Asymmetric Network Flow Tunneling for Intermediate Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In asymmetrically routed computer networks, it is challenging to ensure that all packets associated with a network flow pass through a single intermediate device for processing, as packets may traverse different paths in each direction, making it difficult to perform operations like TCP acceleration and intrusion detection unless the intermediate device is located before the split in network routes.
Innovation Solution
Establishing network tunnels across the asymmetric network, allowing intermediate processing devices to intercept and encapsulate packets, ensuring that related packets are directed to the same set of devices regardless of the routing asymmetry, enabling processing even when devices are positioned after the split in routes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If intermediate processing devices are placed after the split in network routes in an asymmetrically routed network, then the network routing flexibility is improved, but the ability to perform intermediate processing on all packets of a flow deteriorates
Solution Approach 1:
The patent introduces tunnel endpoints as intermediary devices that intercept packets before they diverge into asymmetric routes. These endpoints encapsulate packets in tunnels that guarantee delivery to the same intermediate processing device regardless of the actual network path taken, thereby maintaining processing completeness while allowing routing flexibility.
Solution Approach 2:
The patent segments the network flow into tunnel-encapsulated packets. By dividing the original packet into an outer tunnel header and inner original packet, the system ensures that intermediate processing devices can reliably process the inner packet while the outer header provides routing information that maintains flexibility in the asymmetric network.
2Productivity
If a single intermediate device is used to process TCP flow, then processing efficiency is improved, but the device must be located before the split in network routes which limits network design flexibility
Solution Approach 1:
Tunnel endpoints act as mediators that enable single intermediate processing devices to efficiently process all packets of a TCP flow even when positioned after route splits. The tunnel encapsulation mechanism ensures all packets are directed to the same processing device without requiring it to be positioned before the asymmetric routing split, thus maintaining both efficiency and flexibility.
3Productivity
If packets are allowed to traverse different paths in each direction in an asymmetric network, then network load distribution is improved, but the ability to perform operations like TCP acceleration and intrusion detection deteriorates
Solution Approach 1:
The patent implements nested packet structures where the original packet is encapsulated within a tunnel packet. This nesting allows packets to traverse different asymmetric paths (outer packet routing) while ensuring they all reach the same intermediate processing device (inner packet processing), thus maintaining both load distribution and flow processing capability.
Solution Approach 2:
Tunnel endpoints serve as intermediary devices that intercept packets before asymmetric routing occurs, encapsulate them with routing information that ensures delivery to the same processing device, and thereby enable both load distribution through asymmetric routing and reliable flow processing through guaranteed delivery.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A network system includes a first device and a second device separated by a network having asymmetric routes in which traffic forwarded in a first direction from the first device to the second device may travel a different route than traffic forwarded in a second direction from the second device to the first device. At least three intermediate processing devices are located between the first device and the second device, wherein at least two of the intermediate processing devices are located along different asymmetric routes. The intermediate processing devices intercept a communication flow between the first device and the second device, and encapsulate the communication flow within network tunnels so that communications associated with the communication flow in the first direction and the second direction are forwarded between a same set of at least two of the intermediate processing devices.