Network system and network flow tracing method

• US 9,560,177 B2
• Filed: 03/17/2016
• Issued: 01/31/2017
• Est. Priority Date: 02/17/2011
• Status: Active Grant

• Current Assignee: Cloud BYTE LLC
• Original Assignee: NEC Corporation
• Inventors: Morimoto, Masaharu
• Primary Examiner(s): Onamuti, Gbemileke J
• Application Number:
  US15/072,558
• Publication Number:
  US 20160198025A1
• Time in Patent Office: 320 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/413 with random access, e.g. carrier-sense multiple-access with collision detection [CSMA-CD]
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 43/026 using flow identification
• CPC Class Codes: H04L 43/20 the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 49/3009 Header conversion, routing tables or routing tags
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A switch apparatus includes a storage storing a table, the table including rules and actions corresponding to the rules, and a controller including a memory storing instructions, and a processor configured to execute the instructions to receive the rules and the actions from a control apparatus, identify, based on the rules, a received packet, duplicate a part of a header of the identified packet as an additional header when the identified packet includes a target of encapsulation, encapsulate the identified packet by the additional header, and process, based on the actions, the identified packet.

Claims

1. A switch apparatus, comprising:

a storage storing a table, the table including rules and actions corresponding to the rules; and

a controller comprising;

a memory storing instructions; and

a processor configured to execute the instructions to;

receive the rules and the actions from a control apparatus;

identify, based on the rules, a received packet;

duplicate a part of a header of the identified packet as an additional header when the identified packet comprises a target of encapsulation;

encapsulate the identified packet by the additional header; and

process, based on the actions, the identified packet.

2. The switch apparatus according to claim 1, wherein the processor is further configured to execute the instructions to

send header information to the control apparatus when the identified packet comprises an encapsulated packet.

3. The switch apparatus according to claim 2, wherein the header information includes the additional header.

4. The switch apparatus according to claim 3, wherein the processor is further configured to execute further instructions to decapsulate the encapsulated packet.

5. The switch apparatus according to claim 1, wherein the processor is further configured to execute the instructions for translation of first header data of a head of the received packet into second header data.

6. The switch apparatus according to claim 5, wherein the instructions to encapsulate the identified packet includes notifying the controller of the first header data before the translation and the second header data after the translation.

7. A communication system, comprising:

a control apparatus configured to control a plurality of switch apparatuses; and

a switch apparatus of the switch apparatuses comprising;

a storage storing a table, the table including rules and actions corresponding to the rules; and

a controller comprising;

a memory storing instructions; and

a processor configured to execute the instructions to;

receive the rules and the actions from a controller;

identify, based on the rules, a received packet;

duplicate a part of a header of the identified packet as an additional header when the identified packet comprises a target of encapsulation;

encapsulate the identified packet by the additional header; and

process, based on the actions, the identified packet.

8. The communication system according to claim 7, wherein the processor is further configured to execute the instructions to send header information to the control apparatus when the identified packet comprises an encapsulated packet.

9. The communication system according to claim 8, wherein the header information includes the additional header.

10. The communication system according to claim 9, wherein the processor is further configured to execute further instructions to decapsulate the encapsulated packet.

11. The communication system according to claim 7, wherein the processor is further configured to execute the instructions for translation of the first header data of a head of the received packet into the second header data.

12. The communication system according to claim 11, wherein the instructions to encapsulate the identified packet includes notifying the controller of first header data before the translation and second header data after the translation.

13. A communication method, comprising:

receiving rules and actions from a controller;

identifying, based on the rules, a received packet;

duplicating a part of a header of the identified packet as an additional header when the identified packet comprises a target of encapsulation;

encapsulating the identified packet by the additional header; and

processing, based on the actions, the identified packet.

14. The communication method according to claim 13, further comprising:

sending header information to a controller when the identified packet comprises an encapsulated packet.

15. The communication method according to claim 14, wherein the header information includes the additional header.

16. The communication method according to claim 15, further comprising:

executing further instructions to decapsulate the encapsulated packet.

17. The communication method according to claim 14, further comprising:

translating first header data of a head of the received packet into second header data.

18. The communication method according to claim 17, further comprising:

notifying the controller of the first header data before the translating and the second header data after the translating.

19. A non-transitory recording medium recording a program which when executed causes a switch to perform a method, the method comprising:

receiving rules and actions from a controller;

identifying, based on the rules, a received packet;

duplicating a part of a header of the identified packet as an additional header when the identified packet comprises a target of encapsulation;

encapsulating the identified packet by the additional header; and

processing, based on the actions, the identified packet.

20. The non-transitory recording medium, according to claim 19, the method further comprising:

sending header information to the controller when the identified packet comprises an encapsulated packet,

wherein the header information includes the additional header.