Forwarding policies on a virtual service network

• US 9,338,225 B2
• Filed: 12/06/2012
• Issued: 05/10/2016
• Est. Priority Date: 12/06/2012
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: Jalan, Rajkumar, Kamat, Gurudeep
• Primary Examiner(s): Donabed, Ninos
• Application Number:
  US13/706,363
• Publication Number:
  US 20140164617A1
• Time in Patent Office: 1,251 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

In providing packet forwarding policies in a virtual service network that includes a network node and a pool of service load balancers serving a virtual service, the network node: receives a virtual service session request from a client device, the request including a virtual service network address for the virtual service; compares the virtual service network address in the request with the virtual service network address in each of a plurality of packet forwarding policies; in response to finding a match between the virtual service network address in the request and a given virtual service network address in a given packet forwarding policy, determines the given destination in the given packet forwarding policy; and sends the request to a service load balancer in the pool of service load balancers associated with the given destination, where the service load balancer establishes a virtual service session with the client device.

Claims

1. A method for providing forwarding policies in a virtual service network, the virtual service network comprising a network node and a pool of service load balancers serving a virtual service associated with a virtual service network address, comprising:

receiving a virtual service session request from a client device by the network node, the virtual service session request comprising the virtual service network address for the virtual service served by the pool of service load balancers, wherein the network node comprises a plurality of packet forwarding policies, each packet forwarding policy comprising a virtual service network address associated with a destination;

comparing by the network node the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy;

in response to finding a match between the virtual service network address in the virtual service session request and a given virtual service network address in a given packet forwarding policy, determining the given destination in the given packet forwarding policy by the network node; and

sending the virtual service session request to a service load balancer in the pool of service load balancers associated with the given destination, wherein the service load balancer establishes a virtual service session with the client device.

2. The method of claim 1, wherein after the service load balancer establishes the virtual service session with the client device, the method further comprises:

receiving a virtual service request from the client device through the virtual service session by the network node, the virtual service request comprising the virtual service network address for the virtual service;

comparing by the network node the second virtual service network address in the virtual service request with the virtual service network address in each packet forwarding policy;

in response to finding a match between the virtual service network address in the virtual service request and a second given virtual service network address in a second given packet forwarding policy, determining a second given destination in the second given packet forwarding policy by the network node; and

sending the virtual service request to a second service load balancer associated with the second given destination by the network node.

3. The method of claim 2, further comprising:

receiving a virtual service data packet from the client device through the virtual service session by the network node, the virtual service data packet comprising the virtual service network address for the virtual service;

comparing by the network node the virtual service network address in the virtual service data packet with the virtual service network address in each packet forwarding policy;

in response to finding a match between the virtual service network address in the virtual service data packet and a third given virtual service network address in a third given packet forwarding policy, determining a third given destination in the third given packet forwarding policy by the network node; and

sending the virtual service data packet to a third service load balancer associated with the third given destination by the network node.

4. The method of claim 3, wherein the service load balancer, the second service load balancer, and the third service load balancer are the same service load balancer.

5. The method of claim 1, the method further comprises:

receiving a data packet of the virtual service session by the network node from the service load balancer over a data network, the data packet comprising a client network address of the client device;

retrieving the client network address from the data packet by the network node; and

sending the data packet to the client device using the client network address by the network node.

6. The method of claim 5, wherein the data packet comprises a virtual service session request response or a virtual service request response.

7. The method of claim 1, wherein the given destination comprises a second network node, wherein the sending the virtual service session request to a service load balancer in the pool of service load balancers associated with the given destination comprises:

sending the virtual service session request to the second network node, wherein the second network node comprises a second plurality of packet forwarding policies, each of the second plurality of packet forwarding policies comprising a second virtual service network address associated with a second destination;

comparing by the second network node the virtual service network address in the virtual service session request with the virtual service network address in each of the second plurality of packet forwarding policies;

in response to finding a match between the virtual service network address in the virtual service session request and a second given virtual service network address in a second given packet forwarding policy, determining a second given destination in the second given packet forwarding policy by the second network node; and

sending the virtual service session request to the service load balancer associated with the second given destination, wherein the service load balancer establishes a virtual service session with the client device.

8. The method of claim 1, wherein the determining the given destination in the given packet forwarding policy by the network node comprises:

finding by the network node that the virtual service network address in the virtual service session request matches a first virtual service network address in a first packet forwarding policy and a second virtual service network address in a second packet forwarding policy;

selecting by the network node either the first packet forwarding policy or the second packet forwarding policy based on additional information comprised in the first and second packet forwarding policies; and

determining the given destination in the selected packet forwarding policy by the network node.

9. The method of claim 8, wherein the additional information comprises one or more of the following:

a multi-path factor; and

a traffic policy.

10. The method of claim 8, wherein the first packet forwarding policy comprises a first destination associated with a first service load balancer in the pool of service load balancers, wherein the second packet forwarding policy comprises a second destination associated with a second service load balancer in the pool of service load balancers, wherein the first service load balancer is different from the second service load balancer, wherein the determining the given destination in the selected packet forwarding policy by the network node comprises:

in response to selecting the first packet forwarding policy, determining the first destination associated with the first service load balancer in the first packet forwarding policy by the network node; and

in response to selecting the second packet forwarding policy, determining the second destination associated with the second service load balancer in the second packet forwarding policy by the network node.

11. The method of claim 1, wherein the network node comprises a first plurality of packet forwarding policies for a first virtual service and a second plurality of packet forwarding policies for a second virtual service, wherein the comparing by the network node the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy comprises:

determining by the network node whether the virtual service session request is for the first virtual service or the second virtual service;

in response to determining that the virtual service session request is for the first virtual service, comparing by the network node the virtual service network address in the virtual service session request with a virtual service network address in each of the first plurality of packet forwarding policies; and

in response to determining that the virtual service session request is for the first virtual service, comparing by the network node the virtual service network address in the virtual service session request with a virtual service network address in each of the second plurality of packet forwarding policies.

12. The method of claim 1, wherein the virtual service session request further comprises a client network address of the client device, wherein each packet forwarding policy further comprises a client network address associated with the destination, wherein the comparing by the network node the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy and the determining the given destination in the given packet forwarding policy by the network node comprise:

comparing by the network node the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy;

comparing by the network node the client network address in the virtual service session request with the client network address in each packet forwarding policy; and

in response to finding the match between the virtual service network address in the virtual service session request and the given virtual service network address in the given packet forwarding policy, and in response to finding a match between the client network address in the virtual service session request and the given client network address in the given packet forwarding policy, determining the given destination in the given packet forwarding policy by the network node.

13. A non-transitory computer readable storage medium having computer readable program code embodied therewith for providing forwarding policies in a virtual service network, the virtual service network comprising a network node and a pool of service load balancers serving a virtual service associated with a virtual service network address, the computer readable program code configured to:

receive a virtual service session request from a client device, the virtual service session request comprising the virtual service network address for the virtual service served by the pool of service load balancers, wherein the network node comprises a plurality of packet forwarding policies, each packet forwarding policy comprising a virtual service network address associated with a destination;

compare the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy;

in response to finding a match between the virtual service network address in the virtual service session request and a given virtual service network address in a given packet forwarding policy, determine the given destination in the given packet forwarding policy; and

send the virtual service session request to a service load balancer in the pool of service load balancers associated with the given destination, wherein the service load balancer establishes a virtual service session with the client device.

14. The medium of claim 13, wherein the computer readable program code is further configured to, after the service load balancer establishes the virtual service session with the client device:

receive a virtual service request from the client device through the virtual service session, the virtual service request comprising the virtual service network address for the virtual service;

compare the second virtual service network address in the virtual service request with the virtual service network address in each packet forwarding policy;

in response to finding a match between the virtual service network address in the virtual service request and a second given virtual service network address in a second given packet forwarding policy, determine a second given destination in the second given packet forwarding policy; and

send the virtual service request to a second service load balancer associated with the second given destination.

15. The medium of claim 14, wherein the computer readable program code is further configured to:

receive a virtual service data packet from the client device through the virtual service session, the virtual service data packet comprising the virtual service network address for the virtual service;

compare the virtual service network address in the virtual service data packet with the virtual service network address in each packet forwarding policy;

in response to finding a match between the virtual service network address in the virtual service data packet and a third given virtual service network address in a third given packet forwarding policy, determine a third given destination in the third given packet forwarding policy; and

send the virtual service data packet to a third service load balancer associated with the third given destination.

16. The medium of claim 15, wherein the service load balancer, the second service load balancer, and the third service load balancer are the same service load balancer.

17. The medium of claim 13, wherein the computer readable program code is further configured to:

receive a data packet of the virtual service session from the service load balancer over a data network, the data packet comprising a client network address of the client device;

retrieve the client network address from the data packet; and

send the data packet to the client device using the client network address.

18. The medium of claim 17, wherein the data packet comprises a virtual service session request response or a virtual service request response.

19. The medium of claim 13, wherein the given destination comprises a network node, wherein the computer readable program code configured to send the virtual service session request to a service load balancer in the pool of service load balancers associated with the given destination is further configured to:

send the virtual service session request to the network node, wherein the network node comprises a second plurality of packet forwarding policies, each of the second plurality of packet forwarding policies comprising a second virtual service network address associated with a second destination;

compare by the network node the virtual service network address in the virtual service session request with the virtual service network address in each of the second plurality of packet forwarding policies by the second network node;

in response to finding a match between the virtual service network address in the virtual service session request and a second given virtual service network address in a second given packet forwarding policy, determine a second given destination in the second given packet forwarding policy; and

send the virtual service session request to the service load balancer associated with the second given destination, wherein the service load balancer establishes a virtual service session with the client device.

20. The medium of claim 13, wherein the computer readable program code configured to determine the given destination in the given packet forwarding policy is further configured to:

find that the virtual service network address in the virtual service session request matches a first virtual service network address in a first packet forwarding policy and a second virtual service network address in a second packet forwarding policy;

select either the first packet forwarding policy or the second packet forwarding policy based on additional information comprised in the first and second packet forwarding policies; and

determine the given destination in the selected packet forwarding policy.

21. The medium of claim 20, wherein the additional information comprises one or more of the following:

a multi-path factor; and

a traffic policy.

22. The medium of claim 20, wherein the first packet forwarding policy comprises a first destination associated with a first service load balancer in the pool of service load balancers, wherein the second packet forwarding policy comprises a second destination associated with a second service load balancer in the pool of service load balancers, wherein the first service load balancer is different from the second service load balancer, wherein the computer readable program code configured to determine the given destination in the selected packet forwarding policy is further configured to:

in response to selecting the first packet forwarding policy, determine the first destination associated with the first service load balancer in the first packet forwarding policy; and

in response to selecting the second packet forwarding policy, determine the second destination associated with the second service load balancer in the second packet forwarding policy.

23. The medium of claim 13, comprising a first plurality of packet forwarding policies for a first virtual service and a second plurality of packet forwarding policies for a second virtual service, wherein the computer readable program code configured to compare the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy is further configured to:

determine whether the virtual service session request is for the first virtual service or the second virtual service;

in response to determining that the virtual service session request is for the first virtual service, compare the virtual service network address in the virtual service session request with a virtual service network address in each of the first plurality of packet forwarding policies; and

in response to determining that the virtual service session request is for the second virtual service, compare the virtual service network address in the virtual service session request with a virtual service network address in each of the second plurality of packet forwarding policies.

24. The medium of claim 13, wherein the virtual service session request further comprises a client network address of the client device, wherein each packet forwarding policy further comprises a client network address associated with the destination, wherein the computer readable program code configured to compare the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy and to determine the given destination in the given packet forwarding policy are further configured to:

compare the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy;

compare the client network address in the virtual service session request with the client network address in each packet forwarding policy; and

in response to finding the match between the virtual service network address in the virtual service session request and the given virtual service network address in the given packet forwarding policy, and in response to finding a match between the client network address in the virtual service session request and the given client network address in the given packet forwarding policy, determine the given destination in the given packet forwarding policy.

25. A virtual service network, comprising:

a pool of service load balancers serving a virtual service associated with a virtual service network address; and

a network node comprising a plurality of packet forwarding policies, each packet forwarding policy comprising a virtual service network address associated with a destination, wherein the network node;

receives a virtual service session request from a client device, the virtual service session request comprising a virtual service network address for the virtual service served by the pool of service load balancers, wherein the network node;

compares the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy;

in response to finding a match between the virtual service network address in the virtual service session request and a given virtual service network address in a given packet forwarding policy, determines the given destination in the given packet forwarding policy; and

sends the virtual service session request to a service load balancer in the pool of service load balancers associated with the given destination, wherein the service load balancer establishes a virtual service session with the client device.

26. The network of claim 25, wherein after the service load balancer establishes the virtual service session with the client device, the network node further:

receives a virtual service request from the client device through the virtual service session, the virtual service request comprising the virtual service network address for the virtual service;

compares the second virtual service network address in the virtual service request with the virtual service network address in each packet forwarding policy;

in response to finding a match between the virtual service network address in the virtual service request and a second given virtual service network address in a second given packet forwarding policy, determines a second given destination in the second given packet forwarding policy; and

sends the virtual service request to a second service load balancer associated with the second given destination.

27. The network of claim 26, wherein the network node further:

receives a virtual service data packet from the client device through the virtual service session, the virtual service data packet comprising the virtual service network address for the virtual service;

compares the virtual service network address in the virtual service data packet with the virtual service network address in each packet forwarding policy;

in response to finding a match between the virtual service network address in the virtual service data packet and a third given virtual service network address in a third given packet forwarding policy, determines a third given destination in the third given packet forwarding policy; and

sends the virtual service data packet to a third service load balancer associated with the third given destination.

28. The network of claim 27, wherein the service load balancer, the second service load balancer, and the third service load balancer are the same service load balancer.

29. The network of claim 25, wherein the network node further:

receives a data packet of the virtual service session from the service load balancer over a data network, the data packet comprising a client network address of the client device;

retrieves the client network address from the data packet; and

sends the data packet to the client device using the client network address.

30. The network of claim 29, wherein the data packet comprises a virtual service session request response or a virtual service request response.

31. The network of claim 25, further comprising a second network node, wherein the given destination is associated with the second network node, wherein in the sending the virtual service session request to a service load balancer in the pool of service load balancers associated with the given destination, the network node further:

sends the virtual service session request to the second network node, wherein the second network node comprises a second plurality of packet forwarding policies, each of the second plurality of packet forwarding policies comprising a second virtual service network address associated with a second destination;

wherein the second network node;

compares the virtual service network address in the virtual service session request with the virtual service network address in each of the second plurality of packet forwarding policies;

in response to finding a match between the virtual service network address in the virtual service session request and a second given virtual service network address in a second given packet forwarding policy, determines a second given destination in the second given packet forwarding policy; and

sends the virtual service session request to the service load balancer associated with the second given destination, wherein the service load balancer establishes a virtual service session with the client device.

32. The network of claim 25, wherein in the determining, the network node further:

finds that the virtual service network address in the virtual service session request matches a first virtual service network address in a first packet forwarding policy and a second virtual service network address in a second packet forwarding policy;

selects either the first packet forwarding policy or the second packet forwarding policy based on additional information comprised in the first and second packet forwarding policies; and

determines the given destination in the selected packet forwarding policy.

33. The network of claim 32, wherein the additional information comprises one or more of a multi-path factor and a traffic policy.

34. The network of claim 32, wherein the first packet forwarding policy comprises a first destination associated with a first service load balancer in the pool of service load balancers, wherein the second packet forwarding policy comprises a second destination associated with a second service load balancer in the pool of service load balancers, wherein the first service load balancer is different from the second service load balancer, wherein in the determining the given destination in the selected packet forwarding policy, the network node:

in response to selecting the first packet forwarding policy, determines the first destination associated with the first service load balancer in the first packet forwarding policy; and

in response to selecting the second packet forwarding policy, determines the second destination associated with the second service load balancer in the second packet forwarding policy.

35. The network of claim 25, wherein the network node comprises a first plurality of packet forwarding policies for a first virtual service and a second plurality of packet forwarding policies for a second virtual service, wherein in the comparing the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy, the network node:

determines whether the virtual service session request is for the first virtual service or the second virtual service;

in response to determining that the virtual service session request is for the first virtual service, compares the virtual service network address in the virtual service session request with a virtual service network address in each of the first plurality of packet forwarding policies; and

in response to determining that the virtual service session request is for the second virtual service, compares the virtual service network address in the virtual service session request with a virtual service network address in each of the second plurality of packet forwarding policies.

36. The network of claim 25, wherein the virtual service session request further comprises a client network address of the client device, wherein each packet forwarding policy further comprises a client network address associated with the destination, wherein in comparing the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy and determining the given destination in the given packet forwarding policy, the network node:

compares the virtual service network address in the virtual service session request with the virtual service network address in each packet forwarding policy;

compares the client network address in the virtual service session request with the client network address in each packet forwarding policy; and

in response to finding the match between the virtual service network address in the virtual service session request and the given virtual service network address in the given packet forwarding policy, and in response to finding a match between the client network address in the virtual service session request and the given client network address in the given packet forwarding policy, determines the given destination in the given packet forwarding policy.

37. A method for providing forwarding policies in a virtual service network, the virtual service network comprising a network node and a pool of service load balancers serving a virtual service associated with a virtual service network address, comprising:

receiving a virtual service session request from a client device by the network node, the virtual service session request comprising a client device network address for the client device and the virtual service network address for the virtual service served by the pool of service load balancers, wherein the network node comprises a plurality of packet forwarding policies, each packet forwarding policy comprising a client network address and a virtual service network address associated with a destination;

comparing by the network node the virtual service network address in the virtual service session request with a first virtual service network address in a first packet forwarding policy of the plurality of packet forwarding policies, and comparing the client device network address in the virtual service session request with a first client network address in the first packet forwarding policy;

in response to determining that the virtual service network address in the virtual service session request matches the first virtual service network address, and determining that the client device network address in the virtual service session request does not match the first client network address, determining by the network node that the first packet forwarding policy does not apply to the virtual service session request;

in response to determining that the first packet forwarding policy does not apply, comparing by the network node the virtual service network address in the virtual service session request with a second virtual service network address in a second packet forwarding policy of the plurality of packet forwarding policies, and comparing the client device network address in the virtual service session request with a second client network address in the second packet forwarding policy;

in response to determining that the virtual service network address in the virtual service session request matches the second virtual service network address, and determining that the client device network address in the virtual service session request matches the second client network address, determining by the network node that the second packet forwarding policy applies to the virtual service session request;

in response to determining that the second packet forwarding policy applies, determining a given destination in the second packet forwarding policy by the network node; and

sending the virtual service session request to a service load balancer in the pool of service load balancers associated with the given destination, wherein the service load balancer establishes a virtual service session with the client device.