Traffic fencing mechanism for control plane enabled networks

• US 8,224,948 B2
• Filed: 01/29/2010
• Issued: 07/17/2012
• Est. Priority Date: 12/26/2006
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Liu, Stephen Shyan-Shiang
• Primary Examiner(s): MACILWINEN, JOHN MOORE JAIN
• Application Number:
  US12/696,906
• Publication Number:
  US 20100138527A1
• Time in Patent Office: 900 Days
• Field of Search: 709/223
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 45/03 by updating link state protocols
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

A device receives a traffic fencing (TF) function for a network, and provides a TF attribute, based on the received TF function, over a link of the network to enable activation of a TF rule of a link state routing (LSR) algorithm used by the network to implement the TF function for the network.

Claims

1. A method comprising:

receiving, by a network device, a traffic fencing function for a network, the traffic fencing function relating to traffic directed to or from a portion of the network; and

providing, by the network device and based on the received traffic fencing function, an attribute to another network device in the network, to enable activation of a rule of a link state routing algorithm used by the other network device, the attribute allowing the other network device to implement the traffic fencing function, the attribute including;

a first bit that indicates an ON/OFF state of the traffic fencing function, and

one or more second bits that indicate one or more types of the traffic fencing function.

2. The method of claim 1, where the activation of the rule at least one of:

limits entrance of traffic of certain classes to the portion of the network,

prevents traffic of certain classes from exiting the portion of the network,

prevents traffic of certain classes from using the portion of the network as a transit route, or

isolates the portion of the network from remaining portions of the network and permitting communication within the isolated portion.

3. The method of claim 1, where the rule implements the attribute for traffic routed to the portion of the network and does not implement the attribute for traffic routed from the portion of the network.

4. The method of claim 1, where the attribute indicates one or more of an ON state or an OFF state of the traffic fencing function for a link, a type of function to be applied if the traffic fencing function is in the ON state, or information identifying the portion of the network.

5. The method of claim 1, where, activation of the rule causes traffic, that is to transit the portion of the network, to be routed away from the portion of the network and traffic, that is destined for a device within the portion of the network, to be routed into the portion of the network.

6. The method of claim 1, where the network includes a Generalized Multiprotocol Label Switching (GMPLS) network.

7. The method of claim 1, further comprising:

receiving, by the other network device, the attribute; and

configuring, in response to receiving the attribute, an attribute for a link, with which the other network device is associated.

8. A network device:

a memory to store instructions; and

a processor to implement the instructions to;

receive a traffic fencing function for a network, the traffic fencing function relating to a portion of the network, and

provide, in response to receiving traffic fencing function, an attribute to another network device in the network, to enable activation of a rule of a link state routing algorithm used by the other network device, the attribute allowing the other network device to implement the traffic fencing function, the attribute including;

a first bit that indicates an ON/OFF state of the traffic fencing function, and

one or more second bits that indicate one or more types of the traffic fencing function.

9. The network device of claim 8, where the rule at least one of:

limits entrance of traffic of certain classes to the portion of the network,

prevents traffic of certain classes from exiting the portion of the network,

prevents traffic of certain classes from using the portion of the network as a transit route, or

isolates the portion of the network from remaining portions of the network and permitting communication within the isolated portion.

10. The network device of claim 8, where the other network device includes a multiplexer, an optical cross connect, a router, a switch, a hub, or a bridge.

11. The network device of claim 8, where the rule implements the attribute for traffic routed to the portion of the network and does not implement the attribute for traffic routed from the portion of the network.

12. The network device of claim 8, where the attribute indicates one or more of an ON state or an OFF state of the traffic fencing function for a link, a type of function to be applied if the traffic fencing function is in the ON state, or information identifying the portion of the network.

13. The network device of claim 8, where the rule causes traffic that is to transit the portion of the network to be routed away from the portion of the network and traffic that is destined for a device within the portion of the network to be routed into the portion of the network.

14. The network device of claim 8, where the network includes a Generalized Multiprotocol Label Switching (GMPLS) network.

15. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions which, when executed by at least one processor, cause the at least one processor to receive an attribute to enable activation of a rule of a link state routing algorithm, and

one or more instructions which, when executed by the at least one processor, cause the at least one processor to activate the rule, in response to receiving the attribute, to implement a traffic fencing function for a link, in a network, at a network device, the attribute including;

a first bit that indicates an ON/OFF state of the traffic fencing function, and

one or more second bits that indicate one or more types of the traffic fencing function.

16. The medium of claim 15, where the traffic fencing function includes one of:

a function that limits entrance of traffic of certain classes to a portion of the network,

a function that prevents traffic of certain classes from exiting the portion of the network,

a function that prevents traffic of certain classes from using the portion of the network as a transit route, or

a function that isolates the portion of the network from remaining portions of the network and permits communication within the isolated portion.

17. The medium of claim 15, where the attribute includes:

a most significant bit value that indicates the ON/OFF state of the traffic fencing function, and

a group of bits that indicates the type of the traffic fencing function.

18. The medium of claim 17, where the one or more instructions to receive the attribute includes:

one or more instructions which, when executed by at least one processor, cause the at least one processor to receive the attribute in an Open Shortest Path First (OSPF) protocol message.

19. The medium of claim 15, where the network includes a Generalized Multiprotocol Label Switching (GMPLS) network.

20. The medium of claim 15, where the link supports at least one of:

an external-network network interface (E-NNI), or

an internal-network network interface (I-NNI).

21. The medium of claim 15, where the network device includes one of:

a multiplexer,

an optical cross connect,

a router,

a switch,

a hub, or

a bridge.