Forwarding Policies on a Virtual Service Network

• US 20160173579A1
• Filed: 02/19/2016
• Published: 06/16/2016
• Est. Priority Date: 12/06/2012
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: Jalan, Rajkumar, Kamat, Gurudeep
• Granted Patent: US 9,544,364 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

In providing packet forwarding policies in a virtual service network that includes a network node and a pool of service load balancers serving a virtual service, the network node: receives a virtual service session request from a client device, the request including a virtual service network address for the virtual service; compares the virtual service network address in the request with the virtual service network address in each at least one packet forwarding policy; in response to finding a match between the virtual service network address in the request and a given virtual service network address in a given packet forwarding policy, determines the given destination in the given packet forwarding policy; and sends the request to a service load balancer in the pool of service load balancers associated with the given destination, where the service load balancer establishes a virtual service session with the client device.

Claims

1. A method for providing forwarding policies in a virtual service network, the virtual service network comprising a network node and a pool of service load balancers serving a virtual service associated with a virtual service network address, comprising:

receiving a virtual service session request from a client device by the network node, the virtual service session request comprising the virtual service network address for the virtual service served by the pool of service load balancers, wherein the network node comprises at least one packet forwarding policy comprising a range of virtual service network addresses associated with a destination;

comparing by the network node the virtual service network address in the virtual service session request with the range of virtual service network addresses in each packet forwarding policy;

in response to finding that the virtual service network address in the virtual service session request is included in the range of virtual service network addresses in a packet forwarding policy, determining the destination in the packet forwarding policy by the network node; and

sending the virtual service session request to a service load balancer in the pool of service load balancers associated with the destination, wherein the service load balancer establishes a virtual service session with the client device.

2. The method of claim 1, wherein after the service load balancer establishes the virtual service session with the client device, the method further comprises:

receiving a virtual service request from the client device through the virtual service session by the network node, the virtual service request comprising the virtual service network address for the virtual service;

comparing by the network node the virtual service network address in the virtual service request with the range of virtual service network addresses in each packet forwarding policy;

in response to finding that the virtual service network address in the virtual service request is included in the range of virtual service network addresses in a packet forwarding policy, determining a destination in the packet forwarding policy by the network node; and

sending the virtual service request to a server selected from a pool of servers by the service load balancer associated with the destination by the network node.

3. The method of claim 2, further comprising:

receiving a virtual service data packet from the client device through the virtual service session by the network node, the virtual service data packet comprising the virtual service network address for the virtual service;

comparing by the network node the virtual service network address in the virtual service data packet with the range of virtual service network addresses in each packet forwarding policy;

in response to finding that the virtual service network address in the virtual service data packet is included in the range of virtual service network addresses in a packet forwarding policy, determining a destination in the packet forwarding policy by the network node; and

sending the virtual service data packet to a service load balancer associated with the destination by the network node; and

sending a service packet to the selected server by the service load balancer.

4. The method of claim 1, the method further comprises:

receiving a data packet of the virtual service session by the network node from the service load balancer over a data network, the data packet comprising a client network address of the client device as a destination for the data packet;

retrieving the client network address from the data packet by the network node; and

sending the data packet to the client device using the client network address by the network node.

5. The method of claim 4, wherein the data packet comprises a virtual service session request response or a virtual service request response.

6. The method of claim 1, wherein the destination comprises a second network node, wherein the sending the virtual service session request to a service load balancer in the pool of service load balancers associated with the destination comprises:

sending the virtual service session request to the second network node, wherein the second network node comprises a second packet forwarding policy comprising a range of virtual service network addresses associated with a second destination;

comparing by the second network node the virtual service network address in the virtual service session request with the range of virtual service network addresses in the second packet forwarding policy;

in response to finding that the virtual service network address in the virtual service session request is included in the range of virtual service network addresses in the second packet forwarding policy, determining a second destination in the second packet forwarding policy by the second network node; and

sending the virtual service session request to the service load balancer associated with the second destination, wherein the service load balancer establishes a virtual service session with the client device.

7. The method of claim 1, wherein the determining the destination in the packet forwarding policy by the network node comprises:

finding by the network node that the virtual service network address in the virtual service session request is included in a first range of virtual service network addresses in a first packet forwarding policy and included in a second range of virtual service network addresses in a second packet forwarding policy;

selecting by the network node either the first packet forwarding policy or the second packet forwarding policy based on additional information comprised in the first and second packet forwarding policies; and

determining the destination in the selected packet forwarding policy by the network node.

8. The method of claim 7, wherein the additional information comprises one or more of the following:

a multi-path factor; and

a traffic policy.

9. The method of claim 7, wherein the first packet forwarding policy comprises a first destination associated with a first service load balancer in the pool of service load balancers, wherein the second packet forwarding policy comprises a second destination associated with a second service load balancer in the pool of service load balancers, wherein the first service load balancer is different from the second service load balancer, wherein the determining the destination in the selected packet forwarding policy by the network node comprises:

in response to selecting the first packet forwarding policy, determining the first destination associated with the first service load balancer in the first packet forwarding policy by the network node; and

in response to selecting the second packet forwarding policy, determining the second destination associated with the second service load balancer in the second packet forwarding policy by the network node.

10. The method of claim 1, wherein the network node comprises a first packet forwarding policy for a first virtual service and a second packet forwarding policy for a second virtual service, wherein the comparing by the network node the virtual service network address in the virtual service session request with the range of virtual service network addresses in each packet forwarding policy comprises:

determining by the network node whether the virtual service session request is for the first virtual service or the second virtual service;

in response to determining that the virtual service session request is for the first virtual service, comparing by the network node the virtual service network address in the virtual service session request with a range of virtual service network addresses in the first packet forwarding policy; and

in response to determining that the virtual service session request is for the second virtual service, comparing by the network node the virtual service network address in the virtual service session request with a range of virtual service network addresses in the second packet forwarding policy.

11. The method of claim 1, wherein the virtual service session request further comprises a client network address of the client device, wherein each packet forwarding policy further comprises a range of client network addresses associated with the destination, wherein the comparing by the network node the virtual service network address in the virtual service session request with the range of virtual service network addresses in each packet forwarding policy and the determining the destination in the packet forwarding policy by the network node comprise:

comparing by the network node the virtual service network address in the virtual service session request with the range of virtual service network addresses in each packet forwarding policy;

comparing by the network node the client network address in the virtual service session request with the range of client network addresses in each packet forwarding policy; and

in response to finding that the virtual service network address in the virtual service session request is included in the range of virtual service network addresses in the packet forwarding policy, and in response to finding that the client network address in the virtual service session request is included in the range of client network addresses in the packet forwarding policy, determining the destination in the packet forwarding policy by the network node.

12. A virtual service network, comprising:

a pool of service load balancers serving a virtual service associated with a virtual service network address; and

a network node comprising at least one packet forwarding policy, each packet forwarding policy comprising a range of virtual service network addresses associated with a destination, wherein the network node;

receives a virtual service session request from a client device, the virtual service session request comprising a virtual service network address for the virtual service served by the pool of service load balancers;

compares the virtual service network address in the virtual service session request with the range of virtual service network addresses in each packet forwarding policy;

in response to finding that the virtual service network address in the virtual service session request is included in the range of virtual service network addresses in a packet forwarding policy, determines the destination in the packet forwarding policy; and

sends the virtual service session request to a service load balancer in the pool of service load balancers associated with the destination, wherein the service load balancer establishes a virtual service session with the client device.

13. The network of claim 12, wherein after the service load balancer establishes the virtual service session with the client device, the network node further:

receives a virtual service request from the client device through the virtual service session, the virtual service request comprising the virtual service network address for the virtual service;

compares the virtual service network address in the virtual service request with the range of virtual service network addresses in each packet forwarding policy;

in response to finding that the virtual service network address in the virtual service request is included in the range of virtual service network addresses in a packet forwarding policy, determines a destination in the packet forwarding policy; and

sends the virtual service request to a server selected from a pool of servers by the service load balancer associated with the destination.

14. The network of claim 13, wherein the network node further:

receives a virtual service data packet from the client device through the virtual service session, the virtual service data packet comprising the virtual service network address for the virtual service;

compares the virtual service network address in the virtual service data packet with the range of virtual service network addresses in each packet forwarding policy;

in response to finding that the virtual service network address in the virtual service data packet is included in the range of virtual service network addresses in a packet forwarding policy, determines a destination in the packet forwarding policy; and

sends the virtual service data packet to a service load balancer associated with the destination; and

sends a service packet to the selected server by the service load balancer.

15. The network of claim 12, wherein the network node further:

receives a data packet of the virtual service session from the service load balancer over a data network, the data packet comprising a client network address of the client device as a destination for the packet;

retrieves the client network address from the data packet; and

sends the data packet to the client device using the client network address.

16. The network of claim 15, wherein the data packet comprises a virtual service session request response or a virtual service request response.

17. The network of claim 12, further comprising a second network node, wherein the destination is associated with the second network node, wherein in the sending the virtual service session request to a service load balancer in the pool of service load balancers associated with the destination, the network node further:

sends the virtual service session request to the second network node, wherein the second network node comprises a second packet forwarding policy comprising a range of virtual service network addresses associated with a second destination;

wherein the second network node;

compares the virtual service network address in the virtual service session request with the range of virtual service network addresses in the second packet forwarding policy;

in response to finding that the virtual service network address in the virtual service session request is included in the range of virtual service network addresses in the second packet forwarding policy, determines a second destination in the second packet forwarding policy; and

sends the virtual service session request to the service load balancer associated with the second destination, wherein the service load balancer establishes a virtual service session with the client device.

18. The network of claim 12, wherein in the determining, the network node further:

finds that the virtual service network address in the virtual service session request is included in a first range of virtual service network addresses in a first packet forwarding policy and is included in a second range of virtual service network addresses in a second packet forwarding policy;

selects either the first packet forwarding policy or the second packet forwarding policy based on additional information comprised in the first and second packet forwarding policies; and

determines the destination in the selected packet forwarding policy.

19. The network of claim 18, wherein the additional information comprises one or more of a multi-path factor and a traffic policy.

20. The network of claim 18, wherein the first packet forwarding policy comprises a first destination associated with a first service load balancer in the pool of service load balancers, wherein the second packet forwarding policy comprises a second destination associated with a second service load balancer in the pool of service load balancers, wherein the first service load balancer is different from the second service load balancer, wherein in the determining the destination in the selected packet forwarding policy, the network node:

in response to selecting the first packet forwarding policy, determines the first destination associated with the first service load balancer in the first packet forwarding policy; and

in response to selecting the second packet forwarding policy, determines the second destination associated with the second service load balancer in the second packet forwarding policy.

21. The network of claim 12, wherein the network node comprises a first packet forwarding policy for a first virtual service and a second packet forwarding policy for a second virtual service, wherein in the comparing the virtual service network address in the virtual service session request with the range of virtual service network addresses in each packet forwarding policy, the network node:

determines whether the virtual service session request is for the first virtual service or the second virtual service;

in response to determining that the virtual service session request is for the first virtual service, compares the virtual service network address in the virtual service session request with a range of virtual service network addresses in the first packet forwarding policy; and

in response to determining that the virtual service session request is for the second virtual service, compares the virtual service network address in the virtual service session request with a range of virtual service network addresses in the second packet forwarding policy.

22. The network of claim 12, wherein the virtual service session request further comprises a client network address of the client device, wherein each packet forwarding policy further comprises a range of client network addresses associated with the destination, wherein in comparing the virtual service network address in the virtual service session request with the range of virtual service network addresses in each packet forwarding policy and determining the destination in the packet forwarding policy, the network node:

compares the virtual service network address in the virtual service session request with the range of virtual service network addresses in each packet forwarding policy;

compares the client network address in the virtual service session request with the range of client network address in each packet forwarding policy; and

in response to finding that the virtual service network address in the virtual service session request is included in the range of virtual service network addresses in the packet forwarding policy, and in response to finding that the client network address in the virtual service session request is included in the range of client network addresses in the packet forwarding policy, determines the destination in the packet forwarding policy.