NETWORK ADDRESS TRANSLATION OFFLOAD TO NETWORK INFRASTRUCTURE FOR SERVICE CHAINS IN A NETWORK ENVIRONMENT

• US 20150295831A1
• Filed: 04/10/2014
• Published: 10/15/2015
• Est. Priority Date: 04/10/2014
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Kumar, Surendra M., Quinn, Paul, Guichard, James N., Smith, Michael R.
• Granted Patent: US 9,363,183 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/28 characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks] wireless communication networks H04W ; arrangements for dividing the transmission path H04W40/00
• CPC Class Codes: H04L 12/56 Packet switching systems
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 47/2483 involving identification of individual flows
• CPC Class Codes: H04L 61/2514 between local and global IP addresses

Abstract

An example method for network address translation (NAT) offload to network infrastructure for service chains in a network environment is provided and includes receiving a packet at a network infrastructure in a network comprising a plurality of service nodes interconnected through the network infrastructure, each service node executing at least one service function, identifying the packet as belonging to a first flow based on a cookie in a network service header of the packet that indicates a service chain that includes a sequence of service functions to be executed on the packet at the service nodes, determining that a service function in the service chain is to be offloaded from one of the service nodes to the network infrastructure for subsequent packets of the first flow, and executing the offloaded service function at the network infrastructure for subsequent packets of the first flow.

Claims

1. A method, comprising:

receiving a packet at a network infrastructure in a network comprising a plurality of service nodes interconnected through the network infrastructure, wherein each service node executes at least one service function;

identifying the packet as belonging to a first flow based on a cookie in a network service header (NSH) of the packet, wherein the NSH further indicates a service chain comprising a sequence of service functions to be executed on the packet at the service nodes, wherein a flow tuple of the packet indicates a different second flow;

determining that a service function in the service chain is to be offloaded from one of the service nodes to the network infrastructure for subsequent packets of the first flow; and

executing the offloaded service function at the network infrastructure for subsequent packets of the first flow.

2. The method of claim 1, wherein the first flow is identified by a first flow tuple and the second flow is identified by a different second flow tuple, wherein the flow tuple of the packet received at the network infrastructure comprises the second flow tuple.

3. The method of claim 1, further comprising:

receiving an initial packet of the first flow;

generating the cookie associating the first flow with the service chain; and

inserting the cookie in the NSH of the packet and the subsequent packets of the first flow.

4. The method of claim 1, wherein at least one service function in the service chain comprises network address translation (NAT) that changes a first flow tuple identifying the first flow to a second flow tuple identifying the second flow.

5. The method of claim 4, wherein the offloaded service function comprises the NAT.

6. The method of claim 5, wherein the network infrastructure determines a NAT policy for executing the offloaded NAT by comparing the first flow tuple and the second flow tuple.

7. The method of claim 1, wherein the determining that one of the service functions in the service chain is to be offloaded is based on inspecting a value of an offload bit in the NSH.

8. The method of claim 1, wherein the service function to be offloaded is identified by a service function identifier in the NSH.

9. The method of claim 5, wherein substantially all service functions performed at one of the service nodes is offloaded to the network infrastructure, wherein the service node is bypassed for the subsequent packets of the first flow.

10. The method of claim 1, wherein the service chain is assigned to the first flow by a service controller in the network.

11. Non-transitory tangible media that includes instructions for execution, which when executed by a processor, is operable to perform operations comprising:

receiving a packet at a network infrastructure in a network comprising a plurality of service nodes interconnected through the network infrastructure, wherein each service node executes at least one service function;

identifying the packet as belonging to a first flow based on a cookie in a NSH of the packet, wherein the NSH further indicates a service chain comprising a sequence of service functions to be executed on the packet at the service nodes, wherein a flow tuple of the packet indicates a different second flow;

determining that a service function in the service chain is to be offloaded from one of the service nodes to the network infrastructure for subsequent packets of the first flow; and

executing the offloaded service function at the network infrastructure for subsequent packets of the first flow.

12. The media of claim 11, wherein the operations further comprise:

receiving an initial packet of the first flow;

generating the cookie associating the first flow with the service chain; and

inserting the cookie in the NSH of the packet and the subsequent packets of the first flow.

13. The media of claim 11, wherein at least one service function in the service chain comprises NAT that changes a first flow tuple identifying the first flow to a second flow tuple identifying the second flow.

14. The media of claim 13, wherein the offloaded service function comprises the NAT.

15. The media of claim 14, wherein the network infrastructure determines a NAT policy for executing the offloaded NAT by comparing the first flow tuple and the second flow tuple.

16. An apparatus, comprising:

a memory element for storing data; and

a processor, wherein the processor executes instructions associated with the data, wherein the processor and the memory element cooperate, such that the apparatus is configured for;

receiving a packet at a network infrastructure in a network comprising a plurality of service nodes interconnected through the network infrastructure, wherein each service node executes at least one service function;

identifying the packet as belonging to a first flow based on a cookie in a NSH of the packet, wherein the NSH further indicates a service chain comprising a sequence of service functions to be executed on the packet at the service nodes, wherein a flow tuple of the packet indicates a different second flow;

determining that a service function in the service chain is to be offloaded from one of the service nodes to the network infrastructure for subsequent packets of the first flow; and

executing the offloaded service function at the network infrastructure for subsequent packets of the first flow.

17. The apparatus of claim 16, wherein the operations further comprise:

receiving an initial packet of the first flow;

generating the cookie associating the first flow with the service chain; and

inserting the cookie in the NSH of the packet and the subsequent packets of the first flow.

18. The apparatus of claim 16, wherein at least one service function in the service chain comprises NAT that changes a first flow tuple identifying the first flow to a second flow tuple identifying the second flow.

19. The apparatus of claim 18, wherein the offloaded service function comprises the NAT.

20. The apparatus of claim 19, wherein the network infrastructure determines a NAT policy for executing the offloaded NAT by comparing the first flow tuple and the second flow tuple.