eBPF ConnTrack Map Synchronization for Load Balancer Availability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network systems face challenges in maintaining high availability and synchronizing packet connection information between load balancers, leading to potential losses and inefficiencies in data processing.
Innovation Solution
The method involves using an eBPF module to track new traffic, add entries to a ConnTrack map, and synchronize connection information across load balancers, with a cloud master node controlling packet connections between the cloud and external networks, ensuring continuous monitoring and maintenance of connection states.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If packet connection information is synchronized between load balancers using traditional methods, then connection state can be maintained, but data processing losses occur and network availability decreases
Solution Approach 1:
The patent replaces traditional mechanical copying methods with eBPF-based programmable network infrastructure. The eBPF program intercepts packets at the kernel level and automatically updates connection tracking information in the map, eliminating the need for manual synchronization mechanisms and reducing processing overhead.
Solution Approach 2:
The patent introduces an eBPF map as an intermediary data structure between load balancers. This map serves as a shared memory space that automatically synchronizes connection tracking information across multiple load balancers without requiring complex communication protocols or centralized coordination.
2Reliability
If connection tracking is implemented across multiple load balancers, then high availability is achieved, but system complexity increases
Solution Approach 1:
The patent replaces complex synchronization software with eBPF-based kernel-level packet interception and automatic map updates. The eBPF program handles connection tracking state synchronization transparently, eliminating the need for complex synchronization protocols, state machines, or coordination logic.
Solution Approach 2:
The patent uses an eBPF map that automatically replicates connection tracking information across load balancers. Instead of implementing complex synchronization logic, the system creates a shared memory structure that is automatically updated and copied to all participating load balancers through the eBPF infrastructure.
3Productivity
If traditional packet filtering and connection tracking are used, then basic network functionality is provided, but synchronization efficiency decreases and processing overhead increases
Solution Approach 1:
The patent replaces user-space packet filtering and connection tracking with eBPF programs running in the kernel space. This substitution eliminates context switching and memory copying overhead, allowing packet inspection and connection tracking to occur directly in the network stack with minimal performance impact.
Solution Approach 2:
The patent performs connection tracking and synchronization actions at the moment packet interception occurs, rather than processing packets in batches or using delayed synchronization. The eBPF program immediately updates the connection map when a packet is seen, ensuring real-time synchronization without accumulating processing backlog.
Data Source
AI summary
According to various embodiments, an electronic device may include an operation of receiving, by a first eBPF module, untracked new traffic from a client; an operation of adding, by the first eBPF module, an entry corresponding to the new traffic to a Conn Track map in response to the operation of receiving the new traffic; an operation of reporting, by the first eBPF module, the addition of the entry to a first synchronization module; and an operation of monitoring, by the first synchronization module, a first connection corresponding to the new traffic. Other embodiments are also available.