Multicast Access Control via Centralized Service Repository
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current service-oriented routing platforms, such as the 128T routing platform, face challenges in extending service configuration to a large number of Session Smart Routers (SSRs) and managing dynamic network and application state, leading to difficulties in propagating service availability and routing information across the network.
Innovation Solution
The implementation of a Service and Topology Exchange Protocol (STEP) enables routers to exchange service and topology state information using a centralized repository, allowing for intelligent routing decisions, optimal packet distribution, and scalable network management by advertising services and routes within and across network segments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a service-oriented routing platform is used to manage multicast services, then service configuration and policy management are improved, but difficulty in extending service configuration to a large number of routers increases
Solution Approach 1:
The system segments service configuration into modular service objects that can be independently defined, stored in a centralized repository, and selectively distributed to specific routers. This allows service configuration to be broken down into manageable units that can be extended across large numbers of routers without increasing overall system complexity.
Solution Approach 2:
A centralized service repository acts as an intermediary between service definitions and routers. The repository stores service objects and enables routers to retrieve and apply service configurations dynamically, eliminating the need for manual configuration extension to each router and simplifying service deployment across large networks.
2Reliability
If traditional routing protocols are used for multicast, then basic routing functionality is maintained, but ability to enforce access policies and control source/receiver eligibility deteriorates
Solution Approach 1:
The system merges traditional routing functionality with service-oriented access control by combining service objects (containing policy information) with routing decisions. Routers evaluate both routing requirements and service policies simultaneously, ensuring that multicast traffic is routed correctly while enforcing access control policies for sources and receivers.
Solution Approach 2:
The system introduces dynamic service objects that can be created, modified, and distributed at runtime based on network conditions and policy requirements. Service filters and access policies are dynamically applied to multicast traffic, allowing the system to adapt to changing network requirements while maintaining reliable routing functionality.
3Reliability
If service state information is propagated across the network, then service availability monitoring is improved, but network overhead and information propagation complexity increase
Solution Approach 1:
The system extracts service state information from individual routers and consolidates it in a centralized service repository. This extraction allows service availability information to be collected and managed centrally, improving monitoring capabilities while reducing the complexity of distributed information propagation across the network.
Solution Approach 2:
The centralized service repository serves multiple functions: storing service definitions, maintaining service state information, enabling service discovery, and supporting policy enforcement. This multi-functional approach improves service availability monitoring without requiring separate mechanisms for each function, thereby reducing overall system complexity.
Data Source
AI summary
A routing system for providing multicast access control includes a plurality of routers including a multicast source router and a plurality of multicast receiver routers, the plurality of routers providing a multicast service, wherein the routers are configured to enforce multicast access control policies for the multicast service including a receiver access policy that controls which multicast receivers are allowed to receive packets from the multicast service and a sender access policy that controls which multicast sources are allowed to send packets to the multicast service for distribution to the multicast receivers.