Centralized management of quality of service (QoS) information for data flows

• US 7,962,602 B1
• Filed: 06/29/2010
• Issued: 06/14/2011
• Est. Priority Date: 06/12/2003
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Sullivan, Brian M., Radulescu-Banu, Cristina M., Peterson, Eric L.
• Primary Examiner(s): Donaghue; Larry
• Assistant Examiner(s): TAYLOR, NICHOLAS R
• Application Number:
  US12/825,590
• Time in Patent Office: 350 Days
• Field of Search: 370/392, 709/223, 709/222, 709/225, 709/228, 709/229, 709/236
• US Class Current: 709/223
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 41/0883 Semiautomatic configuration, e.g. proposals from system
• CPC Class Codes: H04L 41/0889 Techniques to speed-up the configuration process
• CPC Class Codes: H04L 41/5022 by giving priorities, e.g. assigning classes of service
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols

Abstract

Techniques are described for centralized management of quality of service (QoS) characteristics of network data flows. A service management system maintains a database that associates access information, such as a username and password, with QoS information. A router or other network device associates a data flow with access information, and queries the service management system with the access information to obtain the QoS information. The router forwards data of the data flow in accordance with the QoS information obtained from the service management system. As the access information may be a username and password, an existing system, such as a Remote Authentication Dial-In User Service (RADIUS) system, may easily be adapted for use as the service management system. As a result, QoS information may easily be centrally managed for numerous routers or other network devices.

Claims

1. A method comprising:

executing a Border Gateway Protocol (BGP) routing protocol on a router;

receiving, with the router, BGP routing protocol packets that specify a route for a virtual private network (VPN);

installing the route for the VPN within routing information within the router;

selecting one of a plurality of service profile identifiers for the VPN route;

selecting access information associated with the service profile for the VPN route;

querying an external authentication system with the selected access information to obtain interface parameters for an interface without specifying an individual user;

creating at least one interface within the router based on the interface parameters obtained from the external service management system; and

forwarding data of a data flow associated with the VPN route with the interface of the router using the interface parameters obtained from the external service management system.

2. The method of claim 1, wherein the interface parameters comprise interface parameters necessary for instantiating an interface to support a specific quality of service (QoS) level.

3. The method of claim 1, wherein querying the external authentication system comprises logging into the external authentication system with the access information.

4. The method of claim 1, wherein selecting one of the service profile identifiers comprises one of:

applying route map logic to compare a BGP community of the BGP routing protocol packet with the selection criteria to associate the VPN route with the corresponding service profile identifier, or

applying route map logic to compare a description of a Multiprotocol Label Switching (MPLS) packet with the selection criteria to associate an MPLS path specified by the routing information with the corresponding service profile identifier.

5. The method of claim 1, wherein the access information includes at least one of a username, a password, and a domain associated with a service provided by the router without specifying an individual network user.

6. The method of claim 1, wherein querying the external authentication system comprises querying a Remote Authentication Dial-In User Service (RADIUS) server.

7. A network device comprising:

a control unit comprising;

a microprocessor;

a Border Gateway Protocol (BGP) executing on the microprocessor;

a routing information base maintained by the BGP; and

a forwarding element having an interface for forwarding packets,

wherein the BGP receives a VPN routing protocol packet from a second router that includes routing information that specifies a virtual private network (VPN) route and installs the route for the VPN within the routing information base,

wherein, when installing the route, the BGP selects a service profile for the VPN route, determines access information associated with the service profile, queries an external authentication system with the selected access information to obtain interface parameters without specifying an individual user, and

wherein the BGP instructs the forwarding element to configure the interface based on the interface parameters obtained from the external authentication system and forwards data along the VPN route with the interface.

8. The network device of claim 7, wherein the interface parameters specify parameters for instantiating an interface to support a specific quality of service (QoS) level.

9. The network device of claim 7, wherein the BGP queries the external authentication system by logging into the external authentication system with the access information.