Systems, methods, and computer readable media for providing instantaneous failover of packet processing elements in a network

• US 8,472,311 B2
• Filed: 02/04/2010
• Issued: 06/25/2013
• Est. Priority Date: 02/04/2010
• Status: Active Grant

• Current Assignee: Ribbon Communications Operating Company, Inc. (Ribbon Communications, Inc.)
• Original Assignee: Genband US LLC (Ribbon Communications, Inc.)
• Inventors: Rodgers, Richard, Cervantes, James H.
• Primary Examiner(s): Jung, Min
• Application Number:
  US12/700,444
• Publication Number:
  US 20110191624A1
• Time in Patent Office: 1,237 Days
• Field of Search: None
• US Class Current: 370/217
• CPC Class Codes: G06F 11/00 Error detection; Error correction; Monitoring error detection, correction or monitoring in information storage based on relative movement between record carrier and transducer G11B20/18; monitoring, i.e. supervising the progress of recording or reproducing G11B27/36; in static stores G11C29/00
• CPC Class Codes: G06F 11/16 Error detection or correction of the data by redundancy in hardware
• CPC Class Codes: G06F 11/20 using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
• CPC Class Codes: G06F 15/16 Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs coordinating program control therefor G06F9/52; in regulating and control system G05B
• CPC Class Codes: H04L 41/0668 by dynamic selection of recovery network elements, e.g. replacement by the most appropriate element after failure
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 67/1034 Reaction to server failures by a load balancer
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

Systems, methods, and computer program products for providing instantaneous failover of packet processing elements in a network are disclosed. According to one aspect, the subject matter described herein includes a system for providing instantaneous failover of packet processing elements in a network. The system includes a plurality of packet processing elements for processing packets in a network and a packet distribution module for maintaining information about the operating status of each element of the plurality of packet processing elements, for maintaining information about packet flows being processed by the packet processing elements, and, for each packet flow, assigning one of the plurality of packet processing elements as the primary element for the packet flow and assigning another of the plurality of packet processing elements as the secondary element for the packet flow. The packet distribution module routing packets to the packet processing elements according to the operating status of the packet processing elements that have been assigned to the packet flow with which the packets are associated.

Claims

1. A packet distribution system, comprising:

a processor; and

a memory coupled to the processor, the memory configured to store instructions executable by the processor to cause the packet distribution system to;

maintain information about an operating status of each of a plurality of packet processing devices, the information indicating whether a corresponding one of the packet processing devices is capable or not capable of processing packets;

maintain information about packet flows being processed by the packet processing devices, and, for each packet flow, assigning one of the plurality of packet processing devices as a primary device for the packet flow and assigning another of the plurality of packet processing devices as a secondary device for the packet flow, wherein to maintain the information about the packet flows being processed by the packet processing devices, the instructions are executable by the processor to further cause the packet distribution system to;

receive a packet,

determine whether the packet is associated with a new packet flow or an existing packet flow, and

in response to a determination that the packet is associated with a new packet flow, assign one of the plurality of packet processing devices as a primary packet processing device for the new packet flow, and, prior to a failure of the primary packet processing device for the new packet flow, assign another of the plurality of packet processing devices as a secondary packet processing device for the new packet flow; and

route packets to the packet processing devices according to the operating status of the packet processing devices that have been assigned to the packet flow with which the packets are associated.

2. The packet distribution system of claim 1, wherein to determine whether the packet is associated with the new packet flow or the existing packet flow, the instructions are executable by the processor to further cause the packet distribution system to:

generate a packet flow identifier based on information within the packet;

determine whether the generated packet flow identifier matches a packet flow identifier within an existing packet flow object;

in response to a determination that the generated packet flow identifier matches a packet flow identifier within an existing packet flow object, associate the received packet with the existing packet flow object that represents an existing packet flow; and

in response to a determination that the generated packet flow identifier does not match a packet flow identifier within an existing packet flow object, associate the received packet with a new packet flow object for representing a new packet flow.

3. The packet distribution system of claim 2, wherein generating a packet flow identifier based on information within the packet includes generating a packet flow identifier based on a hash of values contained within the packet.

4. The packet distribution system of claim 1, wherein determining the operational status of the primary packet processing device assigned to the packet flow includes using heartbeat messages to or from each of the packet processing devices to monitor the operational status of the packet processing devices.

5. The packet distribution system of claim 1, wherein the instructions are executable by the processor to further cause the packet distribution system to assign the primary and secondary packet processing devices for the new packet flow according to a load balancing algorithm configured to balance the load across the plurality of packet processing devices.

6. The packet distribution system of claim 1, wherein at least one of the plurality of packet processing devices performs at least one of a security operation, a media gateway operation, or a session border control operation.

7. The packet distribution system of claim 6, wherein the security operation comprises at least one of an encryption operation, a decryption operation, a hash operation, a message digest operation, a message signing operation, a certification operation, an authentication operation, an authorization operation, or a key exchange operation.

8. The packet distribution system of claim 1, wherein the plurality of packet processing devices are configured in a fault-tolerant configuration.

9. A packet distribution system, comprising:

a processor; and

a memory coupled to the processor, the memory configured to store instructions executable by the processor to cause the packet distribution system to;

maintain information about an operating status of each of a plurality of packet processing devices, the information indicating whether a corresponding one of the packet processing devices is capable or not capable of processing packets;

maintain information about packet flows being processed by the packet processing devices, and, for each packet flow, assigning one of the plurality of packet processing devices as a primary device for the packet flow and assigning another of the plurality of packet processing devices as a secondary device for the packet flow; and

route packets to the packet processing devices according to the operating status of the packet processing devices that have been assigned to the packet flow with which the packets are associated, wherein to route the packets to the packet processing devices according to the operating status of the packet processing devices that have been assigned to the flow with which the packets are associated, the instructions are executable by the processor to further cause the packet distribution system to;

receive a packet that is associated with a packet flow,

determine the operational status of the primary packet processing device assigned to the packet flow,

in response to a determination that the primary packet processing device is capable of processing the packet, forward the packet to the primary packet processing device for processing, and

in response to a determination that the primary packet processing device is not capable of processing the packet, forward the packet to the secondary packet processing device for processing.

10. The packet distribution system of claim 9, wherein each packet flow represents at least one of a call or call attempt in the network, a session in the network, or a media stream in the network.

11. packet distribution system, comprising:

a processor; and

a memory coupled to the processor, the memory configured to store instructions executable by the processor to cause the packet distribution system to;

maintain information about an operating status of each of a plurality of packet processing devices, the information indicating whether a corresponding one of the packet processing devices is capable or not capable of processing packets;

maintain information about packet flows being processed by the packet processing devices, and, for each packet flow, assigning one of the plurality of packet processing devices as a primary device for the packet flow and assigning another of the plurality of packet processing devices as a secondary device for the packet flow, wherein to maintain the information about the packet flows, the instructions are executable by the processor to further cause the packet distribution system to use packet flow objects, each packet flow object including;

a packet flow identifier for identifying the packet flow,

an identification of the primary packet processing device assigned to the packet flow, and

an identification of the secondary packet processing device assigned to the packet flow; and

route packets to the packet processing devices according to the operating status of the packet processing devices that have been assigned to the packet flow with which the packets are associated.

12. The packet distribution system of claim 11, wherein at least one of the plurality of packet processing devices is geographically diverse from another of the plurality of packet processing devices.

13. The packet distribution system of claim 11, wherein the plurality of packet processing devices are co-located with the packet distribution system.

14. A packet distribution system, comprising:

a processor; and

a memory coupled to the processor, the memory configured to store instructions executable by the processor to cause the packet distribution system to;

maintain information about an operating status of each of a plurality of packet processing devices, the information indicating whether a corresponding one of the packet processing devices is capable or not capable of processing packets, wherein maintaining information about the operating status of each device of the plurality of packet processing devices includes using a status map for indicating the operational status of each packet processing device;

maintain information about packet flows being processed by the packet processing devices, and, for each packet flow, assigning one of the plurality of packet processing devices as a primary device for the packet flow and assigning another of the plurality of packet processing devices as a secondary device for the packet flow; and

route packets to the packet processing devices according to the operating status of the packet processing devices that have been assigned to the packet flow with which the packets are associated.

15. The packet distribution system of claim 14, wherein the status map comprises a bitmap having a bit for each of the plurality of packet processing devices, wherein a first value of a bit in the bitmap indicates that a packet processing device corresponding to that bit is presently capable of processing packets and wherein a second value of the bit in the bitmap indicates that the packet processing device corresponding to that bit is not presently capable of processing packets.

16. A method comprising:

maintaining information about an operating status of each of a plurality of packet processing devices, the information indicating whether a corresponding one of the packet processing devices is capable or not capable of processing packets;

maintaining information about packet flows being processed by the plurality of packet processing devices, and, for each packet flow, assigning one of the plurality of packet processing devices as a primary device for the packet flow and assigning another of the plurality of packet processing devices as a secondary device for the packet flow, wherein maintaining information about packet flows being processed by the packet processing devices includes;

receiving a packet,

determining whether the packet is associated with a new packet flow or with an existing packet flow, and

in response to a determination that the packet is associated with a new packet flow, assigning one of the plurality of packet processing devices as a primary packet processing device for the new packet flow, and, prior to a failure of the primary packet processing device for the new packet flow, assigning another of the plurality of packet processing devices as a secondary packet processing device for the new packet flow; and

routing packets to the packet processing devices according to the operating status of the packet processing devices that have been assigned to the packet flow with which the packets are associated.

17. The method of claim 16, wherein determining whether the packet is associated with the new packet flow or with the existing packet flow includes:

generating a packet flow identifier based on information within the packet;

determining whether the generated packet flow identifier matches a packet flow identifier within an existing packet flow object;

in response to a determination that the generated packet flow identifier matches a packet flow identifier within an existing packet flow object, associating the received packet with the existing packet flow object that represents an existing packet flow; and

in response to a determination that the generated packet flow identifier does not match a packet flow identifier within an existing packet flow object, associating the received packet with a new packet flow object for representing a new packet flow.

18. The method of claim 17, wherein generating the packet flow identifier based on information within the packet includes generating a packet flow identifier based on a hash of values within the packet.

19. The method of claim 16, wherein determining the operational status of the primary packet processing device comprises accessing a data structure configured to store operational status for each packet processing device.

20. A method comprising:

maintaining information about an operating status of each of a plurality of packet processing devices, the information indicating whether a corresponding one of the packet processing devices is capable or not capable of processing packets;

maintaining information about packet flows being processed by the plurality of packet processing devices, and, for each packet flow, assigning one of the plurality of packet processing devices as a primary device for the packet flow and assigning another of the plurality of packet processing devices as a secondary device for the packet flow; and

routing packets to the packet processing devices according to the operating status of the packet processing devices that have been assigned to the packet flow with which the packets are associated, wherein routing packets to the packet processing devices according to the operating status of the packet processing devices that have been assigned to the flow with which the packets are associated includes;

receiving a packet that is associated with a packet flow,

determining the operational status of the primary packet processing device assigned to the packet flow,

in response to a determination that the primary packet processing device is capable of processing the packet, forwarding the packet to the primary packet processing device for processing, and

in response to a determination that the primary packet processing device is not capable of processing the packet, forwarding the packet to the secondary packet processing device for processing.

21. The method of claim 20, wherein each packet flow represents at least one of:

a call or call attempt in the network, a session in the network, or a media stream in the network.

22. The method of claim 20, further comprising using heartbeat messages to monitor operational status of the packet processing devices.

23. The method of claim 20, wherein assigning primary and secondary packet processing devices for the packet flow includes assigning the primary and secondary packet processing devices according to a load balancing algorithm for balancing the load across the plurality of packet processing devices.

24. The method of claim 20, comprising, at a packet processing device, receiving the forwarded packet and processing the packet according to at least one of a security operation, a media gateway operation, and a session border control operation.

25. The method of claim 24, wherein the security operation comprises at least one of:

an encryption operation, a decryption operation, a hash operation, a message digest operation, a message signing operation, a certification operation, an authentication operation, an authorization operation, or a key exchange operation.

26. The method of claim 20, wherein the plurality of packet processing devices are configured in a fault-tolerant configuration.

27. A method comprising:

maintaining information about an operating status of each of a plurality of packet processing devices, the information indicating whether a corresponding one of the packet processing devices is capable or not capable of processing packets;

maintaining information about packet flows being processed by the plurality of packet processing devices, and, for each packet flow, assigning one of the plurality of packet processing devices as a primary device for the packet flow and assigning another of the plurality of packet processing devices as a secondary device for the packet flow, wherein maintaining information about packet flows being processed by the packet processing devices includes using packet flow objects for maintaining information about packet flows, and wherein each packet flow object includes;

a packet flow identifier for identifying the packet flow,

an identification of the primary packet processing device assigned to the packet flow, and

an identification of the secondary packet processing device assigned to the packet flow; and

routing packets to the packet processing devices according to the operating status of the packet processing devices that have been assigned to the packet flow with which the packets are associated.

28. The method of claim 27, wherein at least one of the plurality of packet processing devices is geographically diverse from another of the plurality of packet processing devices.

29. A method comprising:

maintaining information about an operating status of each of a plurality of packet processing devices, the information indicating whether a corresponding one of the packet processing devices is capable or not capable of processing packets;

maintaining information about packet flows being processed by the plurality of packet processing devices, and, for each packet flow, assigning one of the plurality of packet processing devices as a primary device for the packet flow and assigning another of the plurality of packet processing devices as a secondary device for the packet flow; and

routing packets to the packet processing devices according to the operating status of the packet processing devices that have been assigned to the packet flow with which the packets are associated;

wherein determining the operational status of the primary packet processing device comprises accessing a data structure configured to store operational status for each packet processing device; and

wherein the data structure configured to store operational status for each packet processing device comprises a bitmap, wherein a first value of a bit in the bitmap indicates that a packet processing device corresponding to that bit is currently capable of processing packets and wherein a second value of the bit in the bitmap indicates that the packet processing device corresponding to that bit is not currently capable of processing packets.

30. A computer readable medium having stored thereon computer-executable instructions that, upon execution by a processor of a packet distribution system, causes the packet distribution system to:

identify one of a plurality of packet flows to which a received packet belongs;

determine whether a given packet processing device corresponding to the identified packet flow is presently capable of processing the received packet based, at least in part, upon;

(i) a flow table correlating each of the plurality of packet flows to a corresponding one of a plurality of packet processing devices, and (ii) a bitmap indicating whether each of the plurality of packet processing devices is presently capable or not capable to process packets; and

at least one of;

(a) in response to the given packet processing device being presently capable of processing the received packet, distributing the received packet to the given packet processing device;

or (b) in response to the given packet processing device not being presently capable of processing the received packet, distributing the received packet to another one of the plurality of packet devices designated as an alternate packet processing device for the identified packet flow in the flow table.