Highly available service chains for network services

• US 9,929,945 B2
• Filed: 09/25/2015
• Issued: 03/27/2018
• Est. Priority Date: 07/14/2015
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Schultz, Benjamin M., Tiwari, Abhishek, Arneja, Aman, Gupta, Dhiraj
• Primary Examiner(s): SHIVERS, ASHLEY L
• Application Number:
  US14/866,676
• Publication Number:
  US 20170019335A1
• Time in Patent Office: 914 Days
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/5077 wherein the managed service relates to simple transport services, i.e. providing only network infrastructure
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 43/50 Testing arrangements
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 45/025 Updating only a limited number of routers, e.g. fish-eye update
• CPC Class Codes: H04L 45/028 Dynamic adaptation of the update intervals, e.g. event-triggered updates
• CPC Class Codes: H04L 45/0377 for service chaining
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 45/38 Flow based routing
• CPC Class Codes: H04L 45/64 using an overlay routing layer
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/2475 for supporting traffic characterised by the type of applications
• CPC Class Codes: H04L 47/2483 involving identification of individual flows

Abstract

A control and monitoring system orders a service chain—an order of data flow through a plurality of network nodes—based on network node identifiers. The control and monitoring system provide a policy to networking nodes in order to enforce the order of the service chain. In some embodiments, features are implemented to improve the availability of service chains. Such features include load-balancing, fail-over, traffic engineering, and automated deployment of virtualized network functions at various stages of a service chain, among others.

Claims

1. A computing system to provide a plurality of service chains, the computing system comprising:

one or more processors;

memory; and

a plurality of programming instructions stored on the memory and executable by the one or more processors to perform actions including;

identifying a subset of a plurality of network nodes to be included in a particular service chain of the plurality of service chains to be used for a particular traffic flow of a plurality of traffic flows, the particular traffic flow associated with an application node;

defining a policy indicating the subset of plurality of network nodes and an order of the particular traffic flow associated with the application node through the subset of the plurality of network nodes of the particular service chain;

distributing the policy to a memory in each network node of the subset of the plurality of network nodes to store the policy;

enforcing the policy to direct the particular traffic flow through the particular service chain, the policy indicating the subset of the plurality of network nodes to be included in the particular service chain, the policy further indicating a data flow order through the subset of the plurality of network nodes;

monitoring the plurality of network nodes, each of the network nodes of the plurality of network nodes providing corresponding network-related functions; and

in response to the monitoring, updating the policy and replacing the policy stored in the memory of each of the network nodes of the subset of the plurality of network nodes with the updated policy, once the policy is updated, wherein updating the policy and replacing the policy stored in the memory of each of the network nodes is based on determining that a particular node of one of the plurality of nodes independently modified the policy and in response to receiving notification of the modification from the particular node.

2. The computing system of claim 1, wherein identifying the subset of the plurality of network nodes further comprises identifying the subset of the plurality of network nodes to be included in the particular service chain based at least on performance information associated with the plurality of network nodes or service availability information associated with the plurality of network nodes.

3. The computing system of claim 1, wherein the actions further include:

instantiating a new network node; and

further updating the policy to direct the particular traffic flow through at least the new network node.

4. The computing system of claim 3, wherein the actions further include determining to instantiate the new network node based at least on performance information associated with the subset of the plurality of network nodes or service availability information associated with the plurality of network nodes.

5. The computing system of claim 4, wherein the performance information is selected from the group consisting of historical network utilization and real-time network utilization.

6. The computing system of claim 3, wherein the actions further include determining to instantiate the new network node based at least on failure of at least one of the subset of the plurality of network nodes.

7. The computing system of claim 1, wherein the actions further include identifying the subset of the plurality of network nodes to be included in the particular service chain based at least on load-balancing the plurality of traffic flows amongst the plurality of network nodes.

8. The computing system of claim 7, wherein the policy indicates corresponding next-hop node addresses that are selected from a group consisting of layer 2 next-hop addresses, layer 3 next-hop addresses, and a combination of layer 2 next-hop addresses and layer 3 next-hop addresses.

9. The computing system of claim 1, wherein each network node in the service chain has an ability to distribute the traffic flows across one or more next hops.

10. The computing system of claim 1, wherein the actions further include distributing the plurality of traffic flows amongst of the plurality of network nodes based at least in part on weights for each of the plurality of network nodes, the actions further comprising determining the weights based at least on performance information for each of the plurality of network nodes.

11. The computing system of claim 1, further comprising a network layer endpoint node chained between the plurality of network nodes, said network layer endpoint node comprising at least one of a VPN server, an IP tunneling gateway, a proxy server, a network-layer firewall, or a web server node.

12. The computing system of claim 1, further comprising identifying a network layer endpoint node chained between the plurality of network nodes to be included in the particular service chain.

13. A method, comprising:

identifying a subset of a plurality of network nodes to be included in a particular service chain of a plurality of service chains, the particular service chain for a particular traffic flow associated with an application node, each network node of the plurality of network nodes providing corresponding network-related functions, the particular traffic flow being one of a plurality of traffic flows;

defining a policy indicating the subset of the plurality of network nodes and an order of the particular traffic flow associated with the application node through the subset of the plurality of network nodes;

distributing the policy to a memory in each network node of the subset of the plurality of network nodes to store the policy;

monitoring capacity information associated with one or more of the plurality of network nodes; and

in response to the monitoring, updating the policy and replacing the policy stored in the memory of each of the network nodes of the subset of the plurality of network nodes with the updated policy, once the policy is updated, wherein updating the policy and replacing the policy stored in the memory of each of the network nodes is based on determining that a particular node of one of the plurality of nodes independently modified the policy and in response to receiving notification of the modification from the particular node.

14. The method of claim 13, wherein the capacity information includes information selected from the group consisting of historical network utilization and real-time network utilization.

15. The method of claim 13, further comprising:

causing, based at least on the capacity information, a new network node to be instantiated; and

wherein the updating includes updating the policy to direct the particular traffic flow through at least the new network node.

16. The method of claim 13, wherein the updating includes updating the policy based at least on load-balancing the plurality of traffic flows.

17. One or more hardware storage devices having stored computer-readable instructions which are executable by one or more processors of a computing system to cause the computing system to implement a method that includes:

the computing system identifying a subset of a plurality of network nodes to be included in a particular service chain of a plurality of service chains, the particular service chain for a particular traffic flow associated with an application node, each network node of the plurality of network nodes providing corresponding network related functions, the particular traffic flow being one of a plurality of traffic flows;

the computing system defining a policy indicating the subset of the plurality of network nodes and an order of the particular traffic flow associated with the application node through the subset of the plurality of network nodes;

the computing system distributing the policy to a memory in each network node of the subset of the plurality of network nodes to store the policy;

the computing system monitoring capacity information associated with one or more of the plurality of network nodes; and

the computing system, in response to the monitoring, updating the policy and replacing the policy stored in the memory of each of the network nodes of the subset of the plurality of network nodes with the updated policy, once the policy is updated, wherein updating the policy and replacing the policy stored in the memory of each of the network nodes is based on determining that a particular node of one of the plurality of nodes independently modified the policy and in response to receiving notification of the modification from the particular node.

18. The one or more hardware storage devices of claim 17, wherein the method further includes adding a new node to the subset of the plurality of nodes.