Distributed service chaining in a network environment

• US 9,407,540 B2
• Filed: 09/06/2013
• Issued: 08/02/2016
• Est. Priority Date: 09/06/2013
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Kumar, Surendra M., Devireddy, Dileep K., Bagepalli, Nagaraj A., Patra, Abhijit
• Primary Examiner(s): Etienne, Ario
• Assistant Examiner(s): Halim, Sahera
• Application Number:
  US14/020,649
• Publication Number:
  US 20150071285A1
• Time in Patent Office: 1,061 Days
• Field of Search: 709/238
• US Class Current: 1/1
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 45/54 Organization of routing tables

Abstract

An example method for distributed service chaining in a network environment is provided and includes receiving a packet belonging to a service chain in a distributed virtual switch (DVS) network environment, wherein the packet includes a network service header (NSH) indicating a service path identifier identifying the service chain and a location of the packet on the service chain, evaluating a service forwarding table to determine a next service node based on the service path identifier and the location, with a plurality of different forwarding tables distributed across the DVS at a corresponding plurality of virtual Ethernet Modules (VEMs) associated with respective service nodes in the service chain, and forwarding the packet to the next service node, with substantially all services in the service chain provided sequentially to the packet in a single service loop on a service overlay.

Claims

1. A method, comprising:

receiving a packet belonging to a service chain in a distributed virtual switch (DVS) network environment, wherein the packet includes a network service header (NSH) indicating a service path identifier identifying the service chain and a location of the packet on the service chain;

evaluating a service forwarding table configured by a service controller for a next service node based on the service path identifier and the location, wherein a plurality of different forwarding tables are distributed across the DVS at a corresponding plurality of virtual Ethernet Modules (VEMs) associated with respective service nodes in the service chain, wherein the service controller configures the service forwarding table at a first VEM when the service chain is instantiated at a second VEM, wherein the first VEM makes an independent forwarding decision based at least on the service forwarding table at the first VEM, and the service path identifier and the location indicated in the NSH of the packet; and

forwarding the packet to the next service node, wherein substantially all services in the service chain are provided sequentially to the packet in a single service loop on a service overlay.

2. The method of claim 1, wherein the second VEM comprises a classifier VEM attached to a workload that forms an initial node of the service chain.

3. The method of claim 1, wherein the service controller discovers the service nodes associated with the service chain, wherein the service controller configures the service forwarding tables at the corresponding VEMs associated with the respective service nodes.

4. The method of claim 1, wherein the service controller assigns the service path identifier to the service chain.

5. The method of claim 1, wherein if the next service node does not include an agent, the packet is forwarded without the NSH.

6. The method of claim 1, wherein if the next service node includes an agent, the packet is forwarded with the NSH.

7. The method of claim 1, wherein if the packet is received from an agent-less service node, the service forwarding table is looked up to determine the service path identifier and the location.

8. The method of claim 1 wherein the service path identifier is a 24 bit value, and the location is specified by an 8 bit long service index.

9. Non-transitory tangible media that includes instructions for execution, which when executed by a processor, is operable to perform operations comprising:

receiving a packet belonging to a service chain in a DVS network environment, wherein the packet includes a NSH indicating a service path identifier identifying the service chain and a location of the packet on the service chain;

evaluating a service forwarding table configured by a service controller for a next service node based on the service path identifier and the location, wherein a plurality of different forwarding tables are distributed across the DVS at a corresponding plurality of VEMs associated with respective service nodes in the service chain, wherein the service controller configures the service forwarding table at a first VEM when the service chain is instantiated at a second VEM, wherein the first VEM makes an independent forwarding decision based at least on the service forwarding table at the first VEM, and the service path identifier and the location indicated in the NSH of the packet; and

forwarding the packet to the next service node, wherein substantially all services in the service chain are provided sequentially to the packet in a single service loop on a service overlay.

10. The media of claim 9, wherein the service controller assigns the service path identifier to the service chain.

11. The media of claim 9, wherein the service path identifier is a 24 bit value, and the location is specified by an 8 bit long service index.

12. The media of claim 9, wherein the service controller discovers the service nodes associated with the service chain, wherein the service controller configures the service forwarding tables at the corresponding VEMs associated with the respective service nodes.

13. The media of claim 9, wherein if the next service node does not include an agent, the packet is forwarded without the NSH.

14. The media of claim 9, wherein if the next service node includes an agent, the packet is forwarded with the NSH.

15. An apparatus, comprising:

a VEM in a DVS network environment, wherein the VEM includes a memory element for storing data, and a processor, wherein the processor executes instructions associated with the data, wherein the processor and the memory element cooperate, such that the apparatus is configured for;

receiving a packet belonging to a service chain in a DVS network environment, wherein the packet includes a NSH indicating a service path identifier identifying the service chain and a location of the packet on the service chain;

evaluating a service forwarding table configured by a service controller for a next service node based on the service path identifier and the location, wherein a plurality of different forwarding tables are distributed across the DVS at a corresponding plurality of VEMs associated with respective service nodes in the service chain, wherein the service controller configures the service forwarding table at a first VEM when the service chain is instantiated at a second VEM, wherein the first VEM makes an independent forwarding decision based at least on the service forwarding table at the first VEM, and the service path identifier and the location indicated in the NSH of the packet; and

forwarding the packet to the next service node, wherein substantially all services in the service chain are provided sequentially to the packet in a single service loop on a service overlay.

16. The apparatus of claim 15, wherein the service controller assigns the service path identifier to the service chain.

17. The apparatus of claim 15, wherein the service path identifier is a 24 bit value, and the location is specified by an 8 bit long service index.

18. The apparatus of claim 15, wherein the service controller discovers the service nodes associated with the service chain, wherein the service controller configures the service forwarding tables at the corresponding VEMs associated with the respective service nodes.

19. The apparatus of claim 15, wherein if the next service node does not include an agent, the packet is forwarded without the NSH.

20. The apparatus of claim 15, wherein if the next service node includes an agent, the packet is forwarded with the NSH.