Stateful failover of service managers

• US 7,443,847 B1
• Filed: 12/19/2003
• Issued: 10/28/2008
• Est. Priority Date: 07/02/1999
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Albert, Mark, Tiwari, Pranav Kumar, O'Rourke, Chris, Menditto, Louis F., Wong, Bruce F., Howes, Richard A., LeBlanc, William M., Jordan, James A., Kersey, Edward A.
• Primary Examiner(s): Pham; Chi H.
• Assistant Examiner(s): Boakye; Alexander
• Application Number:
  US10/741,966
• Time in Patent Office: 1,775 Days
• Field of Search: 370/389, 370/216, 370/203, 370/231, 370/236, 370/235, 370/349, 370/390, 370/395.2, 370/428, 370/429, 370/400, 370/312, 370/410, 709/224, 709/203, 714/36, 714/15, 714/23
• US Class Current: 370/389
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/566 Routing instructions carried by the data packet, e.g. active networks
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 45/76 Routing in software-defined topologies, e.g. routing between virtual machines
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

A system and method are disclosed for providing a fault tolerant network service. A packet is received that corresponds to a flow from a forwarding agent at a primary service manager and instructions are determined at the primary service manager for handling packets corresponding to the flow. The instructions are sent to the forwarding agent and the instructions are stored at the primary service manager. A replication packet is sent to a backup service manager. The replication packet includes the instructions for handling packets corresponding to the flow.

Claims

1. A method for performing one or more network services, comprising:

monitoring a plurality of packets associated with a communications flow at a primary service manager;

providing a plurality of instructions associated with the packets in order to provide a network service, one or more of the instructions including an expiration time interval that designates a time interval to be used in processing one or more packets included in the communications flow, at least one instruction being removed upon expiration of the expiration time interval of the at least one instruction;

replicating one or more of the instructions;

communicating one or more of the instructions to a backup service manager; and

invoking the backup service manager when the primary service manager experiences a failure, wherein the backup service manager is operable to perform one or more operations that were being performed by the primary service manager.

2. The method of claim 1, further comprising:

receiving one or more of the instructions; and

processing selected packets within the communications flow based on one or more of the instructions.

3. The method of claim 1, wherein the primary and backup service mangers are provided on a selected one of a group of elements consisting of:

a router;

a switch; and

a load balancer.

4. The method of claim 1, further comprising:

detecting that the primary service manager has failed; and

sending a message to a forwarding agent that indicates that the primary service manager has failed.

5. The method of claim 1, wherein the service mangers are included in a network device, the network device being operable to execute a selected one or more of a group of operations consisting of:

a) statistics gathering;

b) switching a plurality of incoming packets;

c) routing the plurality of incoming packets;

d) filtering the plurality of incoming packets;

e) intrusion detection for a plurality of incoming communications flows; and

f) proxying associated with the plurality of incoming communications flows.

6. The method of claim 1, wherein one or more of the instructions include a wildcard affinity, the wildcard affinity identifying a selected set of communications flows that are of interest to the primary service manager.

7. The method of claim 6, wherein the selected set of communications flows is communicated to the primary service manager from a forwarding agent.

8. The method of claim 6, wherein the wildcard affinity identifies a selected one of a group of parameters consisting of:

a source IP address;

a destination IP address;

a source port; and

a destination port.

9. The method of claim 1, wherein one or more of the instructions include a replication packet that indicates how packets corresponding to the communications flow are to be processed.

10. The method of claim 9, wherein one or more of the instructions include a fixed affinity that identifies the flow, and wherein the fixed affinity is provided in the replication packet.

11. The method of claim 10, wherein the fixed affinity designates a selected one or a group of operations to be performed, the group consisting of:

a tag switching operation;

a load balancing operation;

a routing operation;

a switching operation;

a packet forwarding operation; and

a packet deletion operation.

12. The method of claim 10, wherein the replication packet is sent to the backup service manager each time the fixed affinity is communicated to a forwarding agent.

13. The method of claim 10, wherein one or more fixed affinities stored in the backup service manager and in the primary service manger expire at a time interval that is substantially concurrent.

14. The method of claim 10, wherein one or more fixed affinity expiration time intervals are renewed on the backup service manger upon receipt of the replication packet.

15. The method of claim 10, further comprising:

receiving the fixed affinity; and

determining if the fixed affinity exists.

16. The method of claim 15, further comprising:

replacing an expiration time interval associated with the fixed affinity in cases where the fixed affinity exists in the primary service manager; and

storing the fixed affinity in the memory in cases where it does not exist.

17. The method of claim 10, further comprising:

deleting the instructions for the communications flow from the backup service manager upon expiration of a time interval included in the replication packet.

18. A system for performing one or more network services, comprising:

means for monitoring a plurality of packets associated with a communications flow;

means for providing a plurality of instructions associated with the packets in order to provide a network service, one or more of the instructions including an expiration time interval that designates a time interval to be used in processing one or more packets included in the communications flow, at least one instruction being removed upon expiration of the expiration time interval of the at least one instruction;

means for replicating one or more of the instructions;

means for communicating one or more of the instructions; and

means for invoking a backup service manager when a failure occurs, wherein the backup service manager is operable to perform one or more operations that were being performed by a primary service manager.

19. The system of claim 18, further comprising:

means for receiving one or more of the instructions; and

means for processing selected packets within the communications flow based on one or more of the instructions.

20. The system of claim 18, further comprising:

means for detecting that the primary service manager has failed; and

means for sending a message to a forwarding agent that indicates that the primary service manager has failed.

21. The system of claim 18, wherein one or more of the instructions include a replication packet that indicates how packets corresponding to the communications flow are to be processed.

22. The system of claim 21, wherein one or more of the instructions include a fixed affinity that identifies the flow, and wherein the fixed affinity is provided in the replication packet.

23. The system of claim 22, wherein the replication packet is sent to the backup service manager each time the fixed affinity is communicated to a forwarding agent.

24. The system of claim 22, further comprising:

means for receiving the fixed affinity; and

means for determining if the fixed affinity exists.

25. The system of claim 24, further comprising:

means for replacing an expiration time interval associated with the fixed affinity in cases where the fixed affinity exists in the primary service manager; and

means for storing the fixed affinity in the memory in cases where it does not exist.

26. Software for performing one or more network services, the software being embodied in a computer readable medium and comprising computer code such that when executed is operable to:

monitor a plurality of packets associated with a communications flow;

provide a plurality of instructions associated with the packets in order to provide a network service, one or more of the instructions including an expiration time interval that designates a time interval to be used in processing one or more packets included in the communications flow, at least one instruction being removed upon expiration of the expiration time interval of the at least one instruction;

replicate one or more of the instructions;

communicate one or more of the instructions; and

invoke a backup service manager when a failure occurs, wherein the backup service manager is operable to perform one or more operations that were being performed by a primary service manager.

27. The medium of claim 26, wherein the code is further operable to:

receive one or more of the instructions; and

process selected packets within the communications flow based on one or more of the instructions.

28. The medium of claim 26, wherein the code is further operable to:

detect that the primary service manager has failed; and

send a message to a forwarding agent that indicates that the primary service manager has failed.

29. The medium of claim 26, wherein one or more of the instructions include a replication packet that indicates how packets corresponding to the communications flow are to be processed.

30. The medium of claim 29, wherein one or more of the instructions include a fixed affinity that identifies the flow, and wherein the fixed affinity is provided in the replication packet.

31. The medium of claim 30, wherein the replication packet is sent to the backup service manager each time the fixed affinity is communicated to a forwarding agent.

32. The medium of claim 30, wherein the code is further operable to:

receive the fixed affinity; and

determine if the fixed affinity exists.

33. The medium of claim 32, wherein the code is further operable to:

replace an expiration time interval associated with the fixed affinity in cases where the fixed affinity exists in the primary service manager; and

store the fixed affinity in the memory in cases where it does not exist.

34. An apparatus, for performing one or more network services, comprising:

a primary service manager operable to monitor a plurality of packets associated with a communications flow, the primary service manager providing a plurality of instructions associated with processing of the packets in order to provide a network service, the primary service manager being further operable to replicate one or more of the instructions, one or more of the instructions including an expiration time interval that designates a time interval to be used in processing one or more packets included in the communications flow, at least one instruction being removed upon expiration of the expiration time interval of the at least one instruction; and

a backup service manager configured to receive one or more of the instructions from the primary service manager, wherein the backup service manager may be invoked when the primary service manager experiences a failure, and wherein the backup service manager is configured to perform one or more operations that were being performed by the primary service manager.

35. The apparatus of claim 34, wherein the primary and backup service mangers are provided on a selected one of a group of elements consisting of:

a router;

a switch; and

a load balancer.

36. The apparatus of claim 34, wherein the backup service manager is further configured to detect that the primary service manager has failed and to send a message to a forwarding agent that indicates that the primary service manager has failed.

37. The apparatus of claim 34, wherein the service mangers are included in a network device, the network device being configured to execute a selected one or more of a group of operations consisting of:

a) statistics gathering;

b) switching a plurality of incoming packets;

c) routing the plurality of incoming packets;

d) filtering the plurality of incoming packets;

e) intrusion detection for a plurality of incoming communications flows; and

f) proxying associated with the plurality of incoming communications flows.

38. The apparatus of claim 34, wherein one or more of the instructions include a wildcard affinity, the wildcard affinity identifying a selected set of communications flows that are of interest to the primary service manager.

39. The apparatus of claim 34, wherein one or more of the instructions include a replication packet that indicates how packets corresponding to the communications flow are to be processed.

40. The apparatus of claim 39, wherein one or more of the instructions include a fixed affinity that identifies the flow, and wherein the fixed affinity is provided in the replication packet.

41. The apparatus of claim 40, wherein the replication packet is sent to the backup service manager each time the fixed affinity is communicated to a forwarding agent.

42. The apparatus of claim 40, wherein one or more fixed affinities stored in the backup service manager and in the primary service manger expire at a time interval that is substantially concurrent.