Software Defined Branch Single IP Orchestration

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Virtual networks often experience connectivity issues, where a virtual router can be healthy but lose connectivity to an orchestrator or the rest of the network, making branch sites unreachable and unrecoverable.

Innovation Solution

Implementing a software defined branch single IP orchestration system that establishes a secure tunnel agent to an orchestrator, generates a single IP address on a virtual router, and monitors its reachability, using Network Function Virtualization Infrastructure Software (NFVIS) to provide two-factor virtual router health monitoring and flexible policy enforcement.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a virtual router is used in a virtual network, then network flexibility and virtualization capabilities are improved, but connectivity reliability deteriorates as the virtual router may lose connectivity to the orchestrator and rest of the network

Engineering Contradiction:

Improvenetwork flexibilityVSAvoidconnectivity reliability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a controller as an intermediary component between the virtual router and the orchestrator. The controller establishes a secure tunnel agent connection to the orchestrator and monitors reachability of the virtual router's IP address, acting as a mediator that maintains connectivity even when direct virtual router-to-orchestrator communication fails.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary actions by establishing a secure tunnel agent connection before connectivity issues arise. The controller proactively monitors the reachability of the virtual router's IP address and can reallocate the IP address or manage the virtual branch site before complete connectivity loss occurs, preventing unrecoverable states.

Inventive Principle:

Principle #10Preliminary action

2Device complexity

If a single IP address is assigned to a virtual router for a branch site, then network simplification and resource efficiency are improved, but reachability monitoring complexity increases

Engineering Contradiction:

Improvenetwork configuration complexityVSAvoidreachability monitoring difficulty

Core Design Contradiction:

Device complexityVSDifficulty of detecting and measuring

Solution Approach 1:

The controller implements a feedback mechanism by continuously monitoring the reachability of the single IP address assigned to the virtual router. The system receives feedback about whether the IP address is reachable and uses this information to determine when to reallocate the address or take management actions, enabling automated response to connectivity changes.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The system enables self-service through automated IP address reallocation and virtual branch site management. When the controller detects that the single IP address becomes unreachable, it can automatically reallocate the address or manage the virtual branch site without requiring manual intervention, reducing the operational burden despite increased monitoring requirements.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS20230388269A1Software defined branch single internet protocol orchestration

Publication Date: 2023.11.30 CISCO TECHNOLOGY INC

AI summary

Systems, methods, and computer-readable media are provided for software defined branch single IP orchestration. An example method can include establishing, by a controller, a secure tunnel agent to an orchestrator, generating, by the controller, a single IP address on a virtual router for a virtual branch site, and monitoring, by the controller, reachability of the single IP address on the virtual router.