MPLS Cookie Label for Misforwarding Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
MPLS networks experience misforwarding of VPN packets due to errors in routing and label swapping, especially in multi-vendor environments, where existing methods fail to effectively prevent misforwarding in the data plane and are not compatible with native MPLS backbones or traffic engineering.
Innovation Solution
Incorporating MPLS cookie labels into the label stack in the data plane, allowing egress edge nodes to detect misforwarding by comparing the cookie with a stored value, and distributing cookies with FEC labels in the control plane to ensure accurate packet forwarding.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If MPLS label switching is used for VPN packet forwarding, then packet forwarding efficiency is improved, but misforwarding errors occur due to label swapping mistakes or routing errors
Solution Approach 1:
The patent introduces a cookie as an intermediary verification mechanism between the ingress PE and egress PE. The cookie is inserted into the MPLS label stack at the ingress PE and verified at the egress PE to ensure the packet was correctly routed through the MPLS network, preventing misforwarding while maintaining efficient label-based forwarding
Solution Approach 2:
The patent implements a feedback mechanism where the egress PE verifies the cookie value against the expected value derived from the VPN route. This verification provides feedback on whether the packet was correctly forwarded, allowing the system to detect and prevent misforwarding errors
2Reliability
If cookies are distributed in the control plane with labels, then misforwarding detection capability is improved, but data plane processing complexity increases
Solution Approach 1:
The patent merges the cookie with the MPLS label stack structure, combining the verification function into the existing label processing path. The cookie is inserted as an additional field within the label stack, allowing verification without requiring separate control plane distributions or additional processing steps beyond standard label handling
3Reliability
If existing IP tunneling methods (GRE, L2TPv2) are used for VPN authentication, then authentication capability is provided, but compatibility with native MPLS backbone and traffic engineering is lost
Solution Approach 1:
The patent creates a universal solution that works within the existing MPLS label switching framework without requiring separate tunneling protocols. The cookie mechanism integrates with standard MPLS label stacking, enabling authentication and verification functions while maintaining full compatibility with MPLS backbone infrastructure and traffic engineering capabilities
Data Source
AI summary
A method and system for preventing misforwarding of packets from an MPLS network to a virtual private network are disclosed. The method includes receiving a packet at an ingress edge node of the MPLS network, associating a cookie with a label bound to a route by an egress edge node of the MPLS network, and inserting the cookie on an MPLS label stack at the ingress edge node. The packet is transmitted over the MPLS network to an egress edge node. The cookie allows the egress edge node to detect if the transmitted packet is misforwarded by comparing the cookie in the label stack of the transmitted packet with a stored cookie label at the egress edge node.