Inline Probes Validate Network Traffic Policy Accuracy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network traffic policy validation methods are costly, resource-intensive, and limited in their ability to provide accurate, widespread deployment and inline monitoring, often relying on pseudo-random sampling and vendor-specific endpoint devices.
Innovation Solution
The implementation of inline probes with a dedicated controller for remote operation, which can be auto-discovered and integrated with network transceivers to analyze and validate traffic policies without significant impact on network resources, allowing for real-time data packet decoding, pattern matching, and enforcement testing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If Brix Verifiers are deployed throughout the network to validate traffic policies, then measurement precision and validation accuracy are improved, but device cost and network expense increase substantially
Solution Approach 1:
The patent uses inline probes that create virtual copies of network traffic for analysis without requiring expensive dedicated verification devices at every network point. The probes capture traffic samples and forward them to a centralized analysis system, providing accurate validation at a fraction of the cost of deploying Brix Verifiers throughout the network.
Solution Approach 2:
The patent introduces inline probes as intermediary devices that sit between traffic sources and destinations, capturing and analyzing traffic without requiring endpoint modifications or expensive specialized hardware. These probes serve as mediators that provide validation functionality without the substantial cost of dedicated verification devices.
2Device complexity
If pseudo-random sampling is used to reduce processing requirements, then device cost and power consumption are reduced, but measurement precision and validation accuracy deteriorate
Solution Approach 1:
The patent performs preliminary traffic classification and filtering at the inline probe level, identifying only the traffic relevant to policy validation before forwarding to the analysis system. This preliminary action reduces the volume of data requiring intensive processing while ensuring that all policy-relevant traffic is captured for accurate validation.
Solution Approach 2:
The patent implements different processing levels at different network points: inline probes perform lightweight local filtering and sampling, while the centralized analysis system performs comprehensive validation. This local quality approach ensures measurement precision where needed while reducing processing requirements at distributed points.
3Device complexity
If monitoring devices are connected to free router ports rather than being inline, then device complexity and installation cost are reduced, but the ability to enforce traffic policies without consuming router ports is worsened
Solution Approach 1:
Instead of connecting monitoring devices to router ports as done in prior art, the patent inverts the approach by having inline probes connect directly to network traffic flows without requiring router port assignments. This inversion eliminates the need to consume router ports while maintaining inline monitoring capability.
Solution Approach 2:
The inline probes are designed to autonomously discover and attach to relevant traffic flows without requiring configuration on router or switch devices. This self-service capability allows deployment without consuming router ports or requiring complex integration with network infrastructure.
4Measurement precision
If endpoint devices are pre-programmed to respond to test packets, then measurement precision for VoIP quality is improved, but device complexity and vendor dependency increase
Solution Approach 1:
The patent uses inline probes as intermediaries that inject test packets into the network and capture responses without requiring pre-programming of endpoint devices. The probes handle all test packet generation and analysis, eliminating the need to modify or configure endpoint devices while maintaining measurement precision.
Solution Approach 2:
The inline probe system provides universal testing capability that works with any network device without requiring vendor-specific configurations or pre-programming. The probes can test various traffic types including VoIP, video, and data streams using a single platform, eliminating vendor dependency.
Data Source
AI summary
At least one inline probe is employed to test compliance of a network element with a network traffic policy. The testing capability of the probe is handled by specialized software or hardware. The inline probes hardware can be implemented in network elements such as routers or transceivers. The inline probes can be discovered, registered, and controlled by a dedicated controller disposed at a remote location.