Distributed Cloud Router for Multi-Fabric Service Chaining
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The integration of on-premises networks with public cloud networks is hindered by the lack of uniformity in policy management, configuration parameters, and routing models, leading to difficulties in applying consistent policies and ensuring high availability and scalability of service chains across multi-cloud fabrics.
Innovation Solution
A method for routing data packets through service chains within and between public cloud networks using a distributed cloud router that spans multiple regions and public cloud networks, employing tunnels to represent different legs of the service chain and utilizing policy-based routing to guide data packets based on source and destination addresses, allowing for granular control and flexible scaling of service nodes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If on-premises networks and public cloud networks are integrated, then computing resources and capabilities are extended, but lack of uniformity in policy management and configuration parameters limits integration ability
Solution Approach 1:
The patent implements a universal policy management framework that works across both on-premises networks and public cloud networks. The system defines standardized policy parameters and configuration schemas that can be applied uniformly across different network types, enabling consistent policy enforcement while maintaining integration capability between heterogeneous network environments.
Solution Approach 2:
The system transforms diverse policy parameters from different network types into a unified parameter space. By defining configurable parameters with standardized data types, validation rules, and default values, the system enables automatic translation and harmonization of policy configurations across on-premises and cloud networks, reducing integration complexity.
2Adaptability or versatility
If service chains are deployed across multi-cloud fabrics, then service flexibility and scalability are improved, but consistent policy application and routing control become difficult
Solution Approach 1:
The patent segments service chains into discrete service nodes and policy enforcement points that can be independently configured and managed. Each service node in the chain can have its own policy rules, while the overall chain maintains consistent policy application through a centralized policy management framework that propagates rules across all segments.
Solution Approach 2:
The system introduces policy intermediaries and abstraction layers between service chains and underlying network infrastructure. These intermediaries translate high-level policy intent into specific routing and enforcement rules, ensuring consistent policy application across multi-cloud service chains while maintaining flexibility in service deployment.
3Reliability
If multiple VRF routing tables are used for network segmentation, then routing control and security are improved, but device complexity and configuration difficulty increase
Solution Approach 1:
The patent merges multiple VRF routing tables into a unified routing framework that maintains the security and segmentation benefits of VRFs while reducing configuration complexity. The system provides a centralized view of all routing tables and enables automated policy propagation across VRF boundaries, simplifying management while preserving network security isolation.
Data Source
AI summary
Techniques for routing data packets through service chains within and between public cloud networks of multi-cloud fabrics. A router in a network, e.g., a public cloud network, receives data packets from nodes in the network through segments of the network. Based at least in part on (i) a source address of the data packet, (ii) a destination address of the data packet, and (iii) an identity of the segments of the network from which the data packets are received, the router determines a next node in the network to which the data packet is to be forwarded. The router may then forward the data packet through another segment of the network to the next node and then receive the data packet from the next node through the another segment.