Automated Network Element Policy Configuration for Data Center Traffic

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Manual configuration of routing and traffic redirection policies in data center networks is tedious, time-consuming, and error-prone, especially when managing load balancing and application delivery services across multiple network elements.

Innovation Solution

Automating the configuration of return traffic redirection by injecting forwarding policies into network elements, establishing communication channels between service appliances and network elements, identifying and implementing policies on relevant ports, and propagating policies through the network to ensure return traffic is directed back to the service appliance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual configuration of routing and traffic redirection policies is performed, then network control and policy implementation are achieved, but the configuration process becomes tedious, time-consuming, and error-prone

Engineering Contradiction:
Improveconfiguration accuracyVSAvoidconfiguration time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The network element automatically discovers service appliances and their associated policies through self-service mechanisms. The forwarding policy implementation is performed autonomously by the network element based on received policy information, eliminating the need for manual configuration and reducing both time and errors.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

A policy information receiving module acts as an intermediary between service appliances and the network element's forwarding plane. This intermediary receives forwarding policies from service appliances and automatically translates them into appropriate port configurations, streamlining the configuration process.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If manual configuration of forwarding policies on multiple network elements is performed, then return traffic redirection is achieved, but operational complexity and error rate increase

Engineering Contradiction:
Improvetraffic redirection accuracyVSAvoidconfiguration complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The network element autonomously identifies ports that need policy application by examining its own port configurations and routing tables. The system automatically determines which ports are associated with service appliances and applies forwarding policies accordingly, without requiring manual intervention to analyze complex network topologies.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The forwarding policy configuration is segmented into distinct functional modules: a policy information receiving module that accepts policies from service appliances, a port identification module that discovers relevant ports, and a policy application module that implements the forwarding rules. This modular approach simplifies the overall configuration complexity.

Inventive Principle:
Principle #1Segmentation

3Productivity

If automated forwarding policy injection is implemented, then configuration time is reduced, but system automation complexity increases

Engineering Contradiction:
Improveconfiguration speedVSAvoidautomation system complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The network element's control plane is enhanced with a universal policy information receiving module that can handle forwarding policies from multiple service appliances simultaneously. This multi-functional module consolidates what would otherwise require separate configuration mechanisms for each service appliance, improving productivity without proportionally increasing complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system implements feedback mechanisms where the network element monitors port status and traffic flows to verify that forwarding policies are correctly applied. This feedback loop ensures that automated configuration produces the desired results and allows for dynamic adjustment if policies need modification, enhancing productivity through reliable automation.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP3295654B1Configuration of network elements for automated policy-based routing
Publication Date: 2020.07.08 CISCO TECHNOLOGY INC
  • EP3295654B1 patent drawingFigure 1
  • EP3295654B1 patent drawingFigure 2
  • EP3295654B1 patent drawingFigure 3

AI summary

In one embodiment a forwarding policy from a first network node coupled to a network element is received. The forwarding policy specifies an address of a second network node coupled to the network element. A plurality of ports of the network element are identified, wherein the second network node is accessible from the network element through each of the plurality of ports. The forwarding policy is applied to the plurality of ports of the network element. Network traffic received at a port of the plurality of ports from the second network node is forwarded to the first network node.