Traffic fencing mechanism for control plane enabled networks

• US 7,693,979 B2
• Filed: 12/26/2006
• Issued: 04/06/2010
• Est. Priority Date: 12/26/2006
• Status: Expired due to Fees

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Liu, Stephen Shyan-Shiang
• Primary Examiner(s): Hwang; Joon H
• Assistant Examiner(s): MACILWINEN, JOHN MOORE JAIN
• Application Number:
  US11/616,084
• Publication Number:
  US 20080151768A1
• Time in Patent Office: 1,197 Days
• Field of Search: 709/223, 709/225, 709/226
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 45/03 by updating link state protocols
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

A device receives a traffic fencing (TF) function for a network, and provides a TF attribute, based on the received TF function, over a link of the network to enable activation of a TF rule of a link state routing (LSR) algorithm used by the network to implement the TF function for the network.

Claims

1. A method comprising:

receiving a traffic fencing (TF) function for a network; and

providing a TF attribute, based on the received TF function, over a link of the network to enable activation of a TF rule of a link state routing (LSR) algorithm used by the network to implement the TF function for the network, where the providing the TF attribute comprises;

using a most significant bit of a Type/Length/Value (TLV) triplets value to indicate an ON/OFF state of the TF function, and

using remaining bits of the TLV value to indicate a type of the TF function.

2. The method of claim 1, wherein the providing the TF attribute comprises:

designating a subset of an administrative group bit mask to represent the type of the TF function and the ON/OFF state of the TF function.

3. The method of claim 1, wherein the TF rule of the LSR algorithm is activated to handle the TF attribute during end-to-end path calculations for the network.

4. The method of claim 1, wherein the TF rule at least one of:

limits entrance of traffic of certain classes to one or more portions of the network;

prevents traffic of certain classes from exiting one or more portions of the network;

prevents traffic of certain classes from using one or more portions of the network as a transit route;

or

isolates one or more portions of the network from remaining portions of the network and permitting communication within the isolated portion or portions.

5. The method of claim 1, wherein the TF rule creates a dead end region within one or more portions of the network.

6. The method of claim 5, wherein the TF rule implements the TF attribute in an ingress direction to the dead end region and does not implement the TF attribute in an egress direction from the dead end region.

7. A system comprising:

a network device;

a link connected to the network device; and

a network management system or operation support system (NMS/OSS) to;

receive a traffic fencing (TF) function for the network device, and

provide a TF attribute, based on the received TF function, over the link to enable activation of a TF rule of a link state routing (LSR) algorithm used by the network device to implement the TF function for the network device, where, to provide the TF attribute, the NMS/OSS is further to;

use a most significant bit of a Type/Length/Value (TLV) triplets value to indicate an ON/OFF state of the TF function, and

use remaining bits of the TLV value to indicate a type of the TF function.

8. The system of claim 7, wherein the network device comprises at least one of:

a multiplexer;

an optical cross connect (OCX);

a router;

a switch;

a hub;

or

a bridge.

9. The system of claim 7, wherein the link supports at least one of:

an external-network network interface (E-NNI);

or

an internal-network network interface (I-NNI).

10. The system of claim 7, wherein the TF function comprises at least one of:

a function to limit entrance of traffic of certain classes to the network device;

a function to prevent traffic of certain classes from exiting the network device;

a function to prevent traffic of certain classes from using the network device as a transit route;

or

a function to isolate the network device from a network.

11. The system of claim 10, wherein the network comprises a control plane enabled network that uses link state routing protocols (LSRPs) to perform end-to-end path routing.

12. The system of claim 11, wherein the network comprises a Generalized Multiprotocol Label Switching (GMPLS) network.

13. The system of claim 7, where the network device is to:

advertise the created TF TLV in a link state routing protocol (LSRP) traffic engineered (TE) Link State Advertisement (LSA).

14. The system of claim 7, where, to provide the TF attribute, the NMS/OSS is further to:

designate a subset of an administrative group bit mask to represent the type of the TF function and the ON/OFF state of the TF function.

15. The system of claim 14, where the network device is to:

advertise the created administrative group bit mask in a link state routing protocol (LSRP) traffic engineered (TE) Link State Advertisement (LSA).

16. The system of claim 7, wherein the TF rule of the LSR algorithm is activated to handle the TF attribute during end-to-end path calculations.

17. The system of claim 7, wherein the TF rule at least one of:

limits entrance of traffic of certain classes to the network device;

prevents traffic of certain classes from exiting the network device;

prevents traffic of certain classes from using the network device as a transit route;

or

isolates the network device from a network.

18. A system comprising:

a network management system or operation support system (NMS/OSS) including;

a traffic fencing (TF) attribute creator for receiving a traffic fencing (TF) function for a network and for providing a TF attribute, based on the received TF function, over links of the network; and

network devices interconnected by the links, each network device including;

a link marker for marking links bordering a TF region of the network with the TF attribute, and

a TF routing rule enforcer for activating a TF rule of a LSR algorithm used by the network,

where the TF attribute creator uses a most significant bit of a Type/Length/Value (TLV) triplets value to indicate an ON/OFF state of the TF function, and uses remaining bits of the TLV value to indicate a type of the TF function, and

where the network devices advertise the created TF TLV in a link state routing protocol (LSRP) traffic engineered (TE) Link State Advertisement (LSA).

19. The system of claim 18, where:

the TF attribute creator designates a subset of an administrative group bit mask to represent type of the TF function and the ON/OFF state of the TF function; and

the network devices advertise the created administrative group bit mask in a link state routing protocol (LSRP) traffic engineered (TE) Link State Advertisement (LSA).

20. The system of claim 18, wherein the TF routing rule enforcer at least one of:

activates the LSR algorithm to limit entrance of traffic of certain classes to one or more portions of the network;

activates the LSR algorithm to prevent traffic of certain classes from exiting one or more portions of the network;

activates the LSR algorithm to prevent traffic of certain classes from using one or more portions of the network as a transit route;

or

activates the LSR algorithm to isolate one or more portions of the network from remaining portions of the network and permitting communication within the isolated portion or portions.

21. The system of claim 18, wherein the network comprises a Generalized Multiprotocol Label Switching (GMPLS) network.