IPv6 Extension Headers for Micro-Segmentation Packet Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The overheads of packet transmission in micro-segmentation networks are high due to the use of VXLAN headers that are not extensible enough, requiring complex encapsulation and excessive network resources.
Innovation Solution
Implementing micro-segmentation in IPv6 networks using IPv6 extension headers to carry EPG information, allowing group-based policies to be executed without decapsulating VXLAN headers, thereby reducing processing complexity and overheads through simpler encapsulation formats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VXLAN headers are used to carry EPG information in micro-segmentation networks, then the micro-segmentation function can be implemented, but the packet transmission overheads become excessively high and the encapsulation becomes complex
Solution Approach 1:
The patent changes the parameter of the header format from VXLAN overlay header to IPv6 extension header. This parameter change allows EPG information to be carried in a more extensible and simpler format, reducing encapsulation complexity while maintaining micro-segmentation functionality. The IPv6 extension header provides better flexibility and reduces overhead compared to VXLAN headers.
Solution Approach 2:
The patent segments the EPG information into IPv6 extension headers that can be independently processed. By using IPv6 extension headers, the EPG information is separated from the main packet flow and can be handled by transit nodes without requiring full VXLAN decapsulation, thus reducing processing complexity and overhead.
2Reliability
If VXLAN headers are used to carry EPG information, then micro-segmentation can be implemented, but the packet transmission overheads increase excessively
Solution Approach 1:
The patent changes the header parameter from VXLAN to IPv6 extension header, which has a more efficient structure for carrying EPG information. This parameter change reduces the byte overhead of the header while maintaining the ability to carry necessary EPG information, thus reducing packet transmission overhead and energy consumption.
Solution Approach 2:
The patent extracts the EPG information from the VXLAN header structure and places it into IPv6 extension headers. This extraction allows the EPG information to be carried in a more efficient format that requires fewer bytes, reducing the overall packet size and transmission overhead while maintaining micro-segmentation functionality.
3Reliability
If VXLAN headers are used, then EPG information can be carried, but the extensibility is insufficient and new functions cannot be easily added
Solution Approach 1:
The patent uses IPv6 extension headers which have universal applicability and multi-functionality. The IPv6 extension header structure is designed to be highly extensible, allowing new functions and information types to be added without changing the fundamental packet structure. This provides better adaptability compared to VXLAN headers while maintaining EPG information carrying capability.
Solution Approach 2:
The patent leverages the dynamic nature of IPv6 extension headers that can be flexibly added, removed, or modified based on network requirements. The extension header structure allows for dynamic adaptation to new functions and information types, providing superior extensibility compared to the more rigid VXLAN header format.
Data Source
AI summary
This application provides a packet processing method, a device, a system, and a storage medium. A first network device receives an original packet, generates an IPv6 packet based on the original packet and endpoint group (EPG) information, where the IPv6 packet comprises an IPv6 extension header and the original packet, and the IPv6 extension header comprises the EPG information, and sends the IPv6 packet. A second network device receives the IPv6 packet;obtains the EPG information from the IPv6 extension header, and processes the IPv6 packet according to a group based policy corresponding to the EPG information.