Redirecting network traffic based on content

• US 8,724,626 B1
• Filed: 10/07/2013
• Issued: 05/13/2014
• Est. Priority Date: 10/07/2013
• Status: Active Grant

• Current Assignee: Level 3 Communications LLC (Lumen Technologies, Inc.)
• Original Assignee: TW Telecom Holdings Incorporated (Lumen Technologies, Inc.)
• Inventors: Sella, William Thomas, Caputo, Pete J. II
• Primary Examiner(s): Pezzlo, John
• Application Number:
  US14/047,523
• Time in Patent Office: 218 Days
• Field of Search: 370/389, 370/252, 370/238, 709238-242
• US Class Current: 370/389
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 45/50 using label swapping, e.g. multi-protocol label switch [MPLS]
• CPC Class Codes: H04L 45/507 Label distribution
• CPC Class Codes: H04L 45/54 Organization of routing tables
• CPC Class Codes: H04L 45/62 Wavelength based optical switching H04Q11/0062
• CPC Class Codes: H04L 45/66 Layer 2 routing, e.g. in Ethernet based MAN's
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 45/742 Route cache; Operation thereof
• CPC Class Codes: H04L 45/7453 using hashing
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A rule indicates that data having particular characteristics be automatically routed to a particular destination. When software on a switching device detects a new data stream, it is analyzed to determine whether it has characteristics specified by the rule. If it does, the packet is encapsulated with a special tag, indicating that the packet should be routed to the new destination. Also, an entry is added to a quick-lookup table in the switching device. The entry indicates that future packets in the data stream that have the same source and destination port and address should also be routed to the new destination.

Claims

1. A computer-implemented method for routing traffic through a network including a plurality of interconnected switching devices, comprising:

(a) receiving a packet that includes a header and contents;

(b) determining that the packet is in a new data stream, wherein the determining (b) comprises determining that the packet'"'"'s data stream does not have an entry in a quick lookup table of an access switching device, wherein the quick lookup table maps data streams to particular ports of the access switching device and is separate from a routing table that maps destination subnets to particular ports of the access switching device;

(c) determining that a rule in a plurality of rules correlates to the contents of the packet;

(d) determining a destination for the packet based on the rule;

(e) determining a label to attach to the packet, the label indicating to the plurality of interconnected switching devices how to route data to the destination; and

(f) attaching the label to respective packets in the new data stream to direct the new data stream to the destination determined based on the rule and the contents.

2. The method of claim 1, wherein the packet is a layer two, data link layer packet, the header is a layer two, data link layer header, and the contents are layer two, data link layer contents.

3. The method of claim 2, wherein the contents include a header of a layer three, network layer packet, and

wherein the determining (c) comprises determining the rule based on the header of the layer three, network layer packet.

4. The method of claim 3, wherein the contents are at least a portion of the layer three, network layer packet and the portion of the layer three, network layer packet includes at least a portion of a layer four, transport layer packet,

wherein the determining (c) further comprises determining the rule based on protocols of the network layer packet and the transport layer packet, source and destination addresses in the portion of network layer packet, and source and destination ports in the portion of the transport layer packet.

5. The method of claim 2, wherein the contents include application layer contents, and wherein the determining (c) comprises determining the rule based on the application layer contents.

6. The method of claim 1, further comprising:

(g) receiving an additional packet from the new data stream, the additional packet also including a header and contents, and

wherein the determining (c) comprises selecting the rule from the plurality of rules based on the contents of both the packet received in (a) and the additional packet received in (g).

7. The method of claim 1, further comprising:

(g) inserting a new entry into the quick lookup table, the new entry correlating the contents with an instruction to attach the label identifying the destination;

(h) receiving, at the access switching device, an additional packet;

(i) correlating contents of the additional packet with the new entry in the quick lookup table to determine whether the additional packet is part of the new data stream; and

(j) when the additional packet is determined to be part of the new data stream, attaching the label to the additional packet to route the additional packet to the destination.

8. The method of claim 7, further comprising:

(k) determining that a particular time period has elapsed since a packet has been determined to be part of the new data stream in (b);

(l) until the particular time period is determined to have elapsed in (k), repeating steps (h)-(j);

(m) when the particular time period is determined to have elapsed in (k), removing the entry from the quick lookup table.

9. The method of claim 1, wherein the rule associates the contents of the packet to particular bandwidth and latency requirements defined in a service level agreement.

10. The method of claim 9, wherein the determining (d) comprises selecting the destination from a plurality of destinations based on historical network usage or performance such that the particular bandwidth and latency requirements are forecasted to be met.

11. A system for routing traffic through a network including a plurality of interconnected switching devices, comprising:

an access switching device;

a routing table that maps destination subnets to particular ports of the access switching device;

a quick lookup table of the access switching device, the quick lookup table mapping data streams to particular ports of the access switching device and being separate from the routing table;

a redirect module that (i) receives a packet that includes a header and contents, (ii) determines that the packet'"'"'s data stream does not have an entry in the quick lookup table to determine whether the packet is part of the new data stream, and (iii) determines that the packet is in a new data stream;

a business rule module that determines that a rule in a plurality of rules correlates to the contents of the packet and determines a destination for the packet based on the rule; and

a label determination module that determines a label to attach to the packet, the label indicating to the plurality of interconnected switching devices how to route data to the destination, wherein the label is attached to respective packets in the new data stream to direct the new data stream to the destination determined based on the rule and the contents.

12. The system of claim 11, wherein the packet is a layer two, data link layer packet, the header is a layer two, data link layer header, and the contents are layer two, data link layer contents.

13. The system of claim 12, wherein the contents include a header of a layer three, network layer packet, and

wherein the business rule module determines the rule based on the header of the layer three, network layer packet.

14. The system of claim 13, wherein the contents are at least a portion of the layer three, network layer packet and the portion of the layer three, network layer packet includes at least a portion of a layer four, transport layer packet,

wherein the business rule module determines the rule based on protocols of the network layer packet and the transport layer packet, source and destination addresses in the portion of network layer packet, and source and destination ports in the portion of the transport layer packet.

15. The system of claim 14, further comprising:

wherein the redirect module receives an additional packet from the new data stream, the additional packet also including a header and contents, and wherein the business rule module selects the rule from the plurality of rules based on the contents of both the packet and the additional packet.

16. The system of claim 14, wherein the label determination module sends a message to insert a new entry into the quick lookup table, the new entry correlating the contents with an instruction to attach the label identifying the destination,

wherein the access switching device receives an additional packet,

wherein the redirect module correlates contents of the additional packet with the new entry in the quick lookup table to determine whether the additional packet is part of the new data stream, and

wherein the label is attached to the additional packet to route the additional packet to the destination when the additional packet is determined to be part of the new data stream.

17. The system of claim 16, further comprising:

an expiration module that determines that a particular time period has elapsed since a packet has been determined to be part of the new data stream and, when the particular time period is determined to have elapsed, removes the entry from the quick lookup table.

18. The system of claim 11, wherein the rule associates the contents of the packet to particular bandwidth and latency requirements defined in a service level agreement.

19. The system of claim 18, wherein the business rule module selects the destination from a plurality of destinations based on historical network usage such that the particular bandwidth and latency requirements are forecasted to be met.

20. A program storage device tangibly embodying a program of instructions executable by at least one machine to perform a method for routing traffic through a network including a plurality of interconnected switching devices, said method comprising:

(a) receiving a packet that includes a header and contents;

(b) determining that the packet is in a new data stream, wherein the determining (b) comprises determining that the packet'"'"'s data stream does not have an entry in a quick lookup table of an access switching device, wherein the quick lookup table maps data streams to particular ports of the access switching device and is separate from a routing table that maps destination subnets to particular ports of the access switching device;

(c) determining that a rule in a plurality of rules correlates to the contents of the packet;

(d) determining a destination for the packet based on the rule;

(e) determining a label to attach to the packet, the label indicating to the plurality of interconnected switching devices how to route data to the destination; and

(f) attaching the label to respective packets in the new data stream to direct the new data stream to the destination determined based on the rule and the contents.

21. A computer-implemented method for routing traffic through a network including a plurality of interconnected switching devices, comprising:

(a) receiving a first packet that includes a header and contents;

(b) determining that the first packet is in a new data stream;

(c) receiving a second packet from the new data stream, the second packet also including a header and contents;

(d) determining that a rule in a plurality of rules correlates to the contents of the first and second packets, wherein the determining (d) comprises selecting the rule from the plurality of rules at least based on the contents of both the first packet received in (a) and the second packet received in (b);

(e) determining a destination for the first and second packets based on the rule;

(f) determining a label to attach to the first and second packets, the label indicating to the plurality of interconnected switching devices how to route data to the destination; and

(g) attaching the label to respective packets in the new data stream to direct the new data stream to the destination determined based on the rule and the contents.

22. The method of claim 21, wherein the first and second packets a are a layer two, data link layer packets, the respective headers are each a layer two, data link layer header, and the contents are layer two, data link layer contents.

23. The method of claim 22, wherein the contents include a header of a layer three, network layer packet, and

wherein the determining (d) comprises determining the rule based on the header of the layer three, network layer packet.

24. The method of claim 23, wherein the contents are at least a portion of the layer three, network layer packet and the portion of the layer three, network layer packet includes at least a portion of a layer four, transport layer packet,

wherein the determining (d) further comprises determining the rule based on protocols of the network layer packet and the transport layer packet, source and destination addresses in the portion of network layer packet, and source and destination ports in the portion of the transport layer packet.

25. The method of claim 21, wherein the rule associates the contents of the packet to particular bandwidth and latency requirements defined in a service level agreement.

26. The method of claim 25, wherein the determining (e) comprises selecting the destination from a plurality of destinations based on historical network usage or performance such that the particular bandwidth and latency requirements are forecasted to be met.

27. The method of claim 21, wherein the determining (b) comprises determining that the packet'"'"'s data stream does not have an entry in a quick lookup table of an access switching device, wherein the quick lookup table maps data streams to particular ports of the access switching device and is separate from a routing table that maps destination subnets to particular ports of the access switching device and further comprising:

(h) inserting a new entry into the quick lookup table, the new entry correlating the contents with an instruction to attach the label identifying the destination;

(i) receiving, at the access switching device, an additional packet;

(j) correlating contents of the additional packet with the new entry in the quick lookup table to determine whether the additional packet is part of the new data stream; and

(k) when the additional packet is determined to be part of the new data stream, attaching the label to the additional packet to route the additional packet to the destination.

28. The method of claim 27, further comprising:

(l) determining that a particular time period has elapsed since a packet has been determined to be part of the new data stream in (b);

(m) until the particular time period is determined to have elapsed in (l), repeating steps (g)-(k);

(n) when the particular time period is determined to have elapsed in (l), removing the entry from the quick lookup table.