DPU Steering Rules for Flexible Service Function Chaining
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current SFC architectures lack support for flexible steering rules, configurable and dynamic interface mappings, and network acceleration in a single accelerated data plane, limiting scalability and efficiency in modern, cloud-centric networks.
Innovation Solution
Implementing hardware-accelerated flexible steering rules, configurable and dynamic SFC interfaces, and a network pipeline abstraction layer (NPAL) on a DPU to process network traffic data in a single accelerated data plane, using a combined set of network rules from different virtual bridges and protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional middleboxes are used for network functions, then security and performance functions are provided, but capital investment, space occupation, and operational complexity increase
Solution Approach 1:
The patent combines multiple virtual bridges with distinct steering rules into a single accelerated data plane. The DPU merges network services and their associated ruleset configurations into unified pipeline configurations that can be processed by a single hardware-accelerated engine, eliminating the need for multiple separate processing planes while maintaining the functional distinctions of individual virtual bridges.
Solution Approach 2:
The patent creates a universal accelerated data plane that can handle multiple protocols and network functions simultaneously. The single data plane is designed to process diverse network traffic types and apply different steering rules based on the configuration, making it multi-functional rather than requiring dedicated hardware for each function.
2Adaptability or versatility
If multiple virtual bridges with distinct steering rules are implemented, then flexible network control is achieved, but processing complexity and resource requirements increase
Solution Approach 1:
The patent merges multiple virtual bridges and their distinct steering rules into a single accelerated data plane. The system combines the rulesets from multiple virtual bridges into unified pipeline configurations that maintain the flexibility and adaptability of each individual bridge while being processed efficiently by a single hardware-accelerated engine.
Solution Approach 2:
The patent transforms the configuration parameters of multiple virtual bridges into a unified set of pipeline configurations. By changing the representation format from multiple separate rulesets to combined pipeline configurations, the system maintains the functional flexibility of multiple virtual bridges while reducing processing complexity through hardware acceleration.
3Productivity
If hardware acceleration is implemented for network processing, then processing speed and efficiency improve, but support for multiple protocols and functions may be limited
Solution Approach 1:
The patent designs a universal accelerated data plane that supports multiple protocols and network functions within a single hardware-accelerated engine. The system achieves multi-functionality by configuring the hardware accelerator to handle diverse network traffic types and apply different steering rules based on protocol-specific pipeline configurations, rather than requiring dedicated hardware for each protocol.
Solution Approach 2:
The patent uses parameter changes to enable protocol flexibility within hardware acceleration. By dynamically configuring pipeline parameters and ruleset configurations based on the network traffic type, the system maintains high processing speed while adapting to support multiple protocols and functions through reconfigurable hardware parameters.
Data Source
AI summary
Technologies for configuring flexible hardware-accelerated rules in a Service Function Chaining (SFC) architecture are described. A DPU includes an acceleration hardware engine to provide a single accelerated data plane, and a processing device that generates a first virtual bridge and a second virtual bridge. The first virtual bridge is controlled by a first network service hosted on the DPU and has a first set of one or more network rules. The second virtual bridge has a second set of one or more user-defined network rules. The processing device generates a combined set of network rules based on the first set of one or more network rules and the second set of one or more user-defined network rules. The acceleration hardware engine processes network traffic data in the single accelerated data plane using the combined set of network rules.