Centralized management of quality of service (QoS) information for data flows

• US 7,421,487 B1
• Filed: 06/12/2003
• Issued: 09/02/2008
• Est. Priority Date: 06/12/2003
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Radulescu-Banu, Cristina M, Peterson, Eric L, Sullivan, Brian M
• Primary Examiner(s): Cardone; Jason
• Assistant Examiner(s): TAYLOR, NICHOLAS R
• Application Number:
  US10/459,824
• Time in Patent Office: 1,909 Days
• Field of Search: 709/223
• US Class Current: 709/223
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 41/0883 Semiautomatic configuration, e.g. proposals from system
• CPC Class Codes: H04L 41/0889 Techniques to speed-up the configuration process
• CPC Class Codes: H04L 41/5022 by giving priorities, e.g. assigning classes of service
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols

Abstract

Techniques are described for centralized management of quality of service (QoS) characteristics of network data flows. A service management system maintains a database that associates access information, such as a username and password, with QoS information. A router of other network device associates a data flow with access information, and queries the service management system with the access information to obtain the QoS information. The router forwards data of the data flow in accordance with the QoS information obtained from the service management system. As the access information may be a username and password, an existing system, such as a Remote Authentication Dial-In User Service (RADIUS) system, may easily be adapted for use as the service management system. As a result, QoS information may easily be centrally managed for numerous routers or other network devices.

Claims

1. A method comprising:

storing, within a first router, access data that associates routes through a network with access information for a set of service profiles, wherein each of the service profiles is associated with a different quality of service (QoS) level without specifying an individual network user;

receiving, with the first router, a routing protocol packet from a second router, wherein the routing protocol packet includes information that specifies at least one route through the network;

associating the route specified by the routing information with a service profile identifier;

selecting, from the stored access data, the access information for one of the set of service profiles based on the service profile identifier;

querying a service management system with the selected access information to obtain interface parameters for supporting the QoS level associated with the one of the set of service profiles, wherein the service management system is external to the first router;

configuring at least one interface within the first router based on the interface parameters obtained from the service management system; and

forwarding data of a data flow associated with the route specified by the routing information with the at least one interface of the first router that was configured using the interface parameters obtained from the service management system.

2. The method of claim 1, wherein querying the service management system comprises logging into the service management system with the access information.

3. The method of claim 1, wherein the service profile identifier includes one of a service profile name and a service profile identification number.

4. The method of claim 1, wherein configuring the at least one interface comprises:

dynamically instantiating the interface within the first router in accordance with the interface parameters obtained from the service management system.

5. The method of claim 1, wherein the access information includes at least one of a username, a password, and a domain.

6. The method of claim 1, wherein selecting the access information includes:

comparing the routing information within the routing protocol packet with selection criteria;

associating the route specified by the routing information with a service profile identifier based on a result of the comparison; and

selecting the access information associated with the service profile identifier.

7. The method of claim 1, wherein the routing protocol packet specifies at least one route of a virtual private network (VPN).

8. The method of claim 1, wherein the forwarding data of the data flow comprises forwarding packets.

9. The method of claim 1, wherein querying the service management system comprises querying a Remote Authentication Dial-In User Service (RADIUS) server.

26. The method of claim 1, wherein the service profile identifier comprises at least a portion of the access information.

27. The method of claim 6, wherein comparing the routing information within the routing protocol packet with selection criteria comprises applying route map logic to compare a Border Gateway Protocol (BGP) community of a BGP packet with the selection criteria to associate the route specified by the routing information with the service profile identifier.

28. The method of claim 6, wherein comparing the routing information within the routing protocol packet with selection criteria comprises applying route map logic to compare a description of a Multi protocol Label Switching (MPLS) packet with the selection criteria to associate an MPLS path specified by the routing information with the service profile identifier.

29. The method of claim 1, further comprising:

receiving a second routing protocol packet that specifies a second route through the network, wherein the second route corresponds with a second data flow;

selecting, from the stored access data, second access information associated with the second route specified by the routing information;

querying a service management system with the second access information to obtain second interface parameters for supporting a second QoS level;

configuring a second interface within the first router based on the second interface parameters obtained from the service management system; and

forwarding data of the second data flow associated with the second route specified by the routing information with the second interface of the first router configured using the second interface parameters, wherein the second data flow and the first data flow are associated with a common virtual private network (VPN) site.

10. A network device comprising:

a control unit that stores data that associates routes through a network with access information for a set of service profiles, each of the service profiles being associated with a different quality of service (QoS) level without specifying an individual network user, receives a routing protocol packet from a second network device that includes routing information that specifies at least one route through the network, associates the route with a service profile identifier, selects the access information for the one of the set of service profiles based on the service profile identifier associated with the route, and queries a service management system with the selected access information to obtain interface parameters for supporting the QoS level associated with the one of the set of service profiles, wherein the service management system is external to the network device; and

an interface through which the control unit forwards data of a data flow associated with the route specified in the routing information, wherein the interface is configured based on the interface parameters obtained from the service management system.

11. The network device of claim 10, wherein the control unit further dynamically instantiates the interface in accordance with the interface parameters obtained from the service management system.

12. The network device of claim 10, wherein the control unit logs into the service management system with the access information.

13. The network device of claim 10, wherein the service profile identifier includes one of a service profile name and a service profile identification number.

14. The network device of claim 10, wherein the access information includes at least one of a username and a password.

15. The network device of claim 10, wherein the control unit compares the routing information within the routing protocol packet with selection criteria, associates the route specified by the routing information with a service profile identifier based on a result of the comparison and selects the access information associated with the service profile identifier.

16. The network device of claim 10, further comprising a user interface process to receive input from a user, wherein the control unit configures the access data based on the input.

17. The network device of claim 16, wherein the user interface process provides a command line interface through which the user configures the access data.

18. The network device of claim 10, wherein the control unit includes:

a routing engine that queries management system to obtain the interface parameters for supporting a QoS level; and

a forwarding engine that controls the forwarding of the data through the interface in accordance with the interface parameters.

19. The network device of claim 10, wherein the routing information specifies a route of a virtual private network (VPN).

20. The network device of claim 10, wherein the network device comprises a router, and the control unit forwards the data as packets.

21. The network device of claim 10, wherein the service management system comprises a Remote Authentication Dial-In User Service (RADIUS) server.

30. The device of claim 15, wherein the control unit applies route map logic to compare one of a Border Gateway Protocol (BGP) community of a BGP packet with the selection criteria to associate the route specified by the routing information with the service profile identifier and a description of a Multi protocol Label Switching (MPLS) packet with the selection criteria to associate an MPLS path specified by the routing information with the service profile identifier.

22. A computer-readable medium comprising instructions to cause a processor of a network device to:

store, within a first router, access data that associates routes through a network with access information for a set of service profiles, wherein each of the service profiles is associated with a different quality of service (QoS) level without specifying an individual network user;

receive, with the first router, a routing protocol packet from a second router, wherein the routing protocol packet includes routing information that specifies at least one route through the network;

associate the route specified by the routing information with a service profile identifier;

select the access information for one of the set of service profiles based on the service profile identifier;

query the service management system with the selected access information to obtain interface parameters for supporting the QoS level associated with the one of the set of service profiles, wherein the service management system is external to the first router;

configure at least one interface within the first router based on the interface parameters obtained from the service management system; and

forward data of a data flow associated with the route specified by the routing information with the at least one interface of the first router configured using the obtained interface parameters.

23. The computer-readable medium of claim 22, further comprising instructions to cause the processor to log into the service management system with the access information.

24. The computer-readable medium of claim 22, wherein instructions to cause the processor to configure the interface comprise instructions to cause the processor to dynamically instantiate the interface of the based on the interface parameters obtained from the service management system.

25. The computer-readable medium of claim 22, further comprising instructions to cause the processor to:

compare the routing information within the routing protocol packet with selection criteria;

associate the route specified by the routing information with a service profile identifier based on a result of the comparison; and

select the access information associated with the service profile identifier.

31. The computer-readable medium of claim 25, wherein instructions to compare the routing information within the routing protocol packet with selection criteria comprises instructions to apply route map logic to compare one of a Border Gateway Protocol (BGP) community of a BGP packet with the selection criteria to associate the route specified by the routing information with the service profile identifier and a description of a Multi protocol Label Switching (MPLS) packet with the selection criteria to associate an MPLS path specified by the routing information with the service profile identifier.

32. A method comprising:

storing, within a first router, access data that associates service profile identifiers with access information;

receiving, with the first router, a first routing protocol packet and a second routing protocol packet, wherein the first routing protocol packet includes routing information that specifies a first route associated with a first subset of users within a virtual private network (VPN) site and the second routing protocol packet includes routing information that specifies a second route associated with a second subset of users within the VPN site;

associating the first route specified in the first routing protocol packet with a first service profile identifier that corresponds with a first quality of service (QoS) level;

associating the second route specified in the second routing protocol packet with a second service profile identifier that corresponds with a second QoS level;

selecting corresponding access information for each the first route and second route by retrieving the access information associated with the first and second service profile identifier from the stored access data;

querying a service management system with the selected access information to obtain interface parameters for supporting the first and second QoS level, wherein the service management system is external to the first router;

dynamically configuring a first logical interface within the first router based on the interface parameters obtained from the service management system for the first QoS level, wherein the first logical interface is associated with the first subset of users within the VPN site;

dynamically configuring a second logical interface within the first router based on the interface parameters obtained from the service management system for the second QoS level, wherein the second logical interface is associated with the second subset of users within the VPN site;

forwarding data of a first data flow associated with the first subset of users with the first logical interface; and

forwarding data of a second data flow associated with the second subset of users with the second logical interface to provide different QoS levels for the first and second data flows.