Edge Device Network Connectivity via Switch Fabric MPLS Tunneling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing switch fabrics lack separation between edge devices and switch fabric devices for administration, control, and data planes, leading to security vulnerabilities and management challenges, as they are often managed by different groups, which can disrupt operations and compromise security.
Innovation Solution
Implementing a method and computer code for connectivity between edge devices in an edge device network using a switch fabric that maintains administrative, control plane, and data plane separation, allowing edge devices and switch fabric devices to operate independently, with edge devices communicating through MPLS tunnels and using auto-discovery protocols like DHCP and ARP for label exchange, enabling separate management and improved security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If edge devices and switch fabric devices are integrated without separation for administration and operation, then device complexity is reduced and ease of operation is improved, but security vulnerability increases and reliability deteriorates due to lack of isolation between management domains
Solution Approach 1:
The patent segments the network into distinct administrative domains: edge device network (145) and switch fabric network (105), with separate control planes and data planes. Edge devices use network-address-based protocols while switch fabric devices use label-based protocols, creating isolation barriers that prevent security incidents in one domain from affecting the other, thus improving reliability while maintaining operational simplicity through automated protocol translation.
2Reliability
If edge devices and switch fabric devices are managed by different groups with coordination requirements, then security and administrative control are improved, but device complexity increases and ease of operation deteriorates due to coordination overhead
Solution Approach 1:
The patent introduces protocol translation mechanisms and automated discovery protocols as intermediaries between the edge device network and switch fabric network. These intermediaries handle the complexity of inter-domain communication, allowing different administrative groups to manage their respective domains independently while maintaining seamless connectivity through automated translation of network addresses to labels and vice versa.
3Reliability
If administrative and control plane separation is implemented between edge devices and switch fabric devices, then security is improved and reliability is enhanced, but device complexity increases due to multiple protocol stacks and translation requirements
Solution Approach 1:
The patent extracts the protocol translation functionality from the core forwarding plane and places it in dedicated translation mechanisms at the boundaries of each network domain. This extraction allows the internal control planes to remain simple and domain-specific, while the translation layer handles the complexity of inter-domain protocol conversion, thus reducing overall device complexity while maintaining security and reliability benefits of separation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In some embodiments, an apparatus includes a first edge device that is operatively coupled to a second edge device via a switch fabric. The first edge device and the second edge device collectively define an edge device network operating with a network-address-based protocol. The first edge device communicates with the second edge device via a multiprotocol label switching (MPLS) tunnel through the switch fabric. Furthermore, the first edge device is operatively coupled to the switch fabric such that a node of the switch fabric can be modified without coordination of the edge device network. Additionally, the first edge device is operatively coupled to the second edge device to define the edge device network such that an edge device of the edge device network can be modified without coordination of the switch fabric.