SD-WAN Policy Filtering for Mobile Device-Specific Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional WAN architectures are limited in bandwidth, security, and complexity management, hindering business productivity as businesses become more mobile and operate across multiple clouds.
Innovation Solution
A system and method for distributing software-defined networking (SD-WAN) policies to mobile devices, involving a router that receives, filters, and communicates device-specific policies based on device information, using VRF enterprise IPsec and SSL/TLS gateways for secure connectivity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional WAN architectures use dedicated MPLS circuits for security and reliability, then security protection and reliable connectivity are improved, but bandwidth availability and complexity management deteriorate
Solution Approach 1:
The patent introduces an SD-WAN controller as an intermediary that centralizes policy management and network control. The controller receives policy information from network administrators and distributes it to multiple SD-WAN routers, eliminating the need for complex manual configurations on each device while maintaining reliable connectivity through centralized orchestration.
Solution Approach 2:
The SD-WAN system provides multi-functional capabilities including policy distribution, path selection, segmentation, and flow classification through a unified platform. This universal approach replaces multiple specialized functions that would otherwise require separate complex configurations, simplifying network management while maintaining reliability.
2Adaptability or versatility
If traditional WAN architectures are used for mobile business operations, then infrastructure stability is maintained, but adaptability to mobile devices and cloud operations deteriorates
Solution Approach 1:
The patent implements dynamic policy distribution where the SD-WAN controller can push policies to routers in real-time based on changing network conditions and mobile device requirements. Policies can be updated without service interruption, allowing the system to adapt dynamically to mobile operations while maintaining infrastructure stability.
Solution Approach 2:
The system segments policies into device-specific configurations that are filtered and applied individually to each mobile device. This segmentation allows tailored policies for different mobile devices and use cases without requiring complex overall system redesign, enabling adaptability while managing complexity through modular policy structures.
3Quantity of substance
If SD-WAN policies are distributed to all mobile devices, then policy coverage is improved, but processing overhead and network traffic increase
Solution Approach 1:
The patent applies local quality by filtering SD-WAN policies at the router level to generate device-specific policies tailored to each mobile device's characteristics and requirements. This ensures that each device receives only the relevant policies it needs, reducing processing overhead and network traffic compared to distributing universal policies to all devices.
Solution Approach 2:
The system implements partial action by selectively distributing policies based on device information and session context. Rather than pushing all possible policies to every device, the router filters and applies only the necessary subset, reducing processing overhead while maintaining adequate policy coverage for operational needs.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In one embodiment, a router includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the router to perform operations including receiving software-defined networking in a wide area network (SD-WAN) policies from a component of an SD-WAN network. The operations also include establishing a session with a mobile device and receiving information associated with the mobile device in response to establishing the session with the mobile device. The operations further include filtering the SD-WAN policies based on the information associated with the mobile device to generate SD-WAN device-specific policies and communicating the SD-WAN device-specific policies to the mobile device.