Overlay Header Flow Anchoring for SD-WAN Thread Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In software-defined wide area networks (SD-WAN), there is no clear method to ensure uniform distribution of data packet flows across service processing threads, leading to inefficient processing and difficulty in providing Service Level Agreement (SLA) guarantees for applications like voice, due to obscurity of inner packet information and uneven flow distribution.
Innovation Solution
The solution involves using identifiers to pin traffic flows between endpoints, employing a core-class message to map specific applications to dedicated service processing threads, and implementing end-to-end flow anchoring to ensure deterministic performance and reduce latency, jitter, and other network effects.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If software forwarding-based architecture is used to distribute service plane processing without overlay involvement, then processing efficiency is improved through parallel distribution, but flow distribution uniformity deteriorates leading to uneven traffic across threads
Solution Approach 1:
The patent implements a feedback mechanism where the system monitors actual flow distribution across service processing threads and dynamically adjusts the hash function parameters or thread selection logic to achieve uniform distribution. The flow distribution thread receives feedback about current thread utilization and packet distribution patterns, then modifies its distribution strategy to balance load evenly while maintaining high processing efficiency.
2Stability of the object's composition
If hash-based flow distribution is used to evenly distribute packets among threads, then flow distribution uniformity is improved, but processing determinism deteriorates due to overlay environment obscurity
Solution Approach 1:
The patent applies preliminary action by pre-establishing flow anchoring information in the overlay header before packets enter the service plane. The source node determines the target service processing thread in advance using a deterministic algorithm based on packet 5-tuple and overlay endpoint identifiers, then embeds this thread identifier in the overlay header. This preliminary assignment ensures both uniform distribution and processing determinism, as packets are pre-routed to specific threads without requiring complex hash calculations at each node.
Solution Approach 2:
The overlay header acts as an intermediary carrier that transports flow anchoring information (thread identifier) from the source node through the overlay network to the destination node and service processing thread. This intermediary mechanism enables deterministic thread selection by embedding the target thread identifier directly in the packet header, allowing service processing threads to be identified and selected reliably without exposing inner packet information to the overlay environment.
3Reliability
If overlay encapsulation is used to protect inner packet information, then security is improved, but flow control capability deteriorates due to obscurity of packet details
Solution Approach 1:
The patent segments packet handling into two distinct parts: overlay processing and service plane processing. The overlay header contains flow anchoring information (thread identifier) that enables service plane processing without exposing inner packet details to overlay nodes. This segmentation allows overlay encapsulation to provide security while maintaining flow control capability, as the necessary routing information is extracted and processed in the overlay layer before service plane operations.
Data Source
AI summary
End-to-end data packet flow control is described for an overlay environment of a wide area network. A method includes detecting an active session of a specific application with a source node and a destination node within an overlay environment, detecting a traffic flow from the source node to the destination node associated with the active session, mapping the traffic flow to a dedicated service processing thread of a network services appliance, mapping an identifier to the dedicated service processing thread, and forwarding the traffic flow to the destination node through the dedicated service processing thread by applying the identifier to the traffic flow.