Network Device Offloading Services to Virtual Machines
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network devices require replacement of WAN cards or specialized software development to modify their functionality and operations, which is inefficient and limiting in terms of service provision.
Innovation Solution
A method where a network device receives information about a service set, identifies a service to apply to a data flow, and directs the data flow to a virtual machine for processing, allowing the virtual machine to apply the service without modifying the network device itself, enabling the provision of various services such as firewall, NAT, or WAN optimization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If network device functionality is modified by replacing WAN cards or developing specialized software, then service capabilities are improved, but device complexity and modification difficulty increase
Solution Approach 1:
The patent introduces a service gateway as an intermediary component between the network device and external services. The service gateway receives service requests from the network device, retrieves appropriate service modules from a service repository, and applies them to data flows. This intermediary approach allows service capability expansion without modifying the core network device architecture or requiring complex software development on the device itself.
Solution Approach 2:
The patent extracts service processing functionality from the network device and places it in external service modules stored in a service repository. Instead of embedding service logic within the network device, the service modules are separated and can be independently managed, retrieved, and applied as needed. This extraction reduces device complexity while maintaining service versatility.
2Adaptability or versatility
If network device is modified to provide multiple services, then service versatility is improved, but ease of operation deteriorates
Solution Approach 1:
The service gateway acts as an intermediary that simplifies operation by handling service module retrieval and application automatically. Network device operators only need to request services by name; the service gateway manages the complex tasks of locating, retrieving, and applying the appropriate service modules from the repository, maintaining operational simplicity despite increased service versatility.
Solution Approach 2:
The system implements self-service through automatic service module retrieval and application. When a network device requests a service, the service gateway automatically retrieves the appropriate service module from the repository and applies it without requiring manual configuration or intervention. This automation maintains ease of operation while enabling diverse service capabilities.
3Adaptability or versatility
If specialized software development is performed to modify network device operations, then functionality is improved, but loss of time increases
Solution Approach 1:
The patent implements preliminary action by pre-storing service modules in a service repository before they are needed. Service modules are developed, tested, and stored in advance, allowing network devices to quickly retrieve and apply them on-demand without requiring time-consuming software development or configuration at the point of use. This significantly reduces implementation time while maintaining functional versatility.
Solution Approach 2:
The system uses copying by retrieving service modules from the service repository rather than developing custom software for each network device. Pre-developed service modules can be copied and applied to multiple network devices, eliminating the need for specialized software development for each device while maintaining consistent functionality across the network.
4Adaptability or versatility
If network device processes all services internally, then service control is improved, but productivity decreases
Solution Approach 1:
The patent applies segmentation by dividing service processing into two parts: control plane functions remain in the network device for service control, while data plane processing is offloaded to external service modules. The service gateway coordinates this segmentation by receiving requests from the network device, retrieving appropriate service modules, and applying them to data flows. This segmentation maintains service control while improving processing efficiency by distributing workload.
Solution Approach 2:
The service gateway serves as an intermediary that enables efficient service processing by managing the coordination between the network device and service modules. It handles service module retrieval, application, and management, allowing the network device to focus on core networking functions while external services handle specialized processing tasks, thereby improving overall productivity.
Data Source
AI summary
A network device may receive information regarding a service set identifying service to apply to a data flow received via a particular interface of the network device; receive the data flow via the particular interface; identify a service to provide to the data flow based on the information regarding the service set; identify a processing device to process the data flow; and provide the data flow to the processing device. The processing device may be different than the network device and may process the data flow, on behalf of the network device, to form a processed data flow. The processed data flow may include the data flow with the service applied to the data flow. The network device may further receive the processed data flow from the processing device and transmit the processed data flow toward a destination device.