Modular Middlebox Architecture for Network Function Consolidation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern middleboxes are expensive, closed systems with limited extensibility and uniformity in management APIs, making it difficult to consolidate diverse functions and manage resources effectively.
Innovation Solution
A modular middlebox architecture that incorporates a policy enforcement layer (PEL) and a local coordinator to receive configuration information from a network-wide controller, allocate resources, and process traffic flows based on specified functions and schedules, enabling flexible and efficient consolidation of network applications on a shared hardware platform.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple standalone middleboxes are deployed to perform different network functions, then functional versatility is improved, but device complexity and management difficulty increase
Solution Approach 1:
The patent merges multiple standalone middlebox functions into a single integrated service router platform. The service router consolidates packet forwarding, firewall, intrusion detection/prevention, load balancing, and WAN optimization functions into one device, eliminating the need to manage multiple separate middleboxes while maintaining all required functionalities.
Solution Approach 2:
The service router is designed as a universal platform capable of performing multiple network functions simultaneously. It incorporates a control plane that can dynamically allocate and manage diverse network services on a shared hardware platform, allowing one device to replace multiple specialized middleboxes.
2Reliability
If specialized middleboxes are deployed for specific functions, then functional precision is improved, but resource utilization efficiency deteriorates
Solution Approach 1:
The service router implements dynamic resource allocation through its control plane, which can adjust resource distribution based on current network conditions and service requirements. This allows the system to optimize resource utilization in real-time while maintaining the functional precision of specialized services through virtualized resource partitions.
Solution Approach 2:
The patent introduces virtualization as an additional dimension, creating virtual middlebox instances that run on shared physical hardware. This allows multiple specialized functions to coexist on the same platform with isolated resource allocations, maintaining functional precision while improving overall resource utilization through consolidation.
3Stability of the object's composition
If closed middlebox systems are used, then system stability is improved, but extensibility and adaptability worsen
Solution Approach 1:
The service router architecture segments network functions into modular components that can be independently managed and extended. The control plane separates the management functions from the data plane, allowing stable core functions to remain fixed while enabling easy addition of new services through modular inserts or API-based extensions.
Solution Approach 2:
The control plane acts as an intermediary between the stable hardware platform and the diverse network services. It provides a standardized interface layer that maintains system stability while enabling extensibility through programmable service insertion points and standardized management APIs.
Data Source
AI summary
An apparatus comprising at least one receiver configured to receive a traffic flow, receive information comprising a set of functions and an order of the set from a controller, and a processor coupled to the at least one receiver and configured to assign the traffic flow to one or more resources, determine a processing schedule for the traffic flow, and process the traffic flow by the set of functions, following the order of the set, using the one or more resources, and according to the processing schedule.