TUNNEL-IN-TUNNEL SOURCE ADDRESS CORRECTION

• US 20160359738A1
• Filed: 06/04/2015
• Published: 12/08/2016
• Est. Priority Date: 06/04/2015
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Ben-Nun, Eitan, Sullenberger, Michael L., Kumar, Manish, Oswal, Anand
• Granted Patent: US 9,729,348 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 45/50 using label swapping, e.g. multi-protocol label switch [MPLS]
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 61/2592 using tunnelling or encapsulation
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

In one embodiment, a device in a network identifies a translated source network address for a tunnel source of a tunnel-in-tunnel packet. The device includes the translated source network address within a header of the packet. The header of the packet identifies an inner tunnel that is encapsulated within an outer tunnel during transmission of the packet within the network. The device sends the packet with the translated source network address within the header of the packet.

Claims

1. A method comprising:

identifying, by a device in a network, a translated source network address for a tunnel source of a tunnel-in-tunnel packet;

including, by the device, the translated source network address within a header of the packet, wherein the header of the packet identifies an inner tunnel that is encapsulated within an outer tunnel during transmission of the packet within the network; and

sending, by the device, the packet with the translated source network address within the header of the packet.

2. The method as in claim 1, wherein identifying the translated source address comprises:

receiving, at the device, an indication of the translated source address from a destination of the inner tunnel.

3. The method as in claim 2, wherein the indication of the translated source address is received via a Next Hop Resolution Protocol (NHRP) message.

4. The method as in claim 2, wherein including the translated source address in the header of the packet that identifies the inner tunnel comprises:

appending, by the device, the header with the translated source address to the packet, prior to appending an outer header to the packet that identifies the outer tunnel.

5. The method as in claim 1, wherein a destination of the outer tunnel is a virtual service platform (VSP).

6. The method as in claim 1, wherein identifying the translated source address comprises:

identifying, by the device, the translated source address in an outer header of the packet, wherein the outer header of the packet identifies the outer tunnel.

7. The method as in claim 6, wherein the device is a destination of the outer tunnel, the method further comprising:

receiving, at the device, the tunnel-in-tunnel packet; and

determining, by the device, a difference between the translated source address in the outer header of the packet and a source address included in the header that identifies the inner tunnel.

8. The method as in claim 7, further comprising:

decapsulating, by the device, the packet from the outer tunnel;

changing, by the device, the source address included in the header that identifies the inner tunnel to be the translated source address, based on the determined difference between the translated source address in the outer header and the source address included in the header that identifies the inner tunnel; and

sending, by the device, the decapsulated packet with the translated source address in the header that identifies the inner tunnel to a destination of the inner tunnel.

9. An apparatus, comprising:

one or more network interfaces to communicate with a computer network;

a processor coupled to the one or more network interfaces and configured to execute a process; and

a memory configured to store the process executable by the processor, the process when executed operable to;

identify a translated source network address for a tunnel source of a tunnel-in-tunnel packet;

include the translated source network address within a header of the packet, wherein the header of the packet identifies an inner tunnel that is encapsulated within an outer tunnel during transmission of the packet within the network; and

send the packet with the translated source network address within the header of the packet.

10. The apparatus as in claim 9, wherein the apparatus identifies the translated source address by receiving an indication of the translated source address from a destination of the inner tunnel.

11. The apparatus as in claim 10, wherein the indication of the translated source address is received via a Next Hop Resolution Protocol (NHRP) message.

12. The apparatus as in claim 10, wherein the apparatus includes the translated source address in the header of the packet that identifies the inner tunnel by:

appending the header with the translated source address to the packet, prior to appending an outer header to the packet that identifies the outer tunnel.

13. The apparatus as in claim 9, wherein a destination of the outer tunnel is a virtual service platform (VSP).

14. The apparatus as in claim 9, wherein the apparatus identifies the translated source address by identifying the translated source address in an outer header of the packet, and wherein the outer header of the packet identifies the outer tunnel.

15. The apparatus as in claim 14, wherein the apparatus is a destination of the outer tunnel, and wherein the process when executed is further operable to:

receive the tunnel-in-tunnel packet; and

determine a difference between the translated source address in the outer header of the packet and a source address included in the header that identifies the inner tunnel.

16. The apparatus as in claim 15, wherein the process when executed is further operable to:

decapsulate the packet from the outer tunnel;

change the source address included in the header that identifies the inner tunnel to be the translated source address, based on the determined difference between the translated source address in the outer header and the source address included in the header that identifies the inner tunnel; and

send the decapsulated packet with the translated source address in the header that identifies the inner tunnel to a destination of the inner tunnel.

17. A tangible, non-transitory, computer-readable media having software encoded thereon, the software when executed by a processor on a device in a computer network operable to:

identify a translated source network address for a tunnel source of a tunnel-in-tunnel packet;

include the translated source network address within a header of the packet, wherein the header of the packet identifies an inner tunnel that is encapsulated within an outer tunnel during transmission of the packet within the network; and

send the packet with the translated source network address within the header of the packet.

18. The computer-readable media as in claim 17, wherein the device identifies the translated source address by receiving an indication of the translated source address from a destination of the inner tunnel.

19. The computer-readable media as in claim 17, wherein the device identifies the translated source address by identifying the translated source address in an outer header of the packet, and wherein the outer header of the packet identifies the outer tunnel.

20. The computer-readable media as in claim 19, wherein the software when executed by the processor of the device is further operable to:

receive the tunnel-in-tunnel packet;

determine a difference between the translated source address in the outer header of the packet and a source address included in the header that identifies the inner tunnel;

decapsulate the packet from the outer tunnel;

change the source address included in the header that identifies the inner tunnel to be the translated source address, based on the determined difference between the translated source address in the outer header and the source address included in the header that identifies the inner tunnel; and

send the decapsulated packet with the translated source address in the header that identifies the inner tunnel to a destination of the inner tunnel.