Enabling planned upgrade/downgrade of network devices without impacting network sessions

• US 9,806,943 B2
• Filed: 04/24/2014
• Issued: 10/31/2017
• Est. Priority Date: 04/24/2014
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: Golshan, Ali, Sankar, Swaminathan, Natham, Venky
• Primary Examiner(s): Taylor, Nicholas
• Assistant Examiner(s): Sultana, Afroza
• Application Number:
  US14/261,310
• Publication Number:
  US 20150312092A1
• Time in Patent Office: 1,286 Days
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/1027 Persistence of sessions during load balancing
• CPC Class Codes: H04L 67/145 avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session
• CPC Class Codes: H04L 67/148 Migration or transfer of sessions
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Exemplary embodiments for enabling planned network changes such as an upgrade or downgrade of a network device are disclosed. The systems and methods provide for planned upgrades and downgrades for network devices without impacting existing network sessions, by utilizing two network devices simultaneously, and creating a redirect network session for a predetermined period of time. In so doing, all network traffic may be gradually transferred to the second network device, until the sessions processed by the first network device time out. The first network device can then be taken offline for upgrade or downgrade, without any disruption to the network service or loss of network traffic.

Claims

1. A method for enabling a planned upgrade or a planned downgrade of a first network device, the method comprising:

establishing, at the first network device, a TCP session with a client device;

receiving, at the first network device, a request for a virtual service over a network by the client device;

creating a redirect network session for the TCP session at a second network device based on information associated with the TCP session, the second network device being a standby device for the first network device, wherein the information associated with the TCP session is sent by the first network device to the second network device upon establishing the TCP session with the client device;

delivering, by the first network device, the request for the virtual service over a network to a server;

receiving a change from a network administrator designating the second network device as an active device for the virtual service;

receiving a server response at the second network device;

recognizing, at the second network device, that the server response is associated with the redirect network session;

redirecting, by the second network device, the server response to the first network device in accordance with the redirect network session; and

sending, by the first network device, the server response to the client device,

wherein the first network device delivers further requests associated with the TCP session from the client device directly to the server until the virtual service is completed, and

wherein the second network device redirects further server responses associated with the redirect network session to the first network device until the virtual service is completed.

2. The method of claim 1, wherein the redirect network session comprises at least one of a source IP address, a destination IP address, a source port, destination port, and protocol.

3. The method of claim 1, wherein the virtual service is a virtual IP address.

4. The method of claim 1, wherein the request for the virtual service is a GET request.

5. The method of claim 1, wherein the delivering the request for the virtual service over a network to the server by the first network device further comprises load balancing of a plurality of servers.

6. The method of claim 1, wherein the recognizing, at the second network device, that the server response is associated with the redirect network session further comprises conducting a session lookup at the second network device to determine the TCP session that corresponds with the server response received.

7. The method of claim 1, wherein the first network device is an application delivery controller.

8. The method of claim 1, wherein the first network device is a global server load balancer.

9. The method of claim 1, wherein the second network device is an application delivery controller.

10. The method of claim 1, wherein the second network device is a global server load balancer.

11. The method of claim 1, further comprising upgrading the first network device after the redirect network session times out.

12. A system for enabling a planned upgrade or a planned downgrade of a first network device during a TCP session, the first network device configured to:

establish a TCP session with a client device;

receive a request for a virtual service over a network by the client device;

deliver the request for the virtual service over a network to a server;

receive a change from a network administrator designating a second network device as an active device for the virtual service, the second network device being a standby device for the first network device, the second device creating a redirect network session for the TCP session based on information associated with the TCP session, wherein the information associated with the TCP session is sent by the first network device to the second network device upon establishing the TCP session with the client device;

receive a redirected server response from the second network device; and

send the redirected server response to the client device,

wherein the first network device delivers further requests associated with the TCP session from the client device directly to the server until the virtual service is completed, and

wherein the second network device redirects further server responses associated with the redirect network session to the first network device until the virtual service is completed.

13. The system of claim 12, wherein the virtual service is a virtual IP address.

14. The system of claim 12, wherein the request for the virtual service is a GET request.

15. The system of claim 12, wherein the first network device is further configured to load balance a plurality of servers before delivering the request for the virtual service over a network to the server.

16. The system of claim 12, wherein the first network device is an application delivery controller.

17. The system of claim 12, wherein the first network device is a global server load balancer.

18. The system of claim 12 further comprising the second network device configured to:

receive a server response;

recognize that the server response is associated with the redirect network session; and

redirect the server response to the first network device.

19. The system of claim 18, wherein the redirect network session comprises at least one of a source IP address, a destination IP address, a source port, destination port, and protocol.

20. A non-transitory processor-readable medium having instructions stored thereon, which when executed by one or more processors, cause the one or more processors to perform the following operations:

establishing, at the first network device, a TCP session with a client device;

receiving, at the first network device, a request for a virtual service over a network by the client device;

creating a redirect network session for the TCP session at a second network device based on information associated with the TCP session, the second network device being a standby device for the first network device, wherein the information associated with the TCP session is sent by the first network device to the second network device upon establishing the TCP session with the client device;

delivering, by the first network device, the request for the virtual service over a network to a server;

receiving a change from a network administrator designating the second network device as an active device for the virtual service;

receiving a server response at the second network device;

recognizing, at the second network device, that the server response is associated with the redirect network session;

redirecting, by the second network device, the server response to the first network device in accordance with the redirect network session; and

sending, by the first network device, the server response to the client device,

wherein the first network device delivers further requests associated with the TCP session from the client device directly to the server until the virtual service is completed, and

wherein the second network device redirects further server responses associated with the redirect network session to the first network device until the virtual service is completed.