SASE Flow Parsing and Data Center Routing for Timely Firewall Service

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

As the number of connected user devices to a SASE service increases, maintaining timely and reliable delivery of network services becomes challenging, necessitating improved cloud resource utilization and network performance optimization.

Innovation Solution

The system parses incoming network traffic in a SASE architecture, analyzing metadata to route traffic efficiently to local or remote firewall services, performing load balancing and redirecting traffic to underutilized data centers for processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the number of connected user devices to SASE service increases, then service coverage and connectivity are improved, but network performance and service delivery timeliness deteriorate

Engineering Contradiction:

Improveservice coverageVSAvoidservice delivery timeliness

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments network traffic into multiple flows and distributes them across multiple data centers rather than processing all traffic through a single centralized system. This segmentation allows the SASE service to handle increased numbers of connected devices while maintaining service delivery timeliness by parallelizing processing across distributed infrastructure.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces a new dimension of spatial distribution by deploying SASE services across multiple geographic data centers. This dimensional expansion from single-location to multi-location architecture enables the system to scale service coverage to accommodate more connected devices while maintaining performance through geographic distribution and local processing.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

2Stability of the object's composition

If network traffic is processed through centralized cloud services, then service consistency is improved, but cloud resource utilization and network efficiency deteriorate

Engineering Contradiction:

Improveservice consistencyVSAvoidcloud resource utilization

Core Design Contradiction:

Stability of the object's compositionVSProductivity

Solution Approach 1:

The patent implements local quality by enabling each data center to independently process and service network traffic locally rather than funneling all traffic through a centralized cloud service. This local processing improves cloud resource utilization and network efficiency while service consistency is maintained through standardized protocols and coordinated management across the distributed data center network.

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS12513088B2Flow parser and per flow data center utilization in a cloud-based secure access service environment

Publication Date: 2025.12.30 CISCO TECHNOLOGY INC

AI summary

The present disclosure is directed to network traffic management and load balancing at a cloud-based secure access service accessible to remotely connected user devices. In one example, a cloud-based secure service system includes a network controller configured to receive network traffic from one or more user devices remotely connected to the controller; parse the network traffic into flow data and contextual information associated with the network traffic; determine that the network traffic is to be serviced by a target firewall service at the cloud-based secure service system based on the flow data and the contextual information; and direct the network traffic to the target firewall service to be serviced.