Scalable network configuration with consistent updates in software defined networks

• US 9,350,607 B2
• Filed: 09/25/2013
• Issued: 05/24/2016
• Est. Priority Date: 09/25/2013
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Agarwal, Kanak B., Carter, John B., Dixon, Colin K., Felter, Wesley M., Stephens, Brent E.
• Primary Examiner(s): Daftuar, Saket K
• Application Number:
  US14/036,894
• Publication Number:
  US 20150089032A1
• Time in Patent Office: 972 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/0873 Checking configuration conflicts between network elements
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 41/5096 wherein the managed service relates to distributed or central networked applications
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/5038 for local use, e.g. in LAN or USB networks, or in a controller area network [CAN]

Abstract

Mechanisms are provided for configuring a data flow between a source device and a destination device in a network. The mechanisms receive, from a network control application, a request to establish a network configuration corresponding to a data flow between the source device and the destination device. The request comprises a fine grained header field tuple for defining the data flow. The mechanisms allocate, from a shadow address pool, a shadow address to be mapped to the fine grained header field tuple. The shadow address pool comprises addresses not being used by devices coupled to the network. The mechanisms configure a network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address.

Claims

1. A method, in a data processing system comprising a processor and a memory, for configuring a portion of a network corresponding to a data flow between a source device and a destination device in the network, the method comprising:

receiving, by the processor from a network control application, a request to establish a network configuration corresponding to the data flow between the source device and the destination device, wherein the request comprises a fine grained header field tuple for defining the data flow and wherein the fine grained header field tuple comprises a destination address and at least one of a source address, a source port, a destination port, and a protocol;

allocating, by the processor from a shadow address pool, a shadow address to be mapped to the fine grained header field tuple, wherein the shadow address pool comprises addresses not being used by devices coupled to the network and wherein the shadow address replaces the destination address for the destination device in the data flow;

configuring, by the processor, a network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address, wherein configuring the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address comprises;

configuring, by the processor, the source device to use the shadow address as the destination address in data packets transmitted by the source device; and

configuring, by the processor, the destination device to process data packets having a destination address corresponding to the shadow address; and

forwarding, by the processor, one or more data packets in the data flow from the source device to the destination device using the shadow address for the destination device.

2. The method of claim 1, wherein configuring the source device to use the shadow address as the destination address comprises transmitting to the source device an Address Resolution Protocol (ARP) message indicating to the source device that the destination address for the destination device has changed to the shadow address.

3. The method of claim 1, wherein configuring the destination device to process data packets having a destination address corresponding to the shadow address comprises configuring a network adapter of the destination device to be in a promiscuous mode of operation.

4. The method of claim 1, wherein configuring the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address comprises:

deploying, by the processor at a source edge switch, a first rule to replace, in headers of data packets belonging to the data flow, a destination address corresponding to the destination address of the destination device with the shadow address; and

deploying, by the processor at a destination edge switch, a second rule to replace, in headers of data packets belonging to the data flow, the shadow address to the destination address of the destination device.

5. The method of claim 4, wherein at least one of the source edge switch or the destination edge switch is a virtual switch in a hypervisor.

6. The method of claim 1, wherein configuring the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address comprises:

prior to receiving the request, pre-configuring, by the processor, switches in the network infrastructure with pre-configured matching rules based on the shadow address; and

enabling, by the processor, utilizing of the pre-configured matching rules in the switches of the network infrastructure by configuring the source device to use the shadow address as the destination address for the destination device.

7. The method of claim 1, wherein the shadow address is a shadow Media Access Control (MAC) address and the shadow address pool is a pool of shadow MAC addresses.

8. The method of claim 1, wherein configuring the network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address comprises:

deploying, by the processor to switches of the network infrastructure, one or more matching rules specifying the shadow address as a matching condition of the matching rules, and a corresponding action to be performed on data packets having the shadow address as a destination address in the headers of the data packets.

9. The method of claim 8, wherein, at each of the switches, the one or more matching rules are stored in a forwarding database stored in a low cost, high capacity storage device of the switch.

10. A computer program product comprising a non-transitory computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, executed on a computing device coupled to a network, causes the computing device to:

receive, from a network control application, a request to establish a network configuration corresponding to a data flow between a source device and a destination device, wherein the request comprises a fine grained header field tuple for defining the data flow and wherein the fine grained header field tuple comprises a destination address and at least one of a source address, a source port, a destination port, and a protocol;

allocate, from a shadow address pool, a shadow address to be mapped to the fine grained header field tuple, wherein the shadow address pool comprises addresses not being used by devices coupled to the network and wherein the shadow address replaces the destination address for the destination device in the data flow;

configure a network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address, wherein the computer readable program to configure the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address further causes the computing device to;

configure the source device to use the shadow address as the destination address in data packets transmitted by the source device; and

configure the destination device to process data packets having a destination address corresponding to the shadow address; and

forward one or more data packets in the data flow from the source device to the destination device using the shadow address for the destination device.

11. The computer program product of claim 10, wherein configuring the source device to use the shadow address as the destination address comprises transmitting to the source device an Address Resolution Protocol (ARP) message indicating to the source device that the destination address for the destination device has changed to the shadow address.

12. The computer program product of claim 10, wherein configuring the destination device to process data packets having a destination address corresponding to the shadow address comprises configuring a network adapter of the destination device to be in a promiscuous mode of operation.

13. The computer program product of claim 10, wherein the computer readable program causes the computing device to configure the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address at least by:

deploying, at a source edge switch, a first rule to replace, in headers of data packets belonging to the data flow, a destination address corresponding to the destination address of the destination device with the shadow address; and

deploying, at a destination edge switch, a second rule to replace, in headers of data packets belonging to the data flow, the shadow address to the destination address of the destination device.

14. The computer program product of claim 13, wherein at least one of the source edge switch or the destination edge switch is a virtual switch in a hypervisor.

15. The computer program product of claim 10, wherein the computer readable program causes the computing device to configure the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address at least by:

prior to receiving the request, pre-configuring switches in the network infrastructure with pre-configured matching rules based on the shadow address; and

enabling utilizing of the pre-configured matching rules in the switches of the network infrastructure by configuring the source device to use the shadow address as the destination address for the destination device.

16. The computer program product of claim 10, wherein the shadow address is a shadow Media Access Control (MAC) address and the shadow address pool is a pool of shadow MAC addresses.

17. The computer program product of claim 11, wherein the computer readable program causes the computing device to configuring the network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address at least by:

deploying, to switches of the network infrastructure, one or more matching rules specifying the shadow address as a matching condition of the matching rules, and a corresponding action to be performed on data packets having the shadow address as a destination address in the headers of the data packets.

18. An apparatus comprising:

a processor;

a memory coupled to the processor; and

a network interface that couples the apparatus to a network, wherein the memory comprises instructions executed by the processor that cause the processor to;

receive, from a network control application, a request to establish a network configuration corresponding to a data flow between a source device and a destination device, wherein the request comprises a fine grained header field tuple for defining the data flow and wherein the fine grained header field tuple comprises a destination address and at least one of a source address, a source port, a destination port, and a protocol;

allocate, from a shadow address pool, a shadow address to be mapped to the fine grained header field tuple, wherein the shadow address pool comprises addresses not being used by devices coupled to the network and wherein the shadow address replaces the destination address for the destination device in the data flow;

configure a network infrastructure of the network to route data packets of the data flow from the source device to the destination device based on the shadow address, wherein the instructions to configure the network infrastructure to route data packets of the data flow from the source device to the destination device based on the shadow address further causes the processor to;

configure the source device to use the shadow address as the destination address in data packets transmitted by the source device; and

configure the destination device to process data packets having a destination address corresponding to the shadow address; and

forward one or more data packets in the data flow from the source device to the destination device using the shadow address for the destination device.

19. The apparatus of claim 18, wherein configuring the source device to use the shadow address as the destination address comprises transmitting to the source device an Address Resolution Protocol (ARP) message indicating to the source device that the destination address for the destination device has changed to the shadow address.

20. The apparatus of claim 18, wherein configuring the destination device to process data packets having a destination address corresponding to the shadow address comprises configuring a network adapter of the destination device to be in a promiscuous mode of operation.