In-band Operations Data Signaling Packet Processing Departures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Packet switching networks face challenges in efficiently signaling and validating departure processing, which diverges from normal processing rules, especially in managing backup paths and service offloading, leading to complexities in proof of transit verification.
Innovation Solution
In-band operations data is used to signal packet processing departures by updating an operations data field across nodes, allowing verification of traversal paths and processing types, with unique keys or shares for each node depending on normal or departure processing, enabling validation of proof of transit information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If in-band operations data is used to signal packet processing departures, then network flexibility and reliability are enhanced, but device complexity increases due to the need to update and verify operations data fields across multiple nodes
Solution Approach 1:
The operations data field is segmented into multiple components including a departure indicator field, traversal identifying node field, and proof of transit information field. Each segment serves a specific function in tracking packet processing departures, allowing complex verification to be broken down into manageable parts that can be updated and validated independently at each network node
Solution Approach 2:
The operations data field is preliminarily populated with traversal identifying nodes and departure indicators as packets traverse the network. This preliminary action enables verification devices to validate proof of transit information without requiring complex real-time computations, as the verification data is already embedded in the packet's operations field during normal packet processing
2Measurement precision
If departure processing is signaled in the operations data field, then accurate proof of transit verification is achieved, but loss of time occurs due to additional processing steps at each node
Solution Approach 1:
The departure signaling function is merged with the existing in-band operations data field that packets already carry through the network. Rather than adding separate signaling mechanisms, the departure indicators and traversal information are combined into the operations data field, allowing verification information to be transmitted alongside packet data without requiring additional processing time or separate communication channels
Solution Approach 2:
Each network node automatically updates the operations data field with its own traversal identifying node information and departure indicators as packets pass through it. This self-service approach eliminates the need for centralized tracking or manual verification, as each node independently contributes verification data that can be validated by verification devices without requiring coordination or additional processing time
Data Source
AI summary
In one embodiment, nodes use in-band operations data (e.g., carried in iOAM data field(s)) to signal departures in the processing of a packet in a network. A “departure” refers to a divergence or deviation, as from an established rule, plan, or procedure. Departures include, but are not limited to, sending a packet over a backup path (thus, a departure/deviation from sending over a primary path); offload processing of a packet (thus, a departure/deviation from processing of a packet by an application processing apparatus); and exception or punting/slow/software path processing of a packet (thus, a departure/deviation from normal or fast/hardware path processing of a packet). In one embodiment, a proof of transit validation apparatus uses departure information to select among multiple possible verification secrets, with the selected verification secret used in validation processing with a cumulative secret value obtained from the packet.