SDWAN Traffic Steering Using Remote Link-Cost Feedback

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing SD-WAN technologies lack the ability to effectively steer network traffic based on the remote end's link quality, leading to inefficient use of heterogeneous links such as LTE, which can incur high costs despite maintaining good quality.

Innovation Solution

The method involves authenticating a local SDWAN controller with a remote SDWAN controller using IKE and ISAKMP packets, retrieving configured link costs with heterogeneous physical attributes, and selecting the path with the lowest cost based on quality for optimal traffic steering.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If SD-WAN steers traffic based on local link quality only, then traffic steering is simple to implement, but it cannot avoid high costs on expensive links like LTE

Engineering Contradiction:
Improvetraffic steering implementationVSAvoidlink cost
Core Design Contradiction:
Ease of operationVSLoss of energy

Solution Approach 1:

The patent implements feedback by having the remote SD-WAN controller send link cost information back to the local controller through ISAKMP notify packets during IKE authentication. This feedback mechanism enables the local controller to make informed traffic steering decisions that balance both simplicity and cost efficiency, resolving the contradiction between easy implementation and cost avoidance.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent applies preliminary action by obtaining remote link cost information during the tunnel establishment phase (IKE authentication), before actual traffic steering decisions are made. This advance knowledge allows the system to plan cost-effective routing paths without adding complexity to the ongoing traffic steering operations.

Inventive Principle:
Principle #10Preliminary action

2Productivity

If SD-WAN uses current quality detection techniques to acquire remote end knowledge, then traffic steering can be optimized, but it requires periodic probes that increase system complexity

Engineering Contradiction:
Improvetraffic steering optimizationVSAvoidsystem complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent merges the link cost information exchange with the existing IKE authentication process by embedding cost data in ISAKMP notify packets. This combination eliminates the need for separate probe mechanisms, achieving traffic steering optimization without increasing system complexity.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The remote SD-WAN controller voluntarily provides its link cost information to the local controller during authentication. This self-service approach eliminates the need for the local controller to actively probe or query remote link characteristics, reducing system complexity while enabling optimized traffic steering.

Inventive Principle:
Principle #25Self-service

3Speed

If SD-WAN waits to obtain remote link information after tunnel establishment, then authentication is faster, but traffic steering decisions are delayed

Engineering Contradiction:
Improveauthentication speedVSAvoidtraffic steering decision time
Core Design Contradiction:
SpeedVSLoss of time

Solution Approach 1:

The patent performs the action of exchanging link cost information during the IKE authentication process itself, specifically in the ISAKMP notify packet exchange. By completing this information gathering preliminarily, the system maintains fast authentication while ensuring traffic steering decisions can be made immediately without delay.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12375997B2Remote cost based network traffic steering for heterogeneous links in a SDWAN (software defined wide area network)
Publication Date: 2025.07.29 FORTINET INC
  • US12375997B2 patent drawing
  • US12375997B2 patent drawing
  • US12375997B2 patent drawing

AI summary

During authentication of an SDWAN tunnel, Intent ISAKMP packets authenticate the local SDWAN controller and the remote SDWAN controller with each other, wherein the ISAKMP packets include a notify payload. Configured link costs associated with at least two member paths at the remote SDWAN controller that have heterogeneous physical attributes from the notify payload of the ISAKMP packets are retrieved. The configured link-cost of the at least two member paths is reflective of link physical attributes. One of the at least two member paths is identified based on a lowest link-cost between the at least two member paths, for steering SDWAN network traffic.