TRANSMITTING NETWORK OVERLAY INFORMATION IN A SERVICE FUNCTION CHAIN

• US 20190320047A1
• Filed: 06/25/2019
• Published: 10/17/2019
• Est. Priority Date: 06/23/2016
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Jeuk, Sebastian, Salgueiro, Gonzalo
• Granted Patent: US 11,082,542 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 45/38 Flow based routing
• CPC Class Codes: H04L 45/64 using an overlay routing layer
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A packet is received at a device configured to provide a service function within a network service chain. A network overlay and/or segmentation identifier is extracted from a header of the packet. The service function is applied to the packet according to policies specific to a network overlay and/or segmentation identified in the network overlay and/or segmentation identifier.

Claims

1. A method comprising:

receiving, from a first network implementing a network overlay or network segmentation, a packet at an entry node of a chain of network nodes providing network services;

extracting data identifying the network overlay or network segmentation from network overlay or network segmentation encapsulation of the packet;

stripping the network overlay or network segmentation encapsulation from the packet;

generating a header configured to route the packet through the chain of network nodes, the header comprising the data identifying the network overlay or network segmentation for re-creation of the network overlay or network segmentation encapsulation upon exiting from the chain of network nodes;

applying the header to the packet; and

transmitting the packet through the chain of network nodes towards an exit node of the chain of network nodes.

2. The method of claim 1, wherein the chain of network nodes providing network services comprises a network service chain.

3. The method of claim 1, wherein the header configured to route the packet through the chain of network nodes comprises a network service header of a network service chain.

4. The method claim 3, wherein generating the header configured to route the packet through the chain of network nodes comprises generating a metadata field of the network service header that includes the data identifying the network overlay or network segmentation.

5. The method of claim 1, wherein the data identifying the network overlay or network segmentation comprises a Universal Cloud Classifier.

6. The method of claim 1, wherein the network overlay or network segmentation comprises one or more of a Virtual Private Network (VPN) overlay, a Virtual Local Area Network (VLAN) overlay, a Virtual Extensible Local Area Network (VxLAN) overlay, a Generic Routing Encapsulation (GRE) overlay, a Network Virtualization using Generic Routing Encapsulation (NVGRE) overlay, a Distributed Overlay Virtual Ethernet (DOVE) overlay, a Multiprotocol Label Switching (MPLS) overlay, or a Generalized MPLS (GMPLS) overlay.

7. The method of claim 1, wherein receiving the packet at the entry node comprises receiving the packet with an encrypted payload.

8. A method comprising:

receiving, at an exit node of a chain of network nodes providing network services, a packet comprising a header configured to route the packet through the chain of network nodes, wherein the packet was received at the chain of network nodes from a first network implementing a network overlay or network segmentation;

extracting data identifying the network overlay or network segmentation from the header;

encapsulating the packet with encapsulation for the network overlay or network segmentation based upon the data identifying the network overlay or network segmentation; and

transmitting the packet into a second network implementing the network overlay or network segmentation.

9. The method of claim 8, wherein the chain of network nodes providing network services comprises a network service chain.

10. The method of claim 8, wherein the header configured to route the packet through the chain of network nodes comprises a network service header of a network service chain.

11. The method claim 10, wherein extracting the data identifying the network overlay or network segmentation from the header comprises extracting the data identifying the network overlay or network segmentation from a metadata field of the network service header.

12. The method of claim 8, wherein the data identifying the network overlay or network segmentation comprises a Universal Cloud Classifier.

13. The method of claim 8, wherein the network overlay or network segmentation comprises one or more of a Virtual Private Network (VPN) overlay, a Virtual Local Area Network (VLAN) overlay, a Virtual Extensible Local Area Network (VxLAN) overlay, a Generic Routing Encapsulation (GRE) overlay, a Network Virtualization using Generic Routing Encapsulation (NVGRE) overlay, a Distributed Overlay Virtual Ethernet (DOVE) overlay, a Multiprotocol Label Switching (MPLS) overlay, or a Generalized MPLS (GMPLS) overlay.

14. The method of claim 8, wherein receiving the packet at the exit node comprises receiving the packet with an encrypted payload.

15. An apparatus comprising:

one or more network interfaces configured to receive traffic from a first network implementing a network overlay or network segmentation, the traffic entering a chain of network nodes providing network services, and transmit the traffic through the chain of network nodes providing network services; and

one or more processors, wherein the one or more processors are configured to;

receive a packet via the one or more network interfaces;

extract data identifying the network overlay or network segmentation from network overlay or network segmentation encapsulation of the packet;

strip the network overlay or network segmentation encapsulation from the packet;

generate a header configured to route the packet through the chain of network nodes, the header comprising the data identifying the network overlay or network segmentation for re-creation of the network overlay or network segmentation encapsulation upon exit from the chain of network nodes;

apply the header to the packet; and

transmit, via the one or more network interfaces, the packet through the chain of network nodes towards an exit node of the chain of network nodes.

16. The apparatus of claim 15, wherein the chain of network nodes providing network services comprises a network service chain.

17. The apparatus of claim 15, wherein the header configured to route the packet through the chain of network nodes comprises a network service header of a network service chain.

18. The apparatus of claim 17, wherein the one or more processors are configured to generate the header configured to route the packet through the chain of network nodes by generating a metadata field of the network service header that includes the data identifying the network overlay or network segmentation.

19. The apparatus of claim 15, wherein the data identifying the network overlay or network segmentation comprises a Universal Cloud Classifier.

20. The apparatus of claim 15, wherein the network overlay or network segmentation comprises one or more of a Virtual Private Network (VPN) overlay, a Virtual Local Area Network (VLAN) overlay, a Virtual Extensible Local Area Network (VxLAN) overlay, a Generic Routing Encapsulation (GRE) overlay, a Network Virtualization using Generic Routing Encapsulation (NVGRE) overlay, a Distributed Overlay Virtual Ethernet (DOVE) overlay, a Multiprotocol Label Switching (MPLS) overlay, or a Generalized MPLS (GMPLS) overlay.