Network Pipeline Abstraction Layer for Dynamic Split Interfaces
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current SFC architectures lack support for flexible steering rules, configurable and dynamic interface mappings, and network acceleration in a single accelerated data plane, which hinders scalability and efficiency in modern cloud-centric networks.
Innovation Solution
Implementing a network pipeline abstraction layer (NPAL) with hardware-accelerated flexible steering rules and configurable interfaces on a data processing unit (DPU) to process network traffic data in a single accelerated data plane, supporting multiple network protocols and functions, and enabling fast link recovery and policy-based routing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional middleboxes are used for security and performance functions, then network security and traffic management are improved, but device complexity and capital investment increase
Solution Approach 1:
The patent combines multiple middlebox functions (firewall, load balancer, IDS, DLP, VPN, WAN optimization) into a single integrated network pipeline on the DPU. This consolidation maintains comprehensive security and traffic management capabilities while reducing the number of separate physical devices needed, thereby lowering device complexity and capital investment.
Solution Approach 2:
The DPU is designed as a universal platform that can perform multiple network functions simultaneously through a single device. The network pipeline on the DPU provides multi-functional capabilities including security inspection, load balancing, intrusion detection, data loss prevention, and WAN optimization, eliminating the need for specialized hardware for each function.
2Reliability
If multiple physical middlebox devices are deployed, then network security functions are improved, but operational complexity and maintenance costs increase
Solution Approach 1:
By merging multiple security functions into a single DPU platform, the patent simplifies operational management. Instead of managing multiple separate devices with different interfaces and maintenance requirements, administrators can manage all security functions through a unified system, reducing operational complexity and maintenance burden.
3Ease of manufacture
If traditional network architectures are used, then implementation simplicity is maintained, but scalability and efficiency in cloud-centric networks are limited
Solution Approach 1:
The DPU acts as an intermediary layer between traditional network infrastructure and cloud-centric applications. It provides a standardized platform that bridges legacy network architectures with modern cloud demands, enabling scalable deployment of network functions while maintaining compatibility with existing infrastructure.
Solution Approach 2:
The network pipeline on the DPU is designed to be dynamic and configurable, allowing network functions to be scaled, adjusted, and reconfigured based on changing cloud workload demands. This dynamic capability enables the system to adapt to varying scalability requirements without requiring complete architectural changes.
Data Source
AI summary
Technologies for creating an optimized and accelerated network pipeline using a network pipeline abstraction layer (NPAL) for split interfaces are described. A DPU includes a physical port configured to couple to a breakout cable that physically couples to a set of a plurality of devices, DPU hardware, and a memory operatively coupled to the DPU hardware. The NPAL supports a plurality of logical split ports, each logical split port corresponding to one of the plurality of devices, wherein the network pipeline comprises a set of tables and logic organized in a specific order to be accelerated by the acceleration hardware engine. The acceleration hardware engine is to process the network traffic data using the network pipeline.