FLEX Protocol Control Data Channel Separation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mechanisms for exchanging information between control elements and forwarding elements in network elements are susceptible to Denial of Service (DoS) attacks and have high message overhead due to the use of a single channel for both control and data packets, which can lead to network saturation.
Innovation Solution
The FLEX protocol introduces a stateless, request-response mechanism with separate control and data channels, using TLV encoding for lightweight message parsing and compact binary encapsulation, allowing different transports for control and data channels, and implementing a binding, capability discovery, configuration, and unbinding phase to ensure robustness and extensibility.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If a single channel is used for both control and data packets, then message overhead is reduced, but the network element becomes susceptible to DoS attacks and channel saturation occurs
Solution Approach 1:
The patent divides the communication channel into two separate channels: a control channel for control plane traffic and a data channel for data plane traffic. This segmentation allows independent management of control and data traffic, preventing DoS attacks on control packets from saturating the control channel while data channel capacity is consumed. The control channel maintains reliability even under attack conditions.
2Device complexity
If a single channel carries both control and configuration messages, then device complexity is reduced, but productivity decreases due to channel saturation
Solution Approach 1:
The patent implements separate control and data channels to enable parallel processing of control plane and data plane traffic. This allows configuration messages and control packets to be exchanged simultaneously without competing for the same bandwidth, thereby maintaining high productivity and information exchange efficiency despite the increased structural complexity of having multiple channels.
3Loss of information
If large messages are used for information exchange, then completeness of information is improved, but loss of time increases due to longer transmission duration
Solution Approach 1:
The patent segments large information exchanges into smaller control messages transmitted over the control channel and data packets transmitted over the data channel. This segmentation reduces the transmission time of individual messages while maintaining information completeness through coordinated exchange. The control channel can send compact control messages that reference larger data payloads transmitted separately over the data channel.
Data Source
AI summary
A network element comprises a control element (CE), a plurality of forwarding element (FEs) and an interconnect in communication with said CE and at least one of said FEs. Communication across the interconnect between the CE and the plurality of FEs is done in accordance with a protocol that includes a binding phase used to provide a data channel between the CE and a first one of the FEs. The binding phase is further used to provide a control channel between the CE and the first one of the FEs, the control channel used to transport control and configuration messages. The control channel is separate from the data channel. The protocol also includes a capability discovery phase, a configuration operation phase and an unbind phase executed between the CE and the FE.