Route Server Intra-VPN Connectivity Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual private network (VPN) technologies lack dynamic control over connectivity, leading to inflexible communication topologies and inefficient data routing within MPLS-based VPNs, which restricts the ability to adapt to changing network demands or security requirements.
Innovation Solution
A route server with an intra-VPN connectivity database and a BGP engine that processes BGP advertisements to dynamically determine and configure connectivity between PE routers, enabling additional connectivity beyond standard import and export policies by querying the database and modifying BGP advertisements with new route targets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If standard import and export policies are used to control VPN connectivity, then network security and basic routing are maintained, but connectivity flexibility and adaptability to changing network demands are limited
Solution Approach 1:
The patent introduces a route server as an intermediary component between PE routers and the core network. This route server maintains an intra-VPN connectivity database and actively modifies BGP advertisements by adding or removing route targets based on database information, thereby providing dynamic connectivity control without requiring changes to import/export policies on PE routers. This intermediary mechanism resolves the contradiction by decoupling connectivity flexibility from policy configuration complexity.
Solution Approach 2:
The patent implements dynamic connectivity control through a route server that continuously queries an intra-VPN connectivity database and modifies BGP advertisements in real-time. The system transitions from static import/export policies to dynamic route target manipulation, allowing connectivity to adapt automatically to changing network demands, security requirements, and topology changes without manual reconfiguration of PE router policies.
2Reliability
If dynamic connectivity control is implemented through route server and BGP advertisement modification, then connectivity flexibility and network resilience are enhanced, but system complexity and processing overhead increase
Solution Approach 1:
The route server implements self-service by automatically querying the intra-VPN connectivity database and autonomously modifying BGP advertisements based on current connectivity requirements. The system uses BGP reflection mechanisms where the route server receives advertisements from PE routers, processes them through database queries, and redistributes modified advertisements back to appropriate PE routers without human intervention. This automation enhances reliability while managing complexity through standardized BGP protocols.
Solution Approach 2:
The system performs preliminary actions by pre-configuring the intra-VPN connectivity database with connectivity requirements, security policies, and topology information before actual data traffic flows. The route server proactively queries this database and prepares modified BGP advertisements in advance, enabling rapid response to connectivity changes without ad-hoc configuration during operational changes, thereby enhancing network resilience.
3Adaptability or versatility
If BGP advertisements are actively modified with additional route targets, then additional connectivity and network adaptability are enabled, but processing time and computational resources increase
Solution Approach 1:
The route server applies local quality by selectively modifying BGP advertisements based on specific criteria from the intra-VPN connectivity database. Instead of uniformly processing all BGP advertisements with the same level of modification, the system queries the database to determine which advertisements require route target additions or removals. This selective approach reduces unnecessary processing overhead while maintaining network adaptability where needed.
Solution Approach 2:
The system employs partial action by modifying only the necessary portions of BGP advertisements rather than completely regenerating them. The route server retains the original advertisement structure and routing information from PE routers, adding or removing only the specific route targets required based on database queries. This partial modification approach reduces processing time and computational resources compared to complete advertisement regeneration.
Data Source
AI summary
Methods and apparatus to dynamically control connectivity within VPNs are disclosed. A disclosed example method includes a route server for storing an indication in an entry for a first pair of provider edge routers in a virtual private network (intra-VPN) connectivity database, the intra-VPN connectivity database including entries for a plurality of pairs of provider edge routers. The indication to define an additional connectivity for the first pair of provider edge routers beyond connectivity defined in a virtual private network routing and forwarding table associated with a first provider edge router of the first pair of provider edge routers. The first pair of provider edge routers including a second provider edge router to which the first provider edge router is to be communicatively coupled.