Switch management system and method

• US 9,509,588 B2
• Filed: 10/28/2013
• Issued: 11/29/2016
• Est. Priority Date: 09/13/2000
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Matthews, Abraham R., Berenberg, Anna
• Primary Examiner(s): Hussain, Tauqir
• Assistant Examiner(s): Keller, Michael A
• Application Number:
  US14/064,563
• Publication Number:
  US 20140059234A1
• Time in Patent Office: 1,128 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0233 Object-oriented techniques, for representation of network management data, e.g. common object request broker architecture [CORBA]
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/085 Retrieval of network configuration; Tracking network configuration history
• CPC Class Codes: H04L 41/0869 Validating the configuration within one network element
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 45/10 Routing in connection-oriented networks, e.g. X.25 or ATM

Abstract

Methods and systems for managing a service provider switch are provided. According to one embodiment, a method is provided for provisioning a switch with a network-based managed Internet Protocol (IP) service. A network operating system (NOS) is provided on each processor element (PE) of the switch. The NOS includes an object manager (OM) responsible for managing global software object groups, managing software object configurations, managing local software objects and groups and routing control information between address spaces based on locations of software objects. The OM performs management plane communications among software objects by way of system calls. The OM performs data plane communications among software objects by way of object-to-object channels. The switch is provisioned with a network-based managed IP service for a particular customer by pushing discrete and customized software objects representing the network-based managed IP service onto an object-to-object channel established between two of the software objects.

Claims

1. A method comprising:

providing a network operating system (NOS) on each processor element (PE) of a plurality of PEs of a switch;

establishing, via the NOS, a plurality of object groups, wherein each of the plurality of object groups corresponds to one of a plurality of virtual routers provided by the switch;

assigning, via the NOS, a plurality of software objects to each of the plurality of object groups, wherein each software object provides a discrete network service;

distributing, via the NOS, each of the plurality of software objects to at least one of the PEs;

providing, at the switch, discrete network services for the plurality of virtual routers according to the assigned plurality of software objects for each of the plurality of object groups;

determining, via the NOS, in response to a change in traffic through the switch that at least one discrete network service associated with a first of the plurality of software objects is not receiving a correct level of processing from a first PE of the plurality of PEs; and

dynamically redistributing, via the NOS, the first of the plurality of software objects from the first of the plurality of PEs to another of the plurality of PEs.

2. The method of claim 1, wherein the plurality of software objects comprises a managed security service object.

3. The method of claim 2, wherein the plurality of software objects comprises a managed firewall service object.

4. The method of claim 3, wherein the plurality of software objects comprises a managed virtual private network (VPN) object.

5. The method of claim 1, wherein determining that the at least one discrete network service is not receiving the correct level of processing comprises registering a failure of the first of the plurality of PEs.

6. The method of claim 1, further comprising:

configuring the NOS to assign a new a software object, wherein the new software object provides a new discrete network service;

assigning, via the NOS, the new software object to at least one of the plurality of object groups;

distributing, via the NOS, the new software object to at least one of the PEs; and

providing, at the switch, the new discrete network service.

7. The method of claim 1, further comprising recording the distribution of the plurality of software objects in a global database for the switch.

8. The method of claim 1, further comprising recording the distribution of the plurality of software objects to the at least one of the PEs in a local database for the at least one of the PEs.

9. The method of claim 1, further comprising establishing a new virtual router on the switch, wherein establishing the new virtual router comprises:

establishing, via the NOS, a new object group;

assigning, via the NOS, a plurality of software objects to the new object group; and

distributing, via the NOS, each of the plurality of software objects assigned to the new object group to at least one of the PEs.

10. A system comprising:

a plurality of processing elements (PEs), wherein one or more of the plurality of PEs is configured to;

provide a network operating system (NOS) on each PE;

establish, via the NOS, a plurality of object groups, wherein each of the plurality of object groups corresponds to one of a plurality of virtual routers;

assign, via the NOS, a plurality of software objects to each of the plurality of object groups, wherein each software object provides a discrete network service;

distribute, via the NOS, each of the plurality of software objects to at least one of the PEs;

provide discrete network services for the plurality of virtual routers according to the assigned plurality of software objects for each of the plurality of object groups;

determine, via the NOS, in response to a change in traffic through the system that at least one discrete network service associated with a first of the plurality of software objects is not receiving a correct level of processing from a first PE of the plurality of PEs; and

dynamically redistribute, via the NOS, the first of the plurality of software objects from the first of the plurality of PEs to another of the plurality of PEs.

11. The system of claim 10, wherein the one or more of the plurality of PEs is further configured to register a failure of the first of the plurality of PEs.

12. The system of claim 10, wherein the one or more of the plurality of PEs is further configured to:

configure the NOS to assign a new a software object, wherein the new software object provides a new discrete network service;

assign, via the NOS, the new software object to at least one of the plurality of object groups;

distribute, via the NOS, the new software object to at least one of the PEs; and

provide, at the switch, the new discrete network service.

13. The system of claim 10, further comprising a global database for the system, and wherein the one or more of the plurality of PEs is further configured to record the distribution of the plurality of software objects in the global database for the switch.

14. The system of claim 10, wherein the one or more of the plurality of PEs is further configured to assign, via the NOS, at least one of a managed security service object, a managed firewall service object, or a managed virtual private network (VPN) object.

15. A tangible, non-transitory computer readable medium comprising instructions that when executed by a processor cause the processor to:

provide a network operating system (NOS) on each processor element (PE) of a plurality of PEs of a switch;

establish, via the NOS, a plurality of object groups, wherein each of the plurality of object groups corresponds to one of a plurality of virtual routers provided by the switch;

assign, via the NOS, a plurality of software objects to each of the plurality of object groups, wherein each software object provides a discrete network service;

distribute, via the NOS, each of the plurality of software objects to at least one of the PEs;

provide discrete network services for the plurality of virtual routers according to the assigned plurality of software objects for each of the plurality of object groups;

determine, via the NOS, in response to a change in traffic through the switch that at least one discrete network service associated with a first of the plurality of software objects is not receiving a correct level of processing from a first PE of the plurality of PEs; and

dynamically redistribute, via the NOS, the first of the plurality of software objects from the first of the plurality of PEs to another of the plurality of PEs.

16. The computer readable medium of claim 15, wherein the instructions further cause the processor to register a failure of the first of the plurality of PEs.

17. The computer readable medium of claim 15, wherein the instructions further cause the processor to:

configure the NOS to assign a new a software object, wherein the new software object provides a new discrete network service;

assign, via the NOS, the new software object to at least one of the plurality of object groups;

distribute, via the NOS, the new software object to at least one of the PEs; and

provide, at the switch, the new discrete network service.

18. The computer readable medium of claim 15, wherein the instructions further cause the processor to assign, via the NOS, at least one of a managed security service object, a managed firewall service object, or a managed virtual private network (VPN) object.

19. The computer readable medium of claim 15, wherein the instructions further cause the processor to record the distribution of the plurality of software objects in a global database for the switch.

20. The computer readable medium of claim 15, wherein the instructions further cause the processor to record the distribution of the plurality of software objects to the at least one of the PEs in a local database for the at least one of the PEs.