Firewall Filter Link Aggregation Member Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current link aggregation group (LAG) technologies use hash algorithms that do not accept all packet parameters, leading to inadequate user control over member link selection and potential overloading of links, resulting in disruptions in routing network packets.
Innovation Solution
Implementing a firewall filter that accepts a broad array of packet parameters to route network packets, allowing users to control member link selection and prevent overloading by associating packet parameters with specific links using a data structure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If hash algorithms are used for member link selection in LAG, then automated routing is achieved, but user control over link selection is inadequate and link overloading may occur
Solution Approach 1:
The patent implements a dynamic link selection mechanism that combines automated hash algorithm routing with user-configurable firewall filter rules. The system allows users to dynamically override automatic routing decisions by defining packet parameter-based rules that specify preferred member links for particular traffic flows, thus maintaining automation while enabling user control when needed.
Solution Approach 2:
The patent introduces firewall filter rules as an intermediary layer between the hash algorithm and the actual link selection process. These rules act as a mediator that can intercept packet routing decisions, apply user-defined criteria based on packet parameters, and redirect traffic to specific member links, thereby bridging the gap between automated routing and user control.
2Extent of automation
If hash algorithms are used for member link selection, then routing automation is provided, but link overloading occurs causing routing disruptions
Solution Approach 1:
The patent implements a feedback mechanism where the system monitors packet parameters and link utilization, then applies firewall filter rules to adjust routing decisions. When link overloading is detected or anticipated based on packet characteristics, the system automatically redirects traffic to underutilized links, maintaining routing stability while preserving automation.
Solution Approach 2:
The patent changes the routing parameters from simple hash-based destination addressing to multi-parameter packet analysis including source/destination IP addresses, port numbers, and protocol types. This parameter expansion enables more granular traffic distribution across member links, preventing overloading by spreading different traffic types across different links based on their characteristics.
3Device complexity
If limited packet parameters are accepted for routing, then simple routing logic is maintained, but user control and link selection flexibility are reduced
Solution Approach 1:
The patent segments the routing decision-making process into two independent parts: a simple hash algorithm for default routing and a configurable firewall filter system for specialized routing needs. This segmentation allows the core routing logic to remain simple while providing users with flexible, parameter-rich control options when they need to override or customize routing behavior for specific traffic flows.
Data Source
AI summary
A device may store, in a data structure, a set of link identifiers, that identifies a set of member links included in a link aggregation group, in association with a set of packet parameters. The device may receive a network packet. The device may determine a particular packet parameter, of the set of packet parameters, associated with the network packet. The device may route the network packet via a particular member link, of the set of member links, identified by the particular link identifier.