Propagating flow characteristics in service function chaining (SFC) headers

    公开(公告)号:US10263887B2

    公开(公告)日:2019-04-16

    申请号:US15922253

    申请日:2018-03-15

    Abstract: In one embodiment, a service function classifier device determines a classification of a packet using one or more packet classification rules. The device selects a service function path based on the classification of the packet. The device determines one or more traffic flow characteristics based on the classification of the packet. The device generates a service function chaining (SFC) header that identifies the selected service function path and the determined one or more traffic flow characteristics. The SFC header is configured to cause a device along the service function path to forward the encapsulated packet based on the identified service function path and the determined one or more traffic flow characteristics. The device sends the packet along the selected service function path as an encapsulated packet that includes the generated SFC header.

    Service Function Chaining Branching
    37.
    发明申请
    Service Function Chaining Branching 有权
    服务功能链分支

    公开(公告)号:US20170064039A1

    公开(公告)日:2017-03-02

    申请号:US14838963

    申请日:2015-08-28

    Abstract: A system comprising a plurality of service nodes, a controller and a network device in communication with the controller. Each of the plurality of service nodes is configured to support one or more service functions to establish a service function chain that includes a plurality of service functions to be performed by routing traffic among the plurality of service nodes. The controller is configured to generate provisioning information for the service function chain. The provisioning information includes at least one condition upon which a service function reclassification or branching operation is to be performed by at least one service node. The network device is in communication with the controller, and is configured to distribute the provisioning information for the service function chain to the plurality of service nodes using a distributed routing protocol.

    Abstract translation: 包括多个服务节点的系统,控制器和与控制器通信的网络设备。 多个服务节点中的每一个被配置为支持一个或多个服务功能来建立服务功能链,该服务功能链包括通过在多个服务节点之间路由业务来执行的多个服务功能。 控制器被配置为生成用于服务功能链的供应信息。 所述供应信息包括由至少一个服务节点执行服务功能重新分类或分支操作的至少一个条件。 网络设备与控制器通信,并且被配置为使用分布式路由协议将服务功能链的供应信息分发到多个服务节点。

    Metadata augmentation in a service function chain
    38.
    发明授权
    Metadata augmentation in a service function chain 有权
    服务功能链中的元数据增加

    公开(公告)号:US09571405B2

    公开(公告)日:2017-02-14

    申请号:US14631595

    申请日:2015-02-25

    CPC classification number: H04L47/2441 H04L45/74 H04L47/18 H04L67/327 H04L69/22

    Abstract: A method for augmenting metadata of a network service header is disclosed. The method includes receiving, at a first service node, a packet or frame of a traffic flow, wherein the packet has a payload and the network service header including a first metadata and a first service path information for the traffic flow, classifying, by the first service node, at least one of the payload and the first metadata to generate a second metadata different from the first metadata, and augmenting, by the first service node, the first metadata using the second metadata before forwarding the packet or frame to a second service node.

    Abstract translation: 公开了一种用于增强网络服务头部的元数据的方法。 该方法包括在第一服务节点处接收业务流的分组或帧,其中所述分组具有有效载荷,并且所述网络服务报头包括所述业务流的第一元数据和第一服务路径信​​息, 第一服务节点,有效载荷和第一元数据中的至少一个,以生成不同于第一元数据的第二元数据,以及在将数据包或帧转发到第二元数据之前由第一服务节点使用第二元数据来扩充第一元数据 服务节点。

    END-TO-END SECURITY FOR VIRTUAL PRIVATE SERVICE CHAINS
    39.
    发明申请
    END-TO-END SECURITY FOR VIRTUAL PRIVATE SERVICE CHAINS 有权
    虚拟私人服务链的端到端安全

    公开(公告)号:US20160182458A1

    公开(公告)日:2016-06-23

    申请号:US14573564

    申请日:2014-12-17

    Abstract: A first virtual machine is established in a virtual private service chain to provide a first network service to virtual private service chain traffic. A second virtual machine is also established the virtual private service chain to provide a second network service to the virtual private service chain traffic. The virtual private service chain traffic is encrypted for transmission within the virtual private service chain from the first virtual machine to the second virtual machine, wherein the encryption uses a key shared by the first and second virtual machines.

    Abstract translation: 在虚拟专用服务链中建立第一虚拟机以向虚拟专用服务链流量提供第一网络服务。 第二个虚拟机也建立了虚拟专用服务链,为虚拟私人服务链流量提供第二个网络服务。 虚拟专用服务链流量被加密以在虚拟专用服务链中从第一虚拟机到第二虚拟机的传输,其中加密使用由第一和第二虚拟机共享的密钥。

    PROVIDING VIRTUAL PRIVATE SERVICE CHAINS IN A NETWORK ENVIRONMENT
    40.
    发明申请
    PROVIDING VIRTUAL PRIVATE SERVICE CHAINS IN A NETWORK ENVIRONMENT 有权
    在网络环境中提供虚拟的私人服务链

    公开(公告)号:US20150365322A1

    公开(公告)日:2015-12-17

    申请号:US14304043

    申请日:2014-06-13

    Abstract: A method provided in one embodiment includes receiving a first data packet of a data flow at a first classifier in which the first data packet includes a first identifier. The method further includes determining a second classifier associated with the first identifier in which the second classifier is further associated with at least one service chain of a service chain environment. The method still further includes forwarding the first data packet to the second classifier. The second classifier is configured to receive the first data packet, determine a particular service chain of the at least one service chain to which the first data packet is to be forwarded, and forward the first data packet to the particular service chain.

    Abstract translation: 在一个实施例中提供的方法包括在第一分类器处接收数据流的第一数据分组,其中第一数据分组包括第一标识符。 该方法还包括确定与第一标识符相关联的第二分类器,其中第二分类器进一步与服务链环境的至少一个服务链相关联。 该方法还包括将第一数据分组转发到第二分类器。 第二分类器被配置为接收第一数据分组,确定要转发第一数据分组的至少一个服务链的特定服务链,并将第一数据分组转发到特定服务链。

Patent Agency Ranking