Method and system for optimizing a network by independently scaling control segments and data flow

• US 9,647,954 B2
• Filed: 06/20/2014
• Issued: 05/09/2017
• Est. Priority Date: 03/21/2000
• Status: Expired due to Term

• Current Assignee: F5 Networks, Inc. (F5 Incorporated)
• Original Assignee: F5 Networks, Inc. (F5 Incorporated)
• Inventors: Gilde, Robert George, Harms, Steven Lee
• Primary Examiner(s): Eskandarnia, Arvin
• Application Number:
  US14/310,675
• Publication Number:
  US 20150052252A1
• Time in Patent Office: 1,054 Days
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/101 based on network conditions
• CPC Class Codes: H04L 67/1014 based on the content of a request

Abstract

A server array controller that includes a Data Flow Segment (DFS) and at least one Control Segment (CS). The DFS includes the hardware-optimized portion of the controller, while the CS includes the software-optimized portions. The DFS performs most of the repetitive chores including statistics gathering and per-packet policy enforcement (e.g. packet switching). The DFS also performs tasks such as that of a router, a switch, or a routing switch. The CS determines the translation to be performed on each flow of packets, and thus performs high-level control functions and per-flow policy enforcement. Network address translation (NAT) is performed by the combined operation of the CS and DFS. The CS and DFS may be incorporated into one or more separate blocks. The CS and DFS are independently scalable. Additionally, the functionality of either the DFS or the CS may be separately implemented in software and/or hardware.

Claims

1. A network traffic management computing device, comprising:

at least one of a processor coupled to memory and configured to implement hardware logic or execute programmed instructions stored in the memory to;

direct data packets received from a client requesting a resource, to the requested resource, when the data packets are associated with an existing connection to the requested resource;

request and receive requesting and receiving instructions for directing the data packets to the requested resource, when the data packets are not associated with an existing connection to the requested resource; and

categorize one or more of the data packets into one or more data flows based on a flow signature comprising service type; and

direct the data packets to at least one of a plurality of server computing devices hosting the requested resource based on the instructions and the flow signature comprising service type.

2. The network traffic management computing device as set forth in claim 1, wherein the receiving instructions for directing the data packets further comprises updating a flow table based on the received instructions to include a network address for the requested resource and the directing the data packets based on the instructions further comprise sending the data packets based on a network address of the requested resource stored in the flow table.

3. The network traffic management computing device as set forth in claim 1 wherein the at least one of the processor is further configured to implement hardware logic or execute programmed instructions stored in the memory to:

determine when one of the one or more data flows is active based at least in part on information stored in a flow table; and

terminate the one or more data flows when the one or more data flows are determined not to be active.

4. The network traffic management computing device as set forth in claim 1, wherein the one of the plurality of server computing devices is selected based on one or more load balancing factors comprising most active flow, least active flow, time flow opened, or most recent activity.

5. The network traffic management computing device as set forth in claim 1, wherein the at least one of the processor is further configured to be capable of executing implement hardware logic or execute programmed instructions stored in the memory.

6. The network traffic management computing device as set forth in claim 1, wherein the instructions comprise at least a destination Internet Protocol (IP) address of the plurality of server computing devices.

7. A method for directing communications over a network, the method comprising:

directing, by a network traffic management computing device, a data packet, received from a client requesting a resource, to the requested resource, when the data packets are associated with an existing connection to the requested resource;

requesting and receiving, by the network traffic management computing device, instructions for directing the data packets to the requested resource, and directing the data packets based on the instructions, when the data packets are not associated with an existing connection to the requested resource;

categorizing, by the network traffic management computing device, one or more of the data packets into one or more data flows based on a flow signature comprising service type; and

directing the data packets to at least one of a plurality of server computing devices hosting the requested resource based on the instructions and the flow signature comprising service type.

8. The method as set forth in claim 7, wherein the receiving instructions for directing the data packets further comprises updating a flow table based on the received instructions to include a network address for the requested resource and the directing the data packets based on the instructions further comprise sending the data packets based on a network address of the requested resource stored in the flow table.

9. The method as set forth in claim 7 further comprising:

determining, by the network traffic management computing device, when one of the one or more data flows is active based at least in part on information stored in a flow table; and

terminating, by the network traffic management computing device, the one or more data flows when the one or more data flows are determined not to be active.

10. The method as set forth in claim 7, wherein the one of the plurality of server computing devices is selected based on one or more load balancing factors comprising one or more of most active flow, least active flow, time flow opened, or most recent activity.

11. The method as set forth in claim 7 further comprising:

performing, by the network traffic management computing device, control and policy enforcement actions for each data flow; and

collecting, by the network traffic management computing device, information regarding each flow including metrics and statistics.

12. The method as set forth in claim 7, wherein the instructions comprise at least a destination Internet Protocol (IP) address of the plurality of server computing devices.

13. A non-transitory computer readable medium having stored thereon instructions for directing communications over a network comprising machine executable code which when executed by a processor, causes the processor to perform steps comprising:

receiving a request for instructions for directing a data packet received from a client requesting a resource, wherein the data packets are not associated with an existing connection to the requested resource;

categorizing one or more of the data packets into one or more data flows based on a flow signature comprising service type; and

directing the data packets to at least one of a plurality of server computing devices hosting the requested resource based on the instructions and the flow signature comprising service type.

14. The non-transitory computer readable medium as set forth in claim 13, wherein the one of the plurality of server computing devices is selected based on one or more load balancing factors comprising one or more of most active flow, least active flow, time flow opened, or most recent activity.

15. The non-transitory computer readable medium as set forth in claim 13, further having stored thereon instructions comprising machine executable code which when executed by the processor, causes the processor to perform steps further comprising performing control and policy enforcement actions for each of the one or more data flows.

16. The non-transitory computer readable medium as set forth in claim 13, wherein the instructions comprise at least a destination Internet Protocol (IP) address of the one of the plurality of server computing devices.

17. The non-transitory computer readable medium as set forth in claim 13, wherein the receiving instructions for directing the data packet further comprises updating a flow table based on the received instructions to include a network address for the requested resource and the directing the data packet based on the instructions further comprise sending the data packets based on a network address of the requested resource stored in the flow table.

18. The non-transitory computer readable medium as set forth in claim 13, further having stored thereon instructions comprising machine executable code which when executed by the processor, causes the processor to perform steps further comprising:

determining when one of the one or more data flows is active based at least in part on information stored in a flow table; and

terminating the one or more data flows when the one or more data flows are determined not to be active.