Dynamic service insertion in a fabric switch

• US 9,742,693 B2
• Filed: 02/25/2013
• Issued: 08/22/2017
• Est. Priority Date: 02/27/2012
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Brocade Communications Systems, Inc. (Broadcom, Inc.)
• Inventors: Koganti, Phanidhar, Vobbilisetty, Suresh
• Primary Examiner(s): Cho, Hong
• Application Number:
  US13/776,217
• Publication Number:
  US 20130223449A1
• Time in Patent Office: 1,639 Days
• Field of Search: None
• CPC Class Codes: H04L 45/026 Details of "hello" or keep-alive messages
• CPC Class Codes: H04L 49/10 characterised by the switching fabric construction
• CPC Class Codes: H04L 49/111 Switch interfaces, e.g. port details
• CPC Class Codes: H04L 49/355 Application aware switches, e.g. for HTTP
• CPC Class Codes: H04L 49/356 for storage area networks
• CPC Class Codes: H04L 49/70 Virtual switches

Abstract

One embodiment of the present invention provides a switch. The switch includes a service management module and a packet processor. During operation, the service management module identifies a service provided by an appliance coupled to the switch via a local port. The packet processor constructs a notification message for a remote switch. The notification message includes information about the service and the appliance. In this way, the switch allows the remote switch to request the service.

Claims

1. A switch, comprising:

service management circuitry configured to;

identify an appliance and a service provided by the appliance via an edge port of the switch; and

marking the edge port of the switch to be associated with the appliance; and

packet processing circuitry configured to;

in response to identifying the appliance, construct for a remote switch a notification message comprising information about the service and the appliance, wherein the switch and the remote switch are member switches of a network of interconnected switches, wherein a fabric identifier identifies the network of interconnected switches and is assigned to the switch and the remote switch, and wherein the information about the appliance indicates that the appliance is reachable via the switch; and

determine that a data frame from the remote switch requires the service.

2. The switch of claim 1, wherein the appliance is a virtual appliance, wherein the virtual appliance is associated with one or more appliances providing the service.

3. The switch of claim 2, further comprising virtualization circuitry configured to generate a virtual switch identifier of a virtual switch associated with the switch;

and

wherein the packet processing circuitry is further configured to include in the notification message the virtual switch identifier, wherein the notification message indicates that the appliance is reachable via the virtual switch.

4. The switch of claim 3, wherein the virtual switch is further associated with a second switch;

and

wherein the second switch is coupled to a second appliance capable of providing the service and associated with the virtual appliance.

5. The switch of claim 1, wherein the packet processing circuitry is further configured to:

extract information about a second service and a third appliance, wherein the third appliance is capable of providing the second service and reachable via a third switch; and

determine the third switch as an egress switch for a respective data frame requiring the second service.

6. The switch of claim 5, further comprising sequence circuitry configured to:

receive a sequence of execution for the service and the second service, wherein the sequence is associated with a subnet; and

determine whether to forward a data frame belonging to the subnet to the appliance or the third appliance based on the sequence.

7. The switch of claim 5, wherein the packet processing circuitry is further configured to encapsulate the data frame with an encapsulation header comprising a switch identifier as an egress switch identifier;

and

wherein the switch identifier is associated with the third switch.

8. The switch of claim 1, wherein the service management circuitry is further configured to determine completion of the service for the data frame in response to receiving the data frame via the edge port.

9. The switch of claim 1, wherein inter-switch packets within the network of interconnected switches is encapsulated with an encapsulation header.

10. A method, comprising:

identifying an appliance and a service provided by the appliance via an edge port of a switch;

marking the edge port of the switch to be associated with the appliance;

in response to identifying the appliance, constructing for a remote switch a notification message comprising information about the service and the appliance, wherein the switch and the remote switch are member switches of a network of interconnected switches, wherein a fabric identifier identifies the network of interconnected switches and is assigned to the switch and the remote switch, and wherein the information about the appliance indicates that the appliance is reachable the switch; and

determining that a data frame from the remote switch requires the service.

11. The method of claim 10, wherein the appliance is a virtual appliance, wherein the virtual appliance is associated with one or more appliances providing the service.

12. The method of claim 11, further comprising:

generating a virtual switch identifier of a virtual switch associated with the switch; and

including in the notification message the virtual switch identifier, wherein the notification message indicates that the appliance is reachable via the virtual switch.

13. The method of claim 12, wherein the virtual switch is further associated with a second switch;

and

wherein the second switch is coupled to a second appliance capable of providing the service and associated with the virtual appliance.

14. The method of claim 10, further comprising:

extracting information about a second service and a third appliance, wherein the third appliance is capable of providing the second service and reachable via a third switch; and

determining the third switch as an egress switch for a respective data frame requiring the second service.

15. The method of claim 14, further comprising:

receiving a sequence of execution for the service and the second service, wherein the sequence is associated with a subnet; and

determining whether to forward a data frame belonging to the subnet to the appliance or the third appliance based on the sequence.

16. The method of claim 14, further comprising encapsulating the data frame with an encapsulation header comprising a switch identifier as an egress switch identifier;

and

wherein the switch identifier is associated with the third switch.

17. The method of claim 10, further comprising determining completion of the service for the data frame in response to receiving the data frame via the edge port.

18. The method of claim 10, wherein inter-switch packets within the network of interconnected switches is encapsulated with an encapsulation header.

19. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for securing a database configuration from undesired modifications, the method comprising:

identifying an appliance and a service provided by the appliance via an edge port of a switch;

marking the edge port of the switch to be associated with the appliance;

in response to identifying the appliance, constructing for a remote switch a notification message comprising information about the service and the appliance, wherein the switch and the remote switch are member switches of a network of interconnected switches, wherein a fabric identifier identifies the network of interconnected switches and is assigned to the switch and the remote switch, and wherein the information about the appliance indicates that the appliance is reachable via the switch; and

determining that a data frame from the remote switch requires the service, wherein the appliance is not coupled to a local port of the remote switch, and wherein the fabric identifier is assigned to the switch and the remote switch.

20. The computer-readable storage medium of claim 19,

wherein the appliance is a virtual appliance, wherein the virtual appliance is associated with one or more appliances providing the service;

and

wherein the method further comprises;

generating a virtual switch identifier of a virtual switch associated with the switch; and

including in the notification message the virtual switch identifier, wherein the notification message indicates that the virtual appliance is reachable via the virtual switch.

21. A switch means, comprising:

a service management means for;

identifying an appliance means and a service provided by the appliance means via an edge port of the switch means; and

marking the edge port of the switch to be associated with the appliance; and

a packet processor means for;

in response to identifying the appliance, constructing for a remote switch means a notification message comprising information about the service and the appliance means, wherein the switch means and the remote switch means are member switches of a network of interconnected switch means, wherein a fabric identifier identifies the network of interconnected switch means and is assigned to the switch means and the remote switch means, and wherein the information about the appliance means indicates that the appliance means is reachable via the switch means; and

determining that a data frame from the remote switch means requires the service.