Stateful failover of service managers

• US 6,704,278 B1
• Filed: 07/02/1999
• Issued: 03/09/2004
• Est. Priority Date: 07/02/1999
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Albert, Mark, Tiwari, Pranav Kumar, Menditto, Louis F., Wong, Bruce F., Howes, Richard A., LeBlanc, William M., Jordan, James A., Kersey, Edward A., OʼRourke, Chris
• Primary Examiner(s): Pham, Chi
• Assistant Examiner(s): BOAKYE, ALEXANDER O
• Application Number:
  US09/347,123
• Time in Patent Office: 1,712 Days
• Field of Search: 370/216, 370/203, 370/230, 370/231, 370/236, 370/235, 370/349, 370/389, 370/390, 370/395.52, 370/428, 370/429, 370/400, 370/312, 370/410, 370/401, 709/224, 709/203, 714/36, 714/15, 714/23
• US Class Current: 370/216
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/566 Routing instructions carried by the data packet, e.g. active networks
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/76 Routing in software-defined topologies, e.g. routing between virtual machines
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

A system and method are disclosed for providing a fault tolerant network service. A packet is received that corresponds to a flow from a forwarding agent at a primary service manager and instructions are determined at the primary service manager for handling packets corresponding to the flow. The instructions are sent to the forwarding agent and the instructions are stored at the primary service manager. A replication packet is sent to a backup service manager. The replication packet includes the instructions for handling packets corresponding to the flow.

Claims

1. A fault tolerant method of providing a network service, comprising:

receiving a packet corresponding to a flow from a forwarding agent at a primary service manager;

determining at the primary service manager instructions for handling packets corresponding to the flow;

sending the instructions to the forwarding agent;

storing the instructions for handling packets corresponding to the flow at the primary service manager;

sending a replication packet to a backup service manager, the replication packet including the instructions for handling packets corresponding to the flow; and

deleting the instructions for handling packets corresponding to the flow from the primary service manager upon the expiration of a primary service manager instruction maintenance time interval.

2. A fault tolerant method of providing a network service as recited in claim 1 further including storing the instructions for handling packets corresponding to the flow at the backup service manager.

3. A fault tolerant method of providing a network service as recited in claim 1 further including deleting the instructions for handling packets corresponding to the flow from the backup service manager upon the expiration of a backup service manager instruction maintenance time interval.

4. A fault tolerant method of providing a network service as recited in claim 3 wherein the backup service manager instruction maintenance time interval and the primary service manager instruction maintenance time interval are substantially the same.

5. A fault tolerant method of providing a network service as recited in claim 1 further including:

setting a primary service manager expiration time for the instructions for handling packets corresponding to the flow to expire on the primary service manager, the primary service manager expiration time being a primary service manager instruction deletion time interval after the time that the instructions for handling packets corresponding to the flow were stored on the primary service manager; and

setting a backup service manager expiration time for the instructions for handling packets corresponding to the flow to expire on the backup service manager, the backup service manager expiration time being a backup service manager instruction deletion time interval after the time that the instructions for handling packets corresponding to the flow were stored on the backup service manager.

6. A fault tolerant method of providing a network service as recited in claim 5 further including:

receiving a subsequent packet corresponding to the flow from the forwarding agent;

resetting the primary service manager instruction expiration time to the primary service manager instruction deletion time interval after the time that the subsequent packet was received; and

sending a second replication packet to the backup service manager.

7. A fault tolerant method of providing a network service as recited in claim 6 further including receiving the second replication packet at the backup service manager and resetting the backup service manager instruction expiration time to the backup service manager instruction deletion time interval after the time that the second replication packet was received.

8. A fault tolerant method of providing a network service as recited in claim 1 including:

determining at the backup service manager that the primary service manager has failed;

receiving at the backup service manager a subsequent packet from the forwarding agent corresponding to the flow;

matching the subsequent packet to the instructions stored on the backup service manager for handling packets corresponding to the flow; and

sending the instructions stored on the backup service manager for handling packets corresponding to the flow to the forwarding agent.

9. A fault tolerant method of providing a network service as recited in claim 8 further including resetting a backup service manager instruction expiration time to a backup service manager instruction deletion time interval after the time that the subsequent packet was received.

10. A fault tolerant method of providing a network service as recited in claim 8 further including sending canceling instructions from the backup service manager to the forwarding agent upon determining that the primary service manager has failed, the canceling instructions causing instructions from the primary service manager that are stored on the forwarding agent to expire.

11. A primary service manager for providing a network service in a fault tolerant manner, comprising:

a processor configured to determine instructions for handling packets corresponding to a flow;

a forwarding agent interface configured to send the instructions for handling packets to a forwarding agent;

a memory configured to store the instructions for handling packets corresponding to the flow; and

a backup service manager interface configured to send a replication packet to a backup service manager wherein the replication packet includes instructions for handling packets corresponding to the flow, and wherein the primary service manager is further configured to delete the instructions for handling packets corresponding to the flow upon the expiration of a primary service manager instruction maintenance time interval.

12. A backup service manager for providing a network service in a fault tolerant manner, comprising:

a primary service manager interface configured to receive the instructions for handling packets corresponding to a flow; and

a memory configured to store the instructions for handling packets corresponding to the flow, wherein the primary service manager is further configured to delete the instructions for handling packets corresponding to the flow upon the expiration of a primary service manager instruction maintenance time interval.

13. A fault tolerant distributed system for providing a network service including:

a forwarding agent configured to send a packet corresponding to a flow to a primary service manager;

a primary service manager configured to determine instructions for handling packets corresponding to the flow, to send the instructions for handling packets to the forwarding agent, to store the instructions for handling packets corresponding to the flow and to send a replication packet to a backup service manager, the replication packet including the instructions for handling packets corresponding to the flow; and

a backup service manager configured to receive the instructions for handling packets corresponding to the flow and to store the instructions for handling packets corresponding to the flow, wherein the primary service manager is further configured to delete the instructions for handling packets corresponding to the flow upon the expiration of a primary service manager instruction maintenance time interval.

14. A fault tolerant distributed system as recited in claim 13 wherein the backup service manager is further configured to delete the instructions for handling packets corresponding to the flow upon the expiration of a backup service manager instruction maintenance time interval.

15. A fault tolerant distributed system as recited in claim 14 wherein the backup service manager instruction maintenance time interval and the primary service manager instruction maintenance time interval are substantially the same.

16. A fault tolerant distributed system as recited in claim 13 wherein:

the primary service manager is further configured to set a primary service manager expiration time for the instructions for handling packets corresponding to the flow to expire on the primary service manager, the primary service manager expiration time being a primary service manager instruction deletion time interval after the time that the instructions for handling packets corresponding to the flow were stored on the primary service manager; and

the backup service manager is further configured to set a backup service manager expiration time for the instructions for handling packets corresponding to the flow to expire on the backup service manager, the backup service manager expiration time being a backup service manager instruction deletion time interval after the time that the instructions for handling packets corresponding to the flow were stored on the backup service manager.

17. A fault tolerant distributed system as recited in claim 16 wherein the primary service manager is further configured to receive a subsequent packet corresponding to the flow from the forwarding agent, reset the primary service manager instruction expiration time to the primary service manager instruction deletion time interval after the time that the subsequent packet was received and send a second replication packet to the backup service manager.

18. A fault tolerant distributed system as recited in claim 17 wherein the backup service manager is further configured to receive the second replication packet and reset the backup service manager instruction expiration time to the backup service manager instruction deletion time interval after the time that the second replication packet was received.

19. A fault tolerant distributed system as recited in claim 13 wherein the backup service manager is further configured to determine that the primary service manager has failed, to receive a subsequent packet from the forwarding agent corresponding to the flow, to match the subsequent packet to the instructions stored on the backup service manager for handling packets corresponding to the flow;

and to send the instructions stored on the backup service manager for handling packets corresponding to the flow to the forwarding agent.

20. A fault tolerant distributed system as recited in claim 19 wherein the backup service manager is further configured upon determining that the primary service manager has failed to send instructions to the forwarding agent that cause instructions from the primary service manager that are stored on the forwarding agent to expire.

21. A fault tolerant distributed system as recited in claim 19 wherein the backup service manager is further configured to reset the backup service manager instruction expiration time to a backup service manager instruction deletion time interval after the time that the subsequent packet was received.

22. A computer program product for providing a network service in a fault tolerant manner embodied in a computer readable medium comprising computer instructions for:

receiving a packet corresponding to a flow from a forwarding agent at a primary service manager;

determining at the primary service manager instructions for handling packets corresponding to the flow;

sending the instructions to the forwarding agent;

storing the instructions for handling packets corresponding to the flow at the primary service manager; and

sending a replication packet to a backup service manager, the replication packet including the instructions for handling packets corresponding to the flow, wherein the primary service manager is further configured to delete the instructions for handling packets corresponding to the flow upon the expiration of a primary service manager instruction maintenance time interval.