METHOD AND SYSTEM OF APPLICATION-AWARE ROUTING WITH CROWDSOURCING

• US 20170126564A1
• Filed: 01/17/2017
• Published: 05/04/2017
• Est. Priority Date: 04/13/2015
• Status: Active Grant

• Current Assignee: Nicira Incorporated (Broadcom, Inc.)
• Original Assignee: Ajit Ramachandra Mayya, Parag Pritam Thakore, Stephen Craig Connors, Sunil Mukundan, Thomas Harold Speeter
• Inventors: MAYYA, AJIT RAMACHANDRA, THAKORE, PARAG PRITAM, CONNORS, STEPHEN CRAIG, MUKUNDAN, SUNIL, SPEETER, THOMAS HAROLD
• Granted Patent: US 10,498,652 B2
• Time in Patent Office: Days
• CPC Class Codes: G06N 20/00 Machine learning
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 45/42 Centralised routing
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 49/35 Switches specially adapted for specific applications
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

In one aspect, a computerized method of an application routing service includes the step of using a deep-packet inspection (DPI) technique on a first network flow to identify an application. The method includes the step of storing an Internet-protocol (IP) address and a port number used by the application and an identity of the application in a database. The method includes the step of detecting a second network flow. The method includes the step of identifying the IP address and the port number of the application in the second network flow. The method includes the step of looking up the IP address and the port number in the database. The method includes the step of identifying the application based on the IP address and the port number.

Claims

1. A computerized method of an application routing service comprising:

using a deep-packet inspection (DPI) technique on a first network flow to identify an application;

storing an Internet-protocol (IP) address and a port number used by the application and an identity of the application in a database;

detecting a second network flow;

identifying the IP address and the port number of the application in the second network flow;

looking up the IP address and the port number in the database; and

based on the IP address and the port number, identifying the application.

2. The computerized method of claim 1 further comprising:

providing a networking routing decision based on the identity of the application.

3. The computerized method of claim 1 further comprising:

verifying the application in the second network flow using DPI.

4. The computerized method of claim 3, wherein the application is not verified in the second network flow.

5. The computerized method of claim 4 further comprising:

deleting the Internet-protocol (IP) address and the port number used by the application and the identity of the application the database.

6. The computerized method of claim 1 further comprising:

wherein the database is managed by an Orchestrator,

wherein the Orchestrator manages the application routing service, and

sharing the database with the Internet-protocol (IP) address and the port number used by the application and the identity of the application with another Orchestrator entity for use in another application routing service managed by the other Orchestrator entity.

7. The computerized method of claim 1, wherein the Internet-protocol (IP) address comprises a Destination Internet Protocol Address (DIP) and herein the port number comprises a Destination Port Number (DPORT).

8. A computerized method useful for implementing an application routing service comprising:

extracting from a data packet of a net network flow a layer three (3) information and a layer four (4) information;

querying a local application outing cache to obtain an application name based on the layer three (3) information and the layer four (4) information; and

providing a routing decision based on the application name.

9. The computerized method of claim 8, wherein the layer three (3) information comprise a Destination Internet Protocol Address (DIP), and wherein the layer four (4) information comprises a Destination Port Number (DPORT).

10. The computerized method of claim 9, wherein the local application routing cache is queried to obtain the application name based on the DIP and the DPORT.

11. The computerized method of claim 8, further comprising:

passing the network flow to a DPI Engine, wherein a classification from the DPI Engine is used to populate the local application routing cache.

12. The computerized method of claim 8 further comprising:

passing the local application routing cache to a set of other crowd-sourced participants.

13. The computerized method of claim 12 further comprising:

receiving one or more other application routing caches from the set of other crowd-sourced participants.

14. The computerized method of claim 13 further comprising:

at a specified period requesting a latest version of application routing data from an Orchestrator; and

updating the local application routing cache with the latest version of application routing data from an Orchestrator.

15. The computerized method of claim 14, wherein the Orchestrator comprises a software networking component that provides a multi-tenant and a role-based centralized configuration management and visibility.

16. A computerized method useful for implementing an application routing service comprising:

with an edge device;

using deep-packet inspection (DPI) to identify a network flow, wherein the network flow is identified with an internet protocol (IP) identity and a port number of the network flow;

store the IP identity and the port number of the network flow in a local application routing database; and

reporting the IP identity and the port number to a specified Orchestrator;

with another edge device;

requesting the IP identity and the port number from the specified Orchestrator;

receiving the IP identity and the port number from the specified Orchestrator;

identifying an application in another network flow using the IP identity and the port number.