Geometric Flow Programming for Compact NVD Packet Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing packet processing systems in Virtual Cloud Networks (VCNs) face inefficiencies due to cumbersome and large rule sets on Network Virtualization Devices (NVDs), which can lead to processing delays and resource overhead.
Innovation Solution
A method and system for processing packets using compiled rules on NVDs, where applicable rules are determined based on packet attributes, and if no local rule exists, the packet is forwarded to a server for rule determination and processing, with the option to generate new compiled rules for multiple stages, including routing, security, and transformation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If comprehensive rule sets are maintained on NVDs for complete packet processing coverage, then packet processing reliability is improved, but device complexity and processing time increase
Solution Approach 1:
The patent segments the rule set into two parts: a compact local rule set maintained on the NVD for common packet types, and a comprehensive centralized rule set stored on the controller. This segmentation allows the NVD to operate with minimal local rules while the controller provides access to the complete rule set when needed, resolving the contradiction between reliability and complexity.
Solution Approach 2:
The system performs preliminary action by pre-loading only the most commonly needed rules into the NVD's local rule set. This allows the NVD to quickly process routine packets using local rules while maintaining the ability to retrieve additional rules from the controller when necessary, thus balancing reliability with reduced complexity.
2Manufacturing precision
If comprehensive rule sets are maintained on NVDs for complete packet processing coverage, then processing accuracy is improved, but processing speed decreases
Solution Approach 1:
The patent segments the rule set into a compact local portion on the NVD for high-speed processing and a comprehensive centralized portion on the controller for accurate rule determination. This segmentation enables fast processing of common packets using local rules while ensuring accurate rule application through controller access when needed.
Solution Approach 2:
The system applies partial action by maintaining only the essential subset of rules locally on the NVD rather than the complete rule set. This partial local rule set handles the majority of packets at high speed, while the controller provides the remaining rules on-demand, achieving both speed and accuracy.
3Extent of automation
If NVDs store complete rule sets locally, then processing autonomy is improved, but resource overhead increases
Solution Approach 1:
The patent segments the rule storage function between the NVD and the controller. The NVD maintains a minimal local rule set for autonomous processing of common packets, while the controller stores the complete rule set and provides rules on-demand. This segmentation reduces NVD memory overhead while preserving processing autonomy for routine operations.
Solution Approach 2:
The controller serves as a universal rule repository that can serve multiple NVDs, replacing the need for each NVD to store complete rule sets locally. This multi-functional approach allows the controller to provide rule information to any NVD that needs it, reducing overall system resource overhead while maintaining processing autonomy at the NVD level for common cases.
Data Source
AI summary
Systems and methods for geometric based flow programming are disclosed herein. The method can include receiving at least one compiled rule at a first Network Virtualization Device (“NVD”), each of the at least one compiled rules can be applicable to a class of packets received by the first NVD for delivery to a Virtualized Network Interface Card (“VNIC”). The method can include receiving a first packet at the first NVD for delivery to a first VNIC, determining with the first NVD that a first rule of the at least one compiled rule is applicable to the first packet, and processing with the first NVD the first packet according to the first rule.