System and method for managing unknown flows in a flow-based switching device

• US 9,559,948 B2
• Filed: 08/28/2012
• Issued: 01/31/2017
• Est. Priority Date: 02/29/2012
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Narayanan, Rajesh, Kotha, Saikrishna, Winter, Robert L.
• Primary Examiner(s): Kading, Joshua A
• Application Number:
  US13/596,564
• Publication Number:
  US 20130223442A1
• Time in Patent Office: 1,617 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 45/38 Flow based routing
• CPC Class Codes: H04L 45/563 Software download or update
• CPC Class Codes: H04L 45/60 Router architectures
• CPC Class Codes: H04L 45/64 using an overlay routing layer
• CPC Class Codes: H04L 47/2483 involving identification of individual flows
• CPC Class Codes: H04L 49/15 Interconnection of switching modules
• CPC Class Codes: H04L 49/25 Routing or path finding in a switch fabric
• CPC Class Codes: H04L 49/45 Arrangements for providing or supporting expansion
• CPC Class Codes: H04L 49/70 Virtual switches
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A network switching device includes a macroflow sub-plane that performs packet-based routing in the network switching device and a microflow routing module that performs flow-based routing in the network switching device. The microflow routing module is separable from the network switching device and operates to provide a data packet via a software defined network agent to an SDN controller. The data packet is associated with a first unknown flow on the network switching device. The microflow routing module further operates to receive via the SDN agent a flow-based routing rule from the SDN controller and route the data packet based upon the flow-based routing rule.

Claims

1. A network switching device comprising:

a macroflow sub-plane that performs packet-based routing in the network switching device;

an expansion slot;

a first microflow routing module that performs flow-based routing in the network switching device, the first microflow routing module being installed into the expansion slot and separable from the network switching device, and being operable to;

receive from the macroflow sub-plane a first data packet, wherein the first data packet is associated with a first unknown flow on the network switching device;

receive via a first OpenFlow software defined network (SDN) agent a first flow-based routing rule from a SDN controller; and

route the first data packet based upon the first flow-based routing rule; and

a second microflow routing module that performs flow-based routing in the network switching device, the second microflow routing module to;

receive via a second SDN agent a second flow-based routing rule from the SDN controller;

receive from the macroflow sub-plane a second data packet; and

route the second data packet based upon the second flow-based routing rule.

2. The network switching device of claim 1, the first microflow routing module further operable to:

route a third data packet associated with the first unknown flow based upon the first flow-based routing rule.

3. The network switching device of claim 1, the second microflow routing module further to:

receive via the second SDN agent a third flow-based routing rule from the SDN controller;

receive a third data packet from the first microflow routing module; and

route the third data packet based upon the third flow-based routing rule.

4. The network switching device of claim 1, further comprising:

a stacking module that provides for stacking the network switching device with another network switching device, the stacking module being installed in the expansion slot and separable from the network switching device.

5. The network switching device of claim 1, wherein the first microflow routing module provides a secure sandbox mechanism for separating flow-based routing from packet-based routing within the network switching device.

6. The network switching device of claim 1, wherein the first microflow routing module provides hardware acceleration for the network switching device.

7. The network switching device of claim 6, wherein the hardware acceleration includes at least one of data compression, data decompression, and deep packet inspection pattern matching.

8. The network switching device of claim 1, wherein the first microflow routing module provides network security for the network switching device.

9. The network switching device of claim 8, wherein the network security includes at least one of data encryption and data decryption.

10. The network switching device of claim 8, wherein the first microflow routing module includes a security device that provides a security coprocessor and secure storage for cryptographic keys.

11. A method comprising:

receiving at a macroflow sub-plane of a network switching device a first data packet associated with a first flow, wherein the first flow is an unknown flow on the network switching device;

providing the first data packet to a first microflow sub-plane of the network switching device;

providing, by the first microflow sub-plane, the first data packet via a first OpenFlow software defined network (SDN) agent of the first microflow sub-plane to an SDN controller;

determining, by the SDN controller, a first flow-based routing rule based upon the first data packet,

receiving via the first SDN agent the first flow-based routing rule from the SDN controller;

providing, by the first SDN agent, the flow-based routing rule to the first microflow sub-plane;

routing the first data packet with the first microflow sub-plane based upon the first flow-based routing rule;

providing, from the first microflow sub-plane and to a second microflow sub-plane of the network switching device, a second data packet;

receiving via a second SDN agent of the second microflow sub-plane a second flow-based routing rule from the SDN controller;

providing, by the second SDN agent, the second flow-based routing rule to the second microflow sub-plane; and

routing the second data packet with the second microflow sub-plane based upon the second flow-based routing rule.

12. The method of claim 11, further comprising:

routing a third data packet associated with the same flow as the first data packet based upon the first flow-based routing rule.

13. The method of claim 11, wherein the second data packet is provided to the first microflow sub-plane from the macroflow subplane.

14. The method of claim 11, wherein the first flow-based routing rule is received from the SDN controller based upon a current condition within the switching device.

15. The method of claim 11, further comprising:

receiving, by the second SDN agent, a third flow-based routing rule from the SDN controller;

providing, by the second SDN agent, the third flow-based routing rule to the second microflow sub-plane;

receive, at the second microflow sub-plane, a third data packet; and

routing, by the second microflow sub-plane, the third data packet based upon the third flow-based routing rule.

16. A non-transitory computer-readable medium including code for performing a method, the method comprising:

receiving at a macroflow sub-plane of a network switching device a first data packet associated with a first flow, wherein the first flow is an unknown flow on the network switching device;

providing the first data packet to a first microflow sub-plane of the network switching device;

providing, by the first microflow sub-plane, the first data packet via a first OpenFlow software defined network (SDN) agent of the first microflow sub-plane to an SDN controller;

determining, by the SDN controller, a first flow-based routing rule based upon the first data packet;

receiving via the first SDN agent the first flow-based routing rule from the SDN controller;

providing, by the first SDN agent, the flow-based routing rule to the first microflow sub-plane;

routing the first data packet with the first microflow sub-plane based upon the first flow-based routing rule;

providing, to a second microflow sub-plane of the network switching device, a second data packet;

receiving via a second SDN agent of the second microflow sub-plane a second flow-based routing rule from the SDN controller;

providing, by the second SDN agent, the second flow-based routing rule to the second microflow sub-plane; and

routing the second data packet with the second microflow sub-plane based upon the second flow-based routing rule.

17. The computer-readable medium of claim 16, wherein the second data packet is provided to the second microflow sub-plane from the macroflow subplane.

18. The computer-readable medium of claim 16, wherein the second data packet is provided to the second microflow sub-plane from the first microflow subplane.

19. The computer-readable medium of claim 16, wherein the first flow-based routing rule is received from the SDN controller based upon a current condition within the switching device.