device in a network, the method comprising:

receiving, from a network control application, a request to establish a network configuration corresponding to a data flow between the source device and the destination device, wherein the request comprises a fine grained header field tuple for defining the data flow;

allocating, from a shadow address pool, a shadow address to be mapped to the fine grained header field tuple, wherein the shadow address pool comprises addresses not being used by devices coupled to the network; and

configuring a network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address.

2. The method of claim 1, wherein configuring the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address comprises:

configuring the destination device to process data packets having a destination address corresponding to the shadow address; and

configuring the source device to use the shadow address as the destination address in data packets transmitted by the source device.

3. The method of claim 2, wherein configuring the source device to use the shadow address as the destination address comprises transmitting to the source device an Address Resolution Protocol (ARP) message indicating to the source device that the destination address for the destination device has changed to the shadow address.

4. The method of claim 2, wherein configuring the destination device to process data packets having a destination address corresponding to the shadow address comprises configuring a network adapter of the destination device to be in a promiscuous mode of operation.

5. The method of claim 1, wherein configuring the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address comprises:

deploying, at a source edge switch, a first rule to replace, in headers of data packets belonging to the data flow, a destination address corresponding to the destination address of the destination device with the shadow address; and

deploying, at a destination edge switch, a second rule to replace, in headers of data packets belonging to the data flow, the shadow address to the destination address of the destination device.

6. The method of claim 5, wherein at least one of the source edge switch or the destination edge switch is a virtual switch in a hypervisor.

7. The method of claim 1, wherein configuring the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address comprises:

prior to receiving the request, pre-configuring switches in the network infrastructure with pre-configured matching rules based on the shadow address; and

enabling utilizing of the pre-configured matching rules in the switches of the network infrastructure by configuring the source device to use the shadow address as the destination address for the destination device.

8. The method of claim 1, wherein the shadow address is a shadow Media Access Control (MAC) address and the shadow address pool is a pool of shadow MAC addresses.

9. The method of claim 1, wherein configuring the network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address comprises:

deploying, to switches of the network infrastructure, one or more matching rules specifying the shadow address as a matching condition of the matching rules, and a corresponding action to be performed on data packets having the shadow address as a destination address in the headers of the data packets.

10. The method of claim 9, wherein, at each of the switches, the one or more matching rules are stored in a forwarding database stored in a low cost, high capacity storage device of the switch.

11. A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed on a computing device coupled to a network, causes the computing device to:

receive, from a network control application, a request to establish a network configuration corresponding to a data flow between the source device and the destination device, wherein the request comprises a fine grained header field tuple for defining the data flow;

allocate, from a shadow address pool, a shadow address to be mapped to the fine grained header field tuple, wherein the shadow address pool comprises addresses not being used by devices coupled to the network; and

configure a network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address.

12. The computer program product of claim 11, wherein the computer readable program causes the computing device to configure the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address at least by:

configuring the destination device to process data packets having a destination address corresponding to the shadow address; and

configuring the source device to use the shadow address as the destination address in data packets transmitted by the source device.

13. The computer program product of claim 12, wherein configuring the source device to use the shadow address as the destination address comprises transmitting to the source device an Address Resolution Protocol (ARP) message indicating to the source device that the destination address for the destination device has changed to the shadow address.

14. The computer program product of claim 12, wherein configuring the destination device to process data packets having a destination address corresponding to the shadow address comprises configuring a network adapter of the destination device to be in a promiscuous mode of operation.

15. The computer program product of claim 11, wherein the computer readable program causes the computing device to configure the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address at least by:

deploying, at a source edge switch, a first rule to replace, in headers of data packets belonging to the data flow, a destination address corresponding to the destination address of the destination device with the shadow address; and

deploying, at a destination edge switch, a second rule to replace, in headers of data packets belonging to the data flow, the shadow address to the destination address of the destination device.

16. The computer program product of claim 15, wherein at least one of the source edge switch or the destination edge switch is a virtual switch in a hypervisor.

17. The computer program product of claim 11, wherein the computer readable program causes the computing device to configure the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address at least by:

prior to receiving the request, pre-configuring switches in the network infrastructure with pre-configured matching rules based on the shadow address; and

enabling utilizing of the pre-configured matching rules in the switches of the network infrastructure by configuring the source device to use the shadow address as the destination address for the destination device.

18. The computer program product of claim 11, wherein the shadow address is a shadow Media Access Control (MAC) address and the shadow address pool is a pool of shadow MAC addresses.

19. The computer program product of claim 11, wherein the computer readable program causes the computing device to configuring the network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address at least by:

deploying, to switches of the network infrastructure, one or more matching rules specifying the shadow address as a matching condition of the matching rules, and a corresponding action to be performed on data packets having the shadow address as a destination address in the headers of the data packets.

20. An apparatus comprising:

a processor;

a memory coupled to the processor, and

a network interface that couples the apparatus to a network, wherein the memory comprises instructions which, when executed by the processor, cause the processor to;

receive, from a network control application, a request to establish a network configuration corresponding to a data flow between the source device and the destination device, wherein the request comprises a fine grained header field tuple for defining the data flow;

allocate, from a shadow address pool, a shadow address to be mapped to the fine grained header field tuple, wherein the shadow address pool comprises addresses not being used by devices coupled to the network; and

configure a network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address.