System for steering data packets in communication network

• US 9,473,396 B1
• Filed: 05/06/2015
• Issued: 10/18/2016
• Est. Priority Date: 05/06/2015
• Status: Active Grant

• Current Assignee: NXP USA, Inc. (NXP Semiconductors NV)
• Original Assignee: Freescale Semiconductor, Inc. (NXP Semiconductors NV)
• Inventors: Addepalli, Srinivasa R., Padnala, Balaji, Nittala, Satya Srinivasa Murthy
• Primary Examiner(s): Ho, Duc C
• Application Number:
  US14/704,988
• Publication Number:
  US 20160330110A1
• Time in Patent Office: 531 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/38 Flow based routing
• CPC Class Codes: H04L 45/566 Routing instructions carried by the data packet, e.g. active networks

Abstract

A system for steering data packets in a communication network that includes compute nodes having processors for executing application and service virtual machines (VMs), and traffic steering accelerators. A virtual local area network-identifier (VLAN-ID) assignment module generates records and associates the records with the service VMs. Each record includes an input VLAN-ID, an output VLAN-ID, and a port number corresponding to one of the service VMs. A service-chaining module generates chaining rules associated with n-Tuples. A traffic steering controller generates a chain of the records based on the service chaining rules. The traffic steering accelerator then steers the data packets based on the input and output VLAN-IDs included in the data packet.

Claims

1. A system for steering data packets in a communication network, the system comprising:

a plurality of compute nodes having a corresponding plurality of processors for executing a plurality of application and service virtual machines (VMs) and a corresponding plurality of traffic steering accelerators, wherein a first compute node includes;

a first processor configured for executing a first application VM and a first set of service VMs, wherein the first application VM outputs a first data packet; and

a first traffic steering accelerator connected to the first processor for receiving the first data packet;

a virtual local area network-identifier (VLAN-ID) assignment module for generating a plurality of records and associating the plurality of records with the plurality of service VMs, wherein each record includes a VLAN-ID set and a port number of a corresponding service VM, and wherein the VLAN-ID set includes input and output VLAN-IDs of the corresponding service VM;

a service-chaining module connected to the VLAN-ID assignment module for receiving the plurality of records and generating a plurality of service chaining rules associated with a plurality of n-Tuples configured for the plurality of application VMs; and

a traffic steering controller connected to the first traffic steering accelerator for receiving the first data packet, and to the service-chaining module for receiving the plurality of service chaining rules and the corresponding plurality of records, sequencing the plurality of records based on the plurality of service chaining rules for generating a plurality of chained records, and outputting a first chain of the chained records corresponding to a first n-Tuple based on the first data packet, wherein the first traffic steering accelerator receives the first chain of chained records and is configured to perform the steps of;

retrieving a first record of the first chain of chained records;

retrieving a first input VLAN-ID of the first record;

adding the first input VLAN-ID to the first data packet; and

transmitting the first data packet to at least one of a first service VM and a second traffic steering accelerator based on the first input VLAN-ID.

2. The system of claim 1, wherein the VLAN-ID assignment module stores a mapping between a plurality of port numbers corresponding to the plurality of service VMs, a corresponding plurality of virtual networks, and a corresponding plurality of VLAN-ID sets in a first memory.

3. The system of claim 1, wherein each n-Tuple comprises a 5-Tuple that includes a source internet protocol (IP) address, a destination IP address, a source port number, a destination port number, and protocol information of a corresponding one of the application VMs.

4. The system of claim 1, wherein the traffic steering controller comprises an OpenFlow controller and each traffic steering accelerator comprises an OpenFlow switch.

5. The system of claim 1, wherein the VLAN-ID assignment module provides a first set of the records to the first processor, wherein the first set of records corresponds to the first set of service VMs.

6. The system of claim 5, wherein the first processor further executes a network service configuration module for configuring VLAN interfaces of the first set of service VMs based on the corresponding first set of records.

7. The system of claim 6, wherein the first service VM is configured for:

receiving the first record from the VLAN-ID assignment module, wherein the first record includes the first input VLAN-ID, a first output VLAN-ID, and a first port number,

receiving the first data packet from the first traffic steering accelerator,

removing the first input VLAN-ID from the first data packet,

processing the first data packet with a first service function,

adding the first output VLAN-ID to the first data packet, and

transmitting the first data packet to the first traffic steering accelerator.

8. The system of claim 7, wherein the first traffic steering accelerator further:

removes the first output VLAN-ID added to the first data packet,

identifies the first record of the first chain of records based on the first output VLAN-ID,

determines a second record from the first chain of records subsequent to the first record,

determines a second input VLAN-ID of the second record,

adds the second input VLAN-ID to the first data packet, and

transmits the first data packet to at least one of the first set of service VMs and the second traffic steering accelerator based on the second input VLAN-ID.

9. The system of claim 8, wherein a second compute node includes a second processor and the second traffic steering accelerator, and wherein the second processor executes a second application VM and a second set of service VMs.

10. The system of claim 9, wherein the second traffic steering accelerator is configured for:

receiving the first data packet from the first traffic steering accelerator,

providing the first data packet to the traffic steering controller,

receiving the first chain of records from the traffic steering controller,

retrieving the second record from the first chain of records based on the second input VLAN-ID of the first data packet, and

transmitting the first data packet to a second service VM of the second set of service VMs based on the second input VLAN-ID.

11. The system of claim 10, wherein the first traffic steering accelerator transmits the first data packet to the second traffic steering accelerator using a network overlay protocol.

12. The system of claim 11, wherein the second service VM is configured for:

receiving the second record from the VLAN-ID assignment module, wherein the second record includes the second input VLAN-ID, a second output VLAN-ID, and a second port number,

receiving the first data packet from the second traffic steering accelerator,

removing the second input VLAN-ID added to the first data packet,

processing the first data packet with a second service function,

adding the second output VLAN-ID to the first data packet, and

transmitting the first data packet to the second traffic steering accelerator.

13. The system of claim 12, wherein the second traffic steering accelerator further receives the first data packet from the second service VM and transmits the first data packet to the second application VM based on the second output VLAN-ID and the first chain of records.

14. A method for steering data packets in a communication network that includes a virtual local area network identifier (VLAN-ID) assignment module, a service-chaining module, a traffic steering controller, and a plurality of compute nodes having a corresponding plurality of processors for executing a plurality of application and service virtual machines (VMs) and a corresponding plurality of traffic steering accelerators, wherein a first one of the compute nodes includes a first processor and a first one of the traffic steering accelerators, the method comprising:

generating a plurality of records by the VLAN-ID assignment module, wherein each of the records includes a VLAN-ID set and a port number of a corresponding one of the service VMs, and wherein the VLAN-ID set includes input and output VLAN-IDs of the corresponding service VM;

associating the plurality of records with the plurality of service VMs;

receiving the plurality of records at the service-chaining module;

generating a plurality of service chaining rules associated with a plurality of n-Tuples configured for the plurality of application VMs;

receiving the service chaining rules and the corresponding plurality of records at the traffic steering controller;

sequencing the plurality of records based on the plurality of service chaining rules for generating a plurality of chained records;

executing a first one of the application VMs and a first set of the service VMs by the first processor, wherein the first application VM outputs a first one of the data packets;

receiving the first data packet at the first traffic steering accelerator;

providing the first data packet to the traffic steering controller;

providing a first chain of the chained records corresponding to a first one of the n-Tuples based on the first data packet to the first traffic steering accelerator;

retrieving a first record of the first chain;

retrieving a first input VLAN-ID of the first record;

adding the first input VLAN-ID to the first data packet; and

transmitting the first data packet to at least one of a first one of the service VMs and a second one of the traffic steering accelerators based on the first input VLAN-ID.

15. The method of claim 14, further comprising:

receiving the first record from the VLAN-ID assignment module at the first service VM, wherein the first record includes the first input VLAN-ID, a first output VLAN-ID, and a first port number;

receiving the first data packet from the first traffic steering accelerator;

removing the first input VLAN-ID from the first data packet;

processing the first data packet with a first service function;

adding the first output VLAN-ID to the first data packet; and

transmitting the first data packet to the first traffic steering accelerator.

16. The method of claim 15, further comprising:

removing the first output VLAN-ID added to the first data packet by the first traffic steering accelerator;

identifying the first record based on the first output VLAN-ID;

identifying a second record of the first chain;

determining a second input VLAN-ID of the second record;

adding the second input VLAN-ID to the first data packet; and

transmitting the first data packet to at least one of the first set of service VMs and the second traffic steering accelerator based on the second input VLAN-ID.

17. The method of claim 16, further comprising executing a second application VM and a second set of service VMs by a second one of the processors of a second one of the compute nodes, wherein the second compute node includes the second traffic steering accelerator.

18. The method of claim 17, further comprising:

receiving the first data packet from the first traffic steering accelerator at the second traffic steering accelerator using a network overlay protocol;

providing the first data packet to the traffic steering controller;

receiving the first chain of the chained records from the traffic steering controller;

retrieving the second record from the first chain based on the second input VLAN-ID of the first data packet; and

transmitting the first data packet to the second service VM of the second set of service VMs based on the second input VLAN-ID.

19. The method of claim 18, further comprising:

receiving the second record at the second service VM, wherein the second record includes the second input VLAN-ID, a second output VLAN-ID, and a second port number;

receiving the first data packet from the second traffic steering accelerator;

removing the second input VLAN-ID added to the first data packet;

processing the first data packet with a second service function;

adding the second output VLAN-ID to the first data packet; and

transmitting the first data packet to the second traffic steering accelerator.

20. The method of claim 19, further comprising:

receiving the first data packet at the second traffic steering accelerator; and

transmitting the first data packet to the second application VM based on the second output VLAN-ID and the first chain of the chained records.