Network Node User-Defined Script Execution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current data network configurations do not allow clients to download and execute their own software or scripts on network devices, limiting service providers' ability to offer customized services and clients' control over network resources.

Innovation Solution

A method and system for configuring network servicing nodes with user-defined instruction scripts, enabling users to upload programs that include scripts, which are processed and applied to data packets based on conditions such as destination addresses and protocols, using a storage module and object virtual machine.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If service providers use standardized network device configurations, then network operation and control is simplified, but client customization needs cannot be met

Engineering Contradiction:
Improvenetwork operation controlVSAvoidservice customization
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The network device configuration is segmented into standardized base functions and customizable user-defined script modules. This allows the core network operations to remain standardized while enabling clients to add custom functionality through separate script segments that can be loaded and executed independently on network devices.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If clients can download and execute their own software on network devices, then service flexibility and client control are improved, but system complexity and security risks increase

Engineering Contradiction:
Improveservice flexibilityVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

An intermediary management system is introduced between clients and network devices. This intermediary handles the upload, validation, and deployment of user-defined scripts, abstracting away the complexity from both clients and network devices while enabling flexible customization. The intermediary acts as a mediator that manages the script lifecycle and ensures secure execution.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If clients can download and execute their own software on network devices, then client control over network resources is improved, but security risks and system stability may worsen

Engineering Contradiction:
Improveclient controlVSAvoidsystem stability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system performs preliminary validation and security checks on user-defined scripts before they are loaded and executed on network devices. This preliminary anti-action prevents malicious or erroneous scripts from compromising system stability, while still allowing clients meaningful control over network resources through approved custom scripts.

Inventive Principle:
Principle #9Preliminary anti-action

Data Source

PatentUS11563632B2User defined objects for network devices
Publication Date: 2023.01.24 A10 NETWORKS INC
  • US11563632B2 patent drawing
  • US11563632B2 patent drawing
  • US11563632B2 patent drawing

AI summary

Provided are systems and methods for configuring a network servicing node with user-defined instruction scripts. A method for configuring a network servicing node with user-defined instruction scripts may commence with receiving, from a user of the network servicing node, a user loadable program. The user loadable program may include at least the user-defined instruction scripts. The method may continue with receiving a data packet from a data network associated with the user. The method may further include determining a condition associated with the data packet. The method may continue with identifying, in a name table, a program name associated with a program using the condition. The program may be the user loadable program. The method may further include processing the data packet by getting an instruction of the user-defined instruction scripts from a storage module and applying the instruction to the data packet.