Packet-Optical Flow Tracing with Proof-of-Transit Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing flow tracing solutions, such as traceroute and IOAM, are not designed to perform telemetry or route tracing over multiple network layers, including packet and optical networks, and do not include services like encryption, load balancing, or network firewalls, resulting in incomplete route information and inability to prove specific node traversal.
Innovation Solution
The SmartFlowTrace system, implemented within the POINT framework, translates intent information across layers to generate globally unique identifiers and multi-layer proof-of-transit information, enabling comprehensive flow tracing across packet-optical networks, including virtual and physical components, services, and network functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If traceroute or IOAM are used in a packet-optical network, then packet layer route tracing is enabled, but optical segment route information is missing and the list of nodes traversed is incomplete
Solution Approach 1:
The patent implements a universal flow tracing mechanism that operates across multiple network layers (packet and optical) by translating intent information between layers. The system uses a common data model and identifier translation mechanism that enables single-flow tracing to capture route information from both packet-layer devices (routers, switches) and optical-layer devices (optical switches, transponders), thereby achieving completeness across heterogeneous network layers.
Solution Approach 2:
The patent introduces an intermediary translation layer that converts intent information from the packet layer into optical layer-specific actions and identifiers. This intermediary mechanism translates high-level flow tracing intents into layer-specific operations, enabling seamless cross-layer information collection without requiring separate tracing systems for each layer.
2Reliability
If existing flow tracing solutions are used, then basic route tracing is achieved, but proof of specific node traversal cannot be provided
Solution Approach 1:
The patent implements a feedback mechanism where flow tracing information is collected bidirectionally from both ingress and egress points of network devices. The system correlates incoming and outgoing flow information with device identifiers and timestamps, creating verifiable proof that a specific flow traversed specific nodes. This feedback loop enables reliable verification of node traversal by comparing recorded transit information against expected paths.
3Loss of information
If multi-layer flow tracing is implemented with intent translation, then comprehensive route information is obtained, but system complexity increases
Solution Approach 1:
The patent employs a homogeneous data model and standardized identifier structure that remains consistent across different network layers. By using uniform data formats, common field names, and standardized translation rules, the system reduces the complexity of intent translation while maintaining comprehensive multi-layer flow tracing capabilities. The consistent data model allows the same processing logic to be applied regardless of the network layer being traced.
Data Source
AI summary
A method and system for flow tracing for use in a packet-optical network is disclosed herein. A device in the packet-optical network may receive a packet including a header and payload. The device may read intent information from the header, and translate the intent information to generate a device-specific action in an optical layer to provide one or more globally unique identifiers (IDs) associated with the device. The device may execute the device-specific action in the optical layer to generate a response including the globally unique IDs corresponding to the intent, where the response forms part of the flow trace. The device may associate the response with the intent, and encode the response for downstream data forwarding. The device may further add multi-layer proof-of-transit (POT) information to the response that may be used to securely verify the path indicated in the SmartFlow flow trace.