Remote Mirroring via MAC-in-MAC Frame Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional remote port mirroring techniques fail to efficiently mirror frames or packets to multiple mirror systems associated with different switches and often require modification of the frame's header, limiting analysis capabilities.
Innovation Solution
The method involves generating two copies of a customer data frame, adding mac-in-mac headers with specific destination addresses, where one copy is configured for normal processing and the other for remote mirroring, allowing transmission across the network without modifying the original frame, utilizing IEEE 802.1ah standard for mac-in-mac encapsulation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If conventional remote port mirroring techniques are used, then mirroring can be performed on a single switch port, but it fails to efficiently mirror frames to multiple mirror systems associated with different switches
Solution Approach 1:
The invention segments the mirroring function by creating separate copy instances for each mirror system. Instead of attempting to mirror to multiple destinations simultaneously through a single process, the system generates distinct copies of the frame for each mirror system, allowing independent handling and optimization of each mirroring operation across different switches.
Solution Approach 2:
The invention implements a universal mirroring mechanism that can handle multiple mirror systems across different switches through a common architecture. The use of standardized outer headers and backbone routing enables the same mirroring infrastructure to serve multiple mirror systems with different destination addresses, providing multi-functionality without requiring separate dedicated paths for each system.
2Ease of operation
If the frame header is modified for remote mirroring, then routing information can be updated, but the original frame integrity is altered
Solution Approach 1:
The invention creates a copy of the original frame and places this copy on the network instead of modifying the original. The copied frame includes necessary routing information in its outer header, while the original frame remains unaltered and intact. This approach allows routing control to be exercised on the copy while preserving the authenticity and integrity of the original customer frame.
Solution Approach 2:
The invention introduces an intermediary copy frame that mediates between the original frame and the network routing requirements. The copy frame serves as a mediator that carries the original frame's payload along with additional outer header information needed for routing, thereby protecting the original frame from direct modification while still enabling network control.
3Adaptability or versatility
If multiple copies are generated for different mirror systems, then comprehensive mirroring coverage is achieved, but network traffic load increases
Solution Approach 1:
The invention merges multiple mirroring operations into a single switched fabric traversal. By utilizing the network switch's ability to replicate frames at the hardware level, the system can send one original frame through the switch fabric while simultaneously generating copies for multiple mirror systems, thereby combining multiple transmission tasks into a single efficient operation that minimizes overall network traffic load.
Data Source
AI summary
A method, system and computer readable medium for remote mirroring are described. The method can include receiving a customer data frame and making two copies of the customer data frame. An outer header, such as a mac-in-mac header, can be added to each copy. The outer header of the first copy can be configured for normal processing, while the outer header of the second copy can be configured for remote mirroring. A switch can recognize the header configured for mirroring in the second copy based on a service identifier in the header and process the second copy for mirroring on one or more ports on one or more bridges.