System and method for PE-node protection

• US 7,693,047 B2
• Filed: 11/28/2005
• Issued: 04/06/2010
• Est. Priority Date: 11/28/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: De Vriendt, Peter, Vasseur, Jean-Philippe, Filsfils, Clarence, Guichard, James
• Primary Examiner(s): Yao; Kwang B
• Assistant Examiner(s): Elpenord; Candal
• Application Number:
  US11/287,801
• Publication Number:
  US 20070121486A1
• Time in Patent Office: 1,590 Days
• Field of Search: 370/216, 370/217, 370225-228, 370/242, 370/248, 370/395.3, 370/238, 370/392, 370/401
• US Class Current: 370/217
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 45/50 using label swapping, e.g. multi-protocol label switch [MPLS]
• CPC Class Codes: H04L 45/54 Organization of routing tables

Abstract

A novel fast reroute (FRR) technique is provided for quickly and efficiently rerouting selected types of network traffic in response to a node or link failure at the edge of a computer network. According to the technique, the network includes first and second edge devices that function as “FRR mates,” such that network traffic originally destined for one FRR mate may be quickly rerouted to the other without having to wait for conventional network convergence. When an edge device receives rerouted packets originally destined for its FRR mate, the device responds by forwarding only those rerouted packets matching the selected traffic types; rerouted packets that do not match the selected traffic types are dropped or otherwise discarded. The first and second edge devices may be statically configured as FRR mates, e.g., by a network administrator, or they may be configured to automatically detect their compatibility as FRR mates.

Claims

1. A method for rerouting selected types of network traffic in a computer network, the method comprising:

detecting a node or link failure at a first edge device in the computer network, the first edge device coupling the computer network to a neighboring site;

incorporating, in response to detecting the node or link failure at the first edge device, a predetermined interior gateway protocol (IGP) label value into a data packet addressed to the first edge device, the predetermined IGP label value indicating that the packet is being rerouted to a second edge device, the second edge device coupling the computer network to the neighboring site;

after the incorporating, rerouting the data packet addressed to the first edge device to the second edge device in the computer network;

determining, at the second edge device, whether the rerouted data packet corresponds to at least one of the selected types of network traffic; and

forwarding the rerouted packet at the second edge device, in response to determining that the rerouted data packet corresponds to at least one of the selected types of network traffic.

2. The method of claim 1, further comprising:

dropping the rerouted data packet at the second edge device, in response to determining that the rerouted packet does not correspond to at least one of the selected types of network traffic.

3. The method of claim 1, further comprising:

detecting, at the second edge device, the predetermined IGP label value in the rerouted data packet.

4. The method of claim 1, further comprising:

disseminating the predetermined IGP label value from the second edge device to each network device directly attached to the first edge device in the computer network.

5. The method of claim 4, wherein the predetermined IGP label value is disseminated in a Label Distribution Protocol (LDP) message.

6. The method of claim 1, wherein the step of determining whether the rerouted packet corresponds to at least one of the selected types of network traffic further comprises:

locating a virtual private network (VPN) label value in the rerouted data packet, the VPN label value having been allocated by the first edge device; and

determining, at the second edge device, whether the rerouted data packet may be forwarded based on the value of the located VPN label value.

7. The method of claim 6, wherein the step of determining whether the rerouted data packet may be forwarded further comprises:

searching a primary-replica table based on the value of the VPN label located in the rerouted data packet.

8. A network device configured to reroute selected types of network traffic in a computer network, the network device comprising:

a processor;

a network interface adapted to receive a data packet from the computer network;

a memory adapted to store instructions which are executable by the processor, the instructions instructing the processor to perform the steps of;

determining whether the received data packet contains a predetermined interior gateway protocol (IGP) label value, the predetermined IGP label value indicating that the data packet has been rerouted to the network device by another network device in the computer network in response to detection of a node or link failure;

determining, in response to determining that the received data packet contains the predetermined IGP label value, whether the received data packet corresponds to a selected type of network traffic; and

forwarding the received data packet to its next-hop destination only if the data packet is determined to correspond to a selected type of network traffic.

9. The network device of claim 8, wherein the memory is further adapted to store a label-forwarding table containing label-forwarding information used for rendering next-hop forwarding determinations for data packets received at the network interface.

10. The network device of claim 9, wherein the memory is further adapted to store instructions for performing the step of:

determining whether the received data packet contains the predetermined IGP label value based on the result of a label-lookup operation in the label-forwarding table.

11. The network device of claim 8, wherein the memory is further adapted to store instructions for performing the steps of:

extracting, in response to determining that the received data packet contains the predetermined IGP label value, a virtual private network (VPN) label value from the received data packet, the VPN label having been allocated by a different network device in the computer network;

determining whether the received data packet corresponds to a selected type of network traffic based on the value of the extracted VPN label value; and

determining, in response to determining that the received data packet corresponds to a selected type of network traffic, a next-hop forwarding determination for the received data packet based on the value of the extracted VPN label value.

12. A network device configured to reroute network traffic in a computer network, the network device comprising:

a processor;

a network interface adapted to receive a data packet from the computer network;

a memory adapted to store instructions which are executable by the processor, the instructions instructing the processor to perform the steps of;

determining whether the received data packet is addressed to a neighboring edge device in the computer network;

determining, in response to determining that the received data packet is addressed to the neighboring edge device, whether the neighboring edge device is unavailable; and

incorporating, in response to determining that the neighboring edge device is unavailable, a predetermined interior gateway protocol (IGP) label value into the received data packet before the received data packet is rerouted, the predetermined IGP label value indicating that the received data packet will be rerouted to an edge device configured to function as a fast reroute (FRR) mate for the unavailable neighboring network device.

13. The network device of claim 12, wherein the memory is further adapted to store instructions for performing the step of:

forwarding, in response to incorporating the predetermined IGP label value into the received data packet, the received data packet to the ERR mate.

14. A computer network for rerouting selected types of network traffic, the computer network comprising:

means for detecting a node or link failure at a first edge device in the computer network that couples the computer network to a neighboring site;

means for incorporating, in response to detection of the node or link failure at the first edge device, a predetermined interior gateway protocol (IGP) label value into the data packet addressed to the first edge device, the predetermined IGP label value indicating that the packet is being rerouted to a second edge device that couples the computer network to the neighboring site;

means for rerouting the data packet addressed to the first edge device to the second edge device in the computer network after incorporation of the IGP label value;

means for determining, at the second edge device, whether the rerouted data packet corresponds to at least one of the selected types of network traffic; and

means for forwarding the rerouted packet at the second edge device, in response to determining that the rerouted data packet corresponds to at least one of the selected types of network traffic.

15. The computer network of claim 14, further comprising:

means for dropping the rerouted data packet at the second edge device, in response to determining that the rerouted packet does not correspond to at least one of the selected types of network traffic.

16. The computer network of claim 14, further comprising:

means for detecting, at the second edge device, the predetermined IGP label value in the rerouted data packet.

17. The computer network of claim 14, further comprising:

means for disseminating the predetermined IGP label value from the second edge device to each network device directly attached to the first edge device in the computer network.

18. The computer network of claim 14, wherein the means for determining whether the rerouted packet corresponds to at least one of the selected types of network traffic further comprises:

means for locating a virtual private network (VPN) label value in the rerouted data packet, the VPN label value having been allocated by the first edge device; and

means for determining, at the second edge device, whether the rerouted data packet may be forwarded based on the value of the located VPN label value.

19. A computer-readable medium storing instructions for execution on a processor for the practice of a method of rerouting selected types of network traffic in a computer network, the method comprising:

detecting a node or link failure at a first edge device in the computer network that couples the computer network to a neighboring site;

incorporating, in response to detecting a node or link failure at the first edge device, a predetermined interior gateway protocol (IGP) label value into a data packet addressed to the first edge device, the predetermined IGP label value indicating that the packet is being rerouted to a second edge device that couples the computer network to the neighboring site;

after the incorporating, rerouting the data packet addressed to the first edge device to the second edge device in the computer network;

determining, at the second edge device, whether the rerouted data packet corresponds to at least one of the selected types of network traffic; and

forwarding the rerouted packet at the second edge device, in response to determining that the rerouted data packet corresponds to at least one of the selected types of network traffic.