Configuration of a virtual service network

• US 9,106,561 B2
• Filed: 12/15/2012
• Issued: 08/11/2015
• Est. Priority Date: 12/06/2012
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: Jalan, Rajkumar, Kamat, Gurudeep
• Primary Examiner(s): Nguyen, Brian D
• Assistant Examiner(s): NGUYEN, TOAN D
• Application Number:
  US13/716,128
• Publication Number:
  US 20140169168A1
• Time in Patent Office: 969 Days
• Field of Search: 370/235, 370/389, 370/397, 370/400, 370/428, 709/206, 709/225, 709/226, 709/241
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 45/38 Flow based routing
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/288 Distributed intermediate devices, i.e. intermediate devices for interaction with other intermediate devices on the same level

Abstract

Configuration of a virtual service network by a configuring node includes: determining that the virtual service is to be configured; determining a configuration associated with the virtual service and including packet forwarding policies associated with the virtual service, each packet forwarding policy including a virtual service network address and a destination; and sending the packet forwarding policies in the configuration to a network node. The network node: stores the packet forwarding policies; receives a data packet for the virtual service and including a virtual service network address; determines a match between the virtual service network address in the data packet with the virtual service network address in a given packet forwarding policy of the stored packet forwarding policies; obtains a given destination in the given packet forwarding policy; and sends the data packet to a service load balancer associated with the given destination by the network node.

Claims

1. A method for configuring a virtual service network, the virtual service network comprising a network node and a plurality of service load balancers serving a virtual service associated with a virtual service network address, comprising:

determining by a configuring node that the virtual service is to be configured;

determining a configuration associated with the virtual service by the configuring node, the configuration comprising one or more packet forwarding policies associated with the virtual service, each packet forwarding policy comprising the virtual service network address and a destination;

sending the packet forwarding policies in the configuration to a network node, wherein the network node;

stores the packet forwarding policies;

receives a data packet for the virtual service, the data packet comprising the virtual service network address;

determines a match between the virtual service network address in the data packet with the virtual service network address in a given packet forwarding policy of the stored packet forwarding policies;

obtains a given destination in the given packet forwarding policy; and

sends the data packet to a service load balancer associated with the given destination;

determining by the configuring node whether the configuration of the virtual service network for the virtual service is to be changed according to a condition criteria comprised in a second configuration associated with the virtual service, the second configuration further comprising one or more second packet forwarding policies; and

in response to determining that the configuration of the virtual service network for the virtual service is to be changed according to the condition criteria, sending the second packet forwarding policies in the second configuration to the network node, wherein the network node replaces the stored packet forwarding policies with the second packet forwarding policies, the sending comprising;

in response to determining that the configuration of the virtual service network for the virtual service is to be changed according to the condition criteria, removing by the network node the stored packet forwarding policies; and

sending the second packet forwarding policies in the second configuration to the network node.

2. The method of claim 1, wherein the condition criteria comprise one or more of the following:

time;

a condition of one or more of the service load balancers; and

availability of the service load balancers to serve the virtual service.

3. The method of claim 1, wherein the service load balancers serve a first virtual service and a second virtual service, wherein the configuring node comprises a first configuration associated with the first virtual service and a second configuration associated with the second virtual service, the first configuration comprising a first condition criteria and one or more first packet forwarding policies, the second configuration comprising a second condition criteria and one or more second packet forwarding policies, wherein the method further comprises:

determining by the configuring node whether the configuration of the virtual service network for the first virtual service or the second virtual service is to be changed according to the first condition criteria or the second condition criteria;

in response to determining that the configuration of the virtual service network for the first virtual service is to be changed according to the first condition criteria, sending the first packet forwarding policies in the first configuration to the network node, wherein the network node replaces stored packet forwarding policies associated with the first virtual service with the first packet forwarding policies; and

in response to determining that the configuration of the virtual service network for the second virtual service is to be changed according to the second condition criteria, sending the second packet forwarding policies in the second configuration to the network node, wherein the network node replaces stored packet forwarding policies associated with the second virtual service with the second packet forwarding policies.

4. The method of claim 1, wherein the configuration further comprises one or more second packet forwarding policies, wherein the method further comprises:

determining by the configuring node that a second network node of the virtual service network is to be configured for the virtual service; and

sending the second packet forwarding policies in the configuration to the second network node.

5. A non-transitory computer-readable storage medium having embodied thereon a program, the program being executable by a processor to perform a method for configuring a virtual service network, the method comprising:

determining by a configuring node that a virtual service is to be configured, the virtual service being associated with a virtual service network address;

determining a configuration associated with the virtual service by the configuring node, the configuration comprising one or more packet forwarding policies associated with the virtual service, each packet forwarding policy comprising the virtual service network address and a destination;

sending the packet forwarding policies in the configuration to a network node, wherein the network node;

stores the packet forwarding policies;

receives a data packet for the virtual service, the data packet comprising the virtual service network address;

determines a match between the virtual service network address in the data packet with the virtual service network address in a given packet forwarding policy of the stored packet forwarding policies;

obtains a given destination in the given packet forwarding policy; and

sends the data packet to a service load balancer associated with the given destination;

determining by the configuring node whether the configuration of the virtual service network for the virtual service is to be changed according to a condition criteria comprised in a second configuration associated with the virtual service, the second configuration further comprising one or more second packet forwarding policies; and

in response to determining that the configuration of the virtual service network for the virtual service is to be changed according to the condition criteria, sending the one or more second packet forwarding policies in the second configuration to the network node, the network node replacing the stored packet forwarding policies with the one or more second packet forwarding policies, the sending comprising;

in response to determining that the configuration of the virtual service network for the virtual service is to be changed according to the condition criteria, removing by the network node the stored packet forwarding policies; and

sending the second packet forwarding policies in the second configuration to the network node.

6. The medium of claim 5, wherein the condition criteria comprise one or more of the following:

time;

a condition of one or more of the service load balancers; and

availability of the service load balancers to serve the virtual service.

7. The medium of claim 5, wherein the service load balancers serve a first virtual service and a second virtual service, wherein the configuring node comprises a first configuration associated with the first virtual service and a second configuration associated with the second virtual service, the first configuration comprising a first condition criteria and one or more first packet forwarding policies, the second configuration comprising a second condition criteria and one or more second packet forwarding policies, wherein the method further comprises:

determining by the configuring node whether the configuration of the virtual service network for the first virtual service or the second virtual service is to be changed according to the first condition criteria or the second condition criteria;

in response to determining that the configuration of the virtual service network for the first virtual service is to be changed according to the first condition criteria, sending the first packet forwarding policies in the first configuration to the network node, wherein the network node replaces stored packet forwarding policies associated with the first virtual service with the first packet forwarding policies; and

in response to determining that the configuration of the virtual service network for the second virtual service is to be changed according to the second condition criteria, sending the second packet forwarding policies in the second configuration to the network node, wherein the network node replaces stored packet forwarding policies associated with the second virtual service with the second packet forwarding policies.

8. The medium of claim 5, wherein the configuration further comprises one or more second packet forwarding policies, wherein the method further comprises:

determining by the configuring node that a second network node of the virtual service network is to be configured for the virtual service; and

sending the second packet forwarding policies in the configuration to the second network node.

9. A system, comprising:

a virtual service network comprising a network node and a plurality of service load balancers serving a virtual service associated with a virtual service network address; and

a configuring node coupled to the virtual service network, the configuring node;

determining that the virtual service is to be configured;

determining a configuration associated with the virtual service, the configuration comprising one or more packet forwarding policies associated with the virtual service, each packet forwarding policy comprising the virtual service network address and a destination;

sending the packet forwarding policies in the configuration to the network node, the network node;

storing the packet forwarding policies;

receiving a data packet for the virtual service, the data packet comprising the virtual service network address;

determining a match between the virtual service network address in the data packet with the virtual service network address in a given packet forwarding policy of the stored packet forwarding policies;

obtaining a given destination in the given packet forwarding policy; and

sending the data packet to a service load balancer associated with the given destination;

determining whether the configuration of the virtual service network for the virtual service is to be changed according to a condition criteria comprised in a second configuration associated with the virtual service, the second configuration further comprising one or more second packet forwarding policies; and

in response to determining that the configuration of the virtual service network for the virtual service is to be changed according to the condition criteria, sending the one or more second packet forwarding policies in the second configuration to the network node, wherein the network node replaces the stored packet forwarding policies with the one or more second packet forwarding policies, the sending comprising;

in response to determining that the configuration of the virtual service network for the virtual service is to be changed according to the condition criteria, removing by the network node the stored packet forwarding policies; and

sending the second packet forwarding policies in the second configuration to the network node.

10. The system of claim 9, wherein the condition criteria comprise one or more of the following:

time;

a condition of one or more of the service load balancers; and

availability of the service load balancers to serve the virtual service.

11. The system of claim 9, wherein the service load balancers serve a first virtual service and a second virtual service, wherein the configuring node comprises a first configuration associated with the first virtual service and a second configuration associated with the second virtual service, the first configuration comprising a first condition criteria and one or more first packet forwarding policies, the second configuration comprising a second condition criteria and one or more second packet forwarding policies, the configuring node further:

determining whether the configuration of the virtual service network for the first virtual service or the second virtual service is to be changed according to the first condition criteria or the second condition criteria;

in response to determining that the configuration of the virtual service network for the first virtual service is to be changed according to the first condition criteria, sending the first packet forwarding policies in the first configuration to the network node, wherein the network node replaces stored packet forwarding policies associated with the first virtual service with the first packet forwarding policies; and

in response to determining that the configuration of the virtual service network for the second virtual service is to be changed according to the second condition criteria, sending the second packet forwarding policies in the second configuration to the network node, wherein the network node replaces stored packet forwarding policies associated with the second virtual service with the second packet forwarding policies.

12. The system of claim 9, wherein the configuration further comprises one or more second packet forwarding policies, the configuring node further:

determining that a second network node of the virtual service network is to be configured for the virtual service; and

sending the second packet forwarding policies in the configuration to the second network node.

13. A method for configuring a virtual service network, the virtual service network comprising a network node and a plurality of service load balancers serving a virtual service associated with a virtual service network address, comprising:

receiving by the network node one or more packet forwarding policies associated with the virtual service from a configuring node, the configuring node being coupled to the virtual service network, each of the packet forwarding policies comprising the virtual service network address and a destination;

storing by the network node the packet forwarding policies;

receiving a data packet for the virtual service, the data packet comprising the virtual service network address;

comparing by the network node the virtual service network address in the data packet with the virtual service network address in one or more of the stored packet forwarding policies;

in response to finding a match between the virtual service network address in the data packet with the virtual service network address in a given packet forwarding policy, determining a given destination in the given packet forwarding policy by the network node;

sending the data packet to a service load balancer associated with the given destination by the network node;

receiving by the network node one or more second packet forwarding policies associated with the virtual service from the configuring node, each of the second packet forwarding policies comprising a second virtual service network address and a second destination;

storing by the network node the second packet forwarding policies, wherein the second packet forwarding policies replace the stored packet forwarding policies;

receiving a second data packet for the virtual service, the second data packet comprising the second virtual service network address;

comparing by the network node the second virtual service network address in the second data packet with the second virtual service network address in one or more of the stored second packet forwarding policies; and

in response to finding a match between the second virtual service network address in the second data packet with the second virtual service network address in a given second packet forwarding policy, determining a given second destination in the given second packet forwarding policy by the network node; and

sending the second data packet to a second service load balancer associated with the given second destination by the network node.