Configurable Probe Network Traffic Mirroring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network monitoring in large and complex networks faces challenges such as scalability, controllability, and flexibility, as well as limited access for end-user customers to internal configurations and states, making it difficult to maintain adequate monitoring coverage and identify issues like misconfiguration or faulty connections.
Innovation Solution
A method and system for non-intrusive on-demand network monitoring that uses probes to mirror ingress and egress traffic in a network segment, allowing for validation of network functions without direct access to internal configurations, using configurable probes to analyze traffic and perform validation tasks based on expected traffic processing behaviors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If direct monitoring access to internal network configurations is implemented, then measurement precision is improved, but ease of operation deteriorates due to requiring vendor support and complex access rights
Solution Approach 1:
The patent introduces a probe as an intermediary device that indirectly monitors network functions by analyzing traffic packets rather than directly accessing internal device configurations. The probe receives mirrored traffic from the network segment and performs validation tasks, eliminating the need for direct access rights and vendor support while maintaining monitoring effectiveness.
2Measurement precision
If comprehensive network monitoring is implemented across large networks, then measurement precision is improved, but device complexity increases due to scalability challenges
Solution Approach 1:
The patent divides the network into multiple monitoring zones, each with its own probe that independently monitors local network functions. This segmentation allows comprehensive monitoring across large networks by breaking down the complex task into manageable, independent units that can be deployed and managed separately, improving scalability while maintaining monitoring precision.
3Reliability
If traffic mirroring is implemented for validation tasks, then reliability is improved through non-intrusive monitoring, but loss of information increases due to potential traffic path changes
Solution Approach 1:
The patent creates a copy of the traffic flow by mirroring packets to the probe while the original traffic continues along its normal path. This copying approach allows the probe to perform validation tasks on an identical replica of the traffic without altering the original data path or causing any loss of information, thereby maintaining both reliability and data integrity.
4Adaptability or versatility
If on-demand monitoring is implemented, then adaptability is improved for flexible validation tasks, but loss of time increases due to configuration setup requirements
Solution Approach 1:
The patent implements dynamic, on-demand monitoring where probes can be configured and deployed based on specific validation needs. The system allows flexible creation of monitoring tasks with customizable parameters such as traffic selectors and expected behaviors, enabling adaptive response to changing network requirements while minimizing configuration time through automated probe deployment.
Data Source
Figure 1
Figure 2
Figure 3A~3B
AI summary
A method is implemented by a network device in a network for monitoring a segment of the network without direct access to an internal configuration or state of the segment. The method includes receiving a request to perform a monitoring task on a monitoring zone within the network. The monitoring zone includes a subset of network devices of the network. The monitoring zone has an ingress data path that carries ingress traffic into the monitoring zone and an egress data path that carries egress traffic out of the monitoring zone. The method further includes configuring the network to mirror the ingress traffic or the egress traffic to a configurable probe in the network and configuring the configurable probe to perform the monitoring task on the monitoring zone, where the configurable probe is configured to perform the monitoring task based on analysis of the mirrored ingress traffic or the mirrored egress traffic.