Intercept VTEP Network Traffic Steering

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In data center topologies, existing methods fail to efficiently steer network traffic towards service devices, leading to increased latency and inefficiency due to the need for traffic to traverse multiple hops before reaching the service device.

Innovation Solution

The implementation of intercept virtual tunnel end points (VTEPs) that receive redirect criteria, identify matching data fields in MAC frames, and steer them towards a common virtual VTEP IP address instead of the destination IP address, allowing for redirection of network traffic to a service device without traversing the entire network.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of time

If network traffic follows traditional multi-hop routing through edge, leaf, and spine switches, then traffic reaches the service device eventually, but latency increases and efficiency decreases

Engineering Contradiction:
ImprovelatencyVSAvoidnetwork efficiency
Core Design Contradiction:
Loss of timeVSProductivity

Solution Approach 1:

The patent introduces intercept VTEPs as intermediary devices that sit between the traditional network path and service devices. These intercept VTEPs receive redirect criteria and actively intercept MAC frames, steering them directly to service devices bypassing the traditional multi-hop path through edge, leaf, and spine switches. This intermediary mechanism resolves the contradiction by providing a shortcut path that reduces latency while maintaining network efficiency.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the network traffic handling by introducing a separate intercept VTEP layer that operates parallel to the traditional routing infrastructure. Instead of all traffic flowing through the standard switch hierarchy, matching traffic is segmented and redirected through intercept VTEPs to service devices. This segmentation allows simultaneous optimization of different traffic flows, reducing overall latency while preserving network efficiency for non-matching traffic.

Inventive Principle:
Principle #1Segmentation

2Productivity

If network traffic is redirected to service devices using intercept VTEPs, then latency is reduced and efficiency improves, but system complexity increases

Engineering Contradiction:
Improvenetwork efficiencyVSAvoidsystem complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The intercept VTEPs are designed with multi-functionality, serving both as part of the traditional VXLAN tunneling infrastructure and as active traffic interception points. By making intercept VTEPs universal components that can handle both standard VXLAN traffic and redirected traffic, the patent avoids adding entirely new complex infrastructure. This multi-functionality reduces system complexity while maintaining improved network efficiency.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent uses copying of existing VTEP functionality to create intercept VTEPs rather than inventing entirely new mechanisms. The intercept VTEPs replicate the tunneling and forwarding capabilities of standard VTEPs while adding interception and redirection logic. This copying approach leverages existing proven technology, reducing the complexity burden compared to creating novel infrastructure from scratch.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11012412B2Method and system for network traffic steering towards a service device
Publication Date: 2021.05.18 ARISTA NETWORKS INC
  • US11012412B2 patent drawing
  • US11012412B2 patent drawing
  • US11012412B2 patent drawing

AI summary

A method and system for steering network traffic towards a service device. Specifically, the disclosed method and system entail the installation of multiple service devices around a network. Service policies are cloned across the multiple service devices, and further, each service device is assigned common virtual routing and bridging addresses. Using at least these common virtual routing and bridging addresses, intercept virtual tunnel end points (VTEPs) redirect or bridge network traffic to a service device.