SYSTEM AND METHOD OF NETWORK FUNCTIONS VIRTUALIZATION OF NETWORK SERVICES WITHIN AND ACROSS CLOUDS

• US 20160212012A1
• Filed: 08/29/2014
• Published: 07/21/2016
• Est. Priority Date: 08/30/2013
• Status: Abandoned Application

• Current Assignee: Clearpath Networks Incorporated
• Original Assignee: Clearpath Networks Incorporated
• Inventors: Young, Clifford H., Lee, Peter
• Application Number:
  US14/914,781
• Publication Number:
  US 20160212012A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: G06F 2009/4557 Distribution of virtual machine instances; Migration and load balancing
• CPC Class Codes: G06F 2009/45575 Starting, stopping, suspending or resuming virtual machine instances
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 9/00 Arrangements for program control, e.g. control units program control for peripheral devices G06F13/10
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/14 Network analysis or design
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/61 taking into account QoS or priority requirements

Abstract

An information technology (IT) services management system comprising instructions that cause the at least one processor to execute a controller. The controller may be programmed to communicate with at least one virtual service container, wherein the controller is further programmed to instantiate a virtual service container at a service hub. Instantiating the virtual service container may comprise sending to a service hub an instruction to instantiate a virtual service container; receiving an indication of a secure connection between the controller and the virtual service container; receiving from the virtual service container a request for a virtual service container configuration; verifying an identity of the virtual service container; and providing the virtual service container with a virtual service container configuration, wherein the virtual service container configuration indicates at least one Virtual network service to be provided to a managed component by the virtual service container.

Claims

1. An information technology (IT) services management system, the system comprising:

at least one processor and operatively associated memory, wherein the memory comprises instructions that, when executed by the at least one processor, cause the at least one processor to;

execute a controller, wherein the controller is programmed to communicate with at least one virtual service container, wherein the controller is further programmed to instantiate a virtual service container at a service hub, wherein instantiating the virtual service container comprises;

sending to a service hub an instruction to instantiate a virtual service container;

receiving an indication of a secure connection between the controller and the virtual service container;

receiving a message from the virtual service container indicating that the virtual service container is ready to receive a configuration;

verifying an identity of the virtual service container; and

providing the virtual service container with a virtual service container configuration, wherein the virtual service container configuration indicates at least one virtual network function to be provided to a managed component by the virtual service container.

2. The network functions management system of claim 1, wherein the virtual service container configuration indicates a service module for executing the at least one virtual network function, and wherein the controller is further programmed to:

receive from the virtual service container a request to download the service module;

receive from the virtual service container a configuration request for the service module from the virtual service container; and

send to the virtual service container a configuration for the service module, wherein the configuration for the service module describes the at least one virtual network function to be provided to the managed component by the virtual service container.

3. The network functions management system of claim 2, wherein the controller is further programmed to, before sending the configuration for the service module, verify the identity of the virtual service container.

4. The network functions management system of claim 1, wherein the controller is further programmed to:

determine a change to be made to the virtual service container configuration; and

send a new virtual service container configuration to the virtual service container.

5. The network functions management system of claim 4, wherein determining the change to be made to the virtual service container configuration comprises detecting a change in traffic at the virtual service container.

6. The network functions management system of claim 4, wherein determining the change to be made to the virtual service container configuration comprises detecting a change in a geographic location of at least a portion of the managed component.

7. The network functions management system of claim 4, wherein the new virtual service container configuration comprises an indication to the virtual service container to execute an additional service module for executing at least a second virtual network function.

8. The network functions management system of claim 4, wherein the new virtual service container configuration comprises an indication to the virtual service container to terminate the service module.

9. The network functions management system of claim 4, wherein the new virtual service container configuration comprises an indication to the virtual service container to obtain a new configuration for the service module.

10. The network functions management system of claim 1, wherein the controller is further programmed to:

monitor network traffic associated with the at least one managed component;

determine a change in the network traffic; and

analyze the change in network traffic.

11. The network functions management system of claim 10, wherein the change in network traffic is an increase in network traffic, and wherein the controller is further programmed to send a prompt to instantiate a second virtual service container to handle the increase in network traffic.

12. The network functions management system of claim 11, wherein the change in network traffic is an increase in network traffic above a threshold value compared to a historical value of network traffic.

13. The network functions management system of claim 11 wherein the controller is further programmed to, in response to the change in network traffic, send a sales prompt describing additional virtual network functions for the managed component.

14. The network functions management system of claim 10, wherein the change in network traffic indicates a security breach, and wherein the controller is further programmed to request an investigation of the security breach.

15. An network functions management system comprising at least one processor and operatively associated memory, wherein the memory comprises instructions that, when executed by the at least one processor, cause the at least one processor to execute:

a virtual service container, wherein the virtual service container is programmed to execute a first service module for providing a first virtual network function, wherein the virtual service container is programmed to;

receive from a second virtual service container a first portion of network traffic;

apply the first virtual network function to the first portion of network traffic;

after applying the first virtual network function to the first portion of network traffic, send the first portion of network traffic to the second virtual service container;

receive from a third virtual service container a second portion of network traffic;

apply the first virtual network function to the second portion of network traffic; and

after applying the first virtual network function to the second portion of network traffic, send the second portion of network traffic to the third virtual service container.

16. The network functions management system of claim 15, wherein the second virtual service container is executed at a service hub distinct from the at least one processor and wherein the third virtual service container is executed at a second service hub distinct from the service hub and the at least one processor.

17. The network functions management system of claim 16, wherein the at least one processor is further programmed to execute:

a fourth virtual service container; and

a load balancer, wherein the load balancer is programmed to distribute network traffic comprising the first and second portion of network traffic to the virtual service container and additional network traffic to the fourth virtual service container.

18. The network functions management system of claim 17, further comprising a third service hub executing a second load balancer and at least one additional virtual service container, wherein the virtual service container is further programmed to direct at least a portion of the first portion of network traffic and the second portion of network traffic to the at least one additional virtual service container.

19. An network functions management system comprising at least one processor and operatively associated memory, wherein the memory comprises instructions that, when executed by the at least one processor, cause the at least one processor to execute:

a virtual service container wherein the virtual service container is programmed to;

receive a traffic flow from a managed component;

execute a first service module for providing a first virtual network function to the traffic flow;

receive from a controller an instruction to implement a second virtual network function;

while the first service module is executing, download a second service module for providing the second virtual network function to the traffic flow; and

execute the second service module.

20. The network functions management system of claim 19, wherein the virtual service container is also programmed to execute a flow balancer for distributing a first portion of the traffic flow to the first service module and a second portion of the traffic flow to the second service module.