Overlay Network Traffic Flow Trace via Encapsulation Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In network deployments, especially in overlay and underlay networks, tracing traffic flows based on source and destination addresses is challenging due to the encapsulation of data packets, which prevents network devices from identifying and isolating specific traffic flows, making it difficult to detect network failures or issues.
Innovation Solution
A network orchestrator extracts route and encapsulation information from ingress and egress overlay network nodes, using credentials like IP and TCP/UDP port addresses to trace traffic flows through both overlay and underlay networks, identifying potential next hops and determining if traffic flows are received at specific nodes, thus creating a comprehensive network trace without modifying packet headers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data packets are encapsulated in overlay networks, then network virtualization and multi-tenancy are enabled, but network devices cannot identify and isolate specific traffic flows based on source and destination addresses
Solution Approach 1:
The patent introduces a network trace packet as an intermediary element that carries trace identifiers through the encapsulated network. This trace packet acts as a mediator that allows the orchestrator to track traffic flows without breaking the encapsulation structure, enabling flow identification while preserving the overlay network's virtualization capabilities
Solution Approach 2:
The patent creates a copy of the traffic flow information in the form of a trace packet that follows the same path as the original data packets. This copy contains the necessary identification information (trace identifier) that allows tracking without modifying the original encapsulated packets or breaking the overlay network structure
2Loss of information
If network orchestrator traces traffic flows through encapsulated packets, then comprehensive network trace is obtained, but additional processing overhead is introduced
Solution Approach 1:
The patent extracts only the essential trace identification information from the complex encapsulated packets and processes. By focusing on extracting and tracking just the trace identifier through the network path, the orchestrator achieves comprehensive tracing without being burdened by the full complexity of the encapsulated packet structures
Solution Approach 2:
The patent performs preliminary actions by injecting the trace packet at the ingress overlay network node with all necessary trace information already embedded. This preliminary setup allows subsequent network nodes to simply forward and process the trace packet without complex analysis, reducing overall processing overhead while maintaining trace completeness
Data Source
AI summary
An example network orchestrator of a SDN is configured to receive, based on a user input, credentials associated with a traffic flow. Based on the credentials, it is determined whether the traffic flow is received at an ingress overlay network node. Route information and encapsulation information of the traffic flow is extracted from the ingress overlay network node. A first set of underlay network nodes each of which is a potential next hop for the traffic flow is identified. It is determined, based on the encapsulation information, whether the traffic flow is received by one of the first set of underlay network nodes. It is determined whether the traffic flow is received at an egress overlay network node from one of the first. A network trace of the traffic flow is determined based on the determinations of whether the traffic flow is received at the ingress overlay network node, one of the first set of underlay network nodes, and the egress overlay network node. Based on the network trace, a fault in a link between network nodes or in the ingress overlay network node or in the egress overlay network node or in one of the first set of underlay network nodes is detected.