BGP VPN Route Redirection for Private-Network Traffic Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing traffic control methods in communication technologies, specifically for provider edge devices, are inflexible and cannot support private network redirection forwarding, limiting their applicability to various network scenarios.
Innovation Solution
A control management device sends a BGP route advertisement message with indication information to a PE device, allowing the PE device to generate VRF entries that support private network redirection forwarding, using VPNv4, VPNv6, or L3EVPN address families, enabling flexible traffic control across multiple network scenarios.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If VPN route is advertised using existing VPN address families (VPNv4, VPNv6, L3EVPN), then route advertisement is simplified and compatibility is improved, but private network redirection forwarding function cannot be achieved
Solution Approach 1:
The patent applies universality by enabling existing VPN address families to serve dual purposes: traditional public network tunnel forwarding and new private network redirection forwarding. The indication information field in the BGP route advertisement message allows the same route advertisement mechanism to support multiple forwarding scenarios without requiring separate address families, thus achieving multi-functionality while maintaining simplicity.
2Adaptability or versatility
If FlowSpec address family is used to enable private network redirection, then forwarding flexibility is improved, but network configuration complexity increases
Solution Approach 1:
The patent extracts the essential control function from FlowSpec and integrates it into existing BGP route advertisement messages. By using the indication information field within standard BGP messages, the solution removes the need for separate FlowSpec configuration mechanisms, thereby achieving traffic control flexibility without the associated configuration complexity.
Solution Approach 2:
The indication information field acts as an intermediary that carries control instructions within the existing BGP route advertisement message structure. This intermediary mechanism enables private network redirection functionality to be transmitted through standard BGP protocols, avoiding the need for additional FlowSpec address family and simplifying the configuration process.
3Device complexity
If PE device forwards traffic through public network tunnel only, then routing simplicity is maintained, but traffic control flexibility is reduced
Solution Approach 1:
The patent applies dynamics by enabling the PE device to dynamically select between public network tunnel forwarding and private network redirection forwarding based on the indication information in the received BGP route advertisement message. This dynamic behavior allows the system to adapt to different network scenarios while maintaining a relatively simple routing mechanism, as the decision logic is embedded in the route advertisement processing rather than requiring complex separate control planes.
Data Source
AI summary
Embodiments disclose methods and devices for traffic control. A border gateway protocol (BGP) route advertisement message is sent by a control management device, where the message advertises a virtual private network (VPN) route instructing a device to redirect a VPN route to iterate to a first next hop (a private IP address) of a private network (towards reaching an IP address prefix), the IP address prefix to a destination host, and a network address of the first next hop towards reaching the IP address prefix. A virtual routing and forwarding (VRF) entry, including the IP address prefix and outbound interface information connected to the first next hop, is generated based on the indication information. The outbound interface information is determined in a local VRF table based on the indication information and network address of the first next hop, and the VRF entry is generated and used for controlling network traffic.