Multi-layer Traffic Steering for SDN Service Chaining

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current SDN-based protocols are inefficient in processing application-layer traffic, leading to high network and computing resource utilization, bottlenecks, and limited scalability due to their inability to rapidly respond to new networking and application requirements, and lack of feedback on performance.

Innovation Solution

A method and system for multi-layer traffic steering in SDNs that involves a central controller analyzing service chaining rules to determine if application-layer steering is required, generating either application-layer or network-layer steering rules, and programming a multi-layer steering fabric to minimize application-layer processing, thereby reducing resource utilization and enhancing scalability.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If application-layer (L7) processing is performed to identify application and protocol types for traffic routing decisions, then service chaining capability is improved, but network resource utilization increases and bottlenecks occur

Engineering Contradiction:
Improveservice chaining capabilityVSAvoidnetwork resource utilization
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent segments the traffic processing function into two parts: L4/L3 parameter processing is handled by SDN switches at high speed, while L7 application-layer processing is offloaded to external application delivery controllers (ADCs). This segmentation allows each component to operate at its optimal performance level, resolving the contradiction between service chaining capability and network resource utilization.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces ADCs as intermediary devices between the SDN network and destination servers. These ADCs perform the computationally intensive L7 traffic analysis and routing decisions, while the SDN controller handles L4/L3 steering. This intermediary architecture eliminates bottlenecks in the core network while maintaining full service chaining capability.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If extensive application-layer (L7) processing is performed to analyze traffic and make routing decisions, then traffic classification accuracy is improved, but processing speed decreases and latency increases

Engineering Contradiction:
Improvetraffic classification accuracyVSAvoidprocessing speed
Core Design Contradiction:
Measurement precisionVSSpeed

Solution Approach 1:

The patent divides the processing pipeline into two segments: fast L4/L3 packet processing performed by SDN switches using hardware acceleration, and detailed L7 application analysis performed by external ADCs. This segmentation enables high-speed forwarding while maintaining accurate traffic classification through comprehensive L7 inspection.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements preliminary L4/L3 filtering and steering by the SDN controller based on quickly processed network layer parameters. Only traffic requiring detailed L7 analysis is then forwarded to ADCs, reducing the overall processing load and latency while maintaining classification accuracy for all traffic types.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If SDN protocols are used to provide programmability for packet processing, then flexibility in traffic handling is improved, but the ability to efficiently provide value-added services is limited

Engineering Contradiction:
Improvetraffic handling flexibilityVSAvoidservice provisioning efficiency
Core Design Contradiction:
Adaptability or versatilityVSEase of manufacture

Solution Approach 1:

The patent creates a universal service chaining framework where ADCs can provide multiple value-added services (content filtering, parental control, security scanning, etc.) through a single standardized interface with the SDN controller. This multi-functional architecture maintains the flexibility of SDN programmability while enabling efficient provisioning of diverse services through unified L7 processing capabilities.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent introduces ADCs as intermediary service providers that sit between the SDN network infrastructure and end services. These ADCs translate various value-added service requirements into standardized L7 processing operations, making it easy to provision and manage diverse services while maintaining full SDN programmability and control.

Inventive Principle:
Principle #24Intermediary (Mediator)

4Adaptability or versatility

If L7 traffic analysis is performed to respond to new networking requirements, then adaptability to new applications is improved, but computing resources are consumed and scalability is limited

Engineering Contradiction:
Improveresponse to new applicationsVSAvoidcomputing resources
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The patent segments computing workload by having SDN switches handle routine L4/L3 processing for standard traffic patterns, while external ADCs handle L7 analysis for new or complex application requirements. This segmentation distributes computing resources efficiently, enabling the network to adapt to new applications without concentrating all processing demands in a single location.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements partial L7 processing by the SDN controller for basic service chaining decisions based on L4/L3 parameters, and only performs full L7 analysis when specifically required for new application types or complex service requirements. This partial action approach reduces unnecessary computing resource consumption while maintaining the ability to respond to new networking requirements.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11290374B2Multi-layer traffic steering for service chaining over software defined networks
Publication Date: 2022.03.29 RADWARE LTD
  • US11290374B2 patent drawing
  • US11290374B2 patent drawing
  • US11290374B2 patent drawing

AI summary

A method and system for multi-layer traffic steering for enabling service chaining over a software defined network (SDN) are provided. The method is performed by a central controller of the SDN and includes receiving at least one service chaining rule defining at least one value-added service (VAS) to assign to an incoming traffic flow addressed to a destination server; analyzing each of the at least one received service chaining rule to determine if an application-layer steering is required; generating at least one application-layer steering rule, upon determining that an application-layer steering is required; generating at least one network-layer steering rule, upon determining that an application-layer steering is not required; and programming a multi-layer steering fabric with the generated at least one of network-layer steering rule and application-layer steering rule.