Network Visibility Control Plane Rule Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network visibility systems face challenges in structured exchange of control and configuration information between data plane and control plane components, which is essential for initializing and maintaining proper traffic forwarding in network visibility systems, especially in scenarios involving GTP traffic in 3G and 4G/LTE networks.
Innovation Solution
The techniques involve a control plane component receiving messages from a data plane component about available forwarding resources, retrieving configuration information, determining mappings between network prefixes and resources, and generating packet forwarding rules to program the data plane component for traffic forwarding, with mechanisms for updating rules as resources or configurations change.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If manual configuration of forwarding rules is used in network visibility systems, then system complexity is reduced, but initialization time and maintenance effort increase significantly
Solution Approach 1:
The system enables self-service by allowing the data plane component to automatically discover available forwarding resources and by implementing an automated rule generation mechanism that creates forwarding rules based on retrieved configuration information and determined mappings, eliminating the need for manual configuration while maintaining low system complexity
Solution Approach 2:
The system applies preliminary action by retrieving configuration information and determining mappings between network prefixes and forwarding resources before generating forwarding rules, which prepares the system in advance and reduces initialization time when traffic forwarding needs to be established
2Productivity
If automated rule generation is implemented, then initialization speed improves, but system complexity and processing overhead increase
Solution Approach 1:
The automated rule generation process is segmented into distinct functional components: receiving messages about forwarding resources, retrieving configuration information, determining mappings between network prefixes and resources, and generating forwarding rules. This segmentation manages complexity by organizing the automation process into manageable, modular steps that can be executed sequentially
Solution Approach 2:
The control plane component acts as an intermediary between the data plane component and the forwarding rule generation process. It receives messages from the data plane, retrieves configuration information, determines mappings, and generates rules, thereby mediating the automated process and managing system complexity through a centralized control mechanism
3Adaptability or versatility
If frequent updates of forwarding rules are performed, then network adaptability improves, but processing overhead and system load increase
Solution Approach 1:
The system implements feedback mechanisms where the data plane component sends messages about available forwarding resources to the control plane, which then determines whether updates to forwarding rules are necessary based on changes in configuration information or mappings. This feedback loop enables adaptability while avoiding unnecessary processing by only updating rules when actual changes occur
Data Source
AI summary
Techniques for exchanging control and configuration information in a network visibility system are provided. In one embodiment, a control plane component of the network visibility system can receive one or more first messages from a data plane component of the network visibility system, where the one or more first messages define one or more forwarding resources available on the data plane component. The control plane component can further retrieve configuration information stored on the control plane component that comprises one or more network prefixes to be monitored by the network visibility system, and can determine one or more mappings between the network prefixes and the forwarding resources. Upon determining the one or more mappings, the control plane component can generate one or more packet forwarding rules based on the mappings. Finally, the control plane component can transmit one or more second messages to the data plane component that include the packet forwarding rules for programming on the data plane component.