SDN Policy Management via Encapsulation Headers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current SDN network technologies face challenges in managing granular and dynamic application policies that can target all network endpoints without allocating new resources, requiring extensive exchanges between controllers and service functions, and involving centralized policy implementation and frequent configuration updates.
Innovation Solution
A method for managing application policies in a virtualized communication network that utilizes a distributed approach, where each service function processes packets based on local context and encapsulation headers, allowing for dynamic and granular policy implementation without requiring new resource allocation, by using an SDN controller module and service function module to generate and transmit encapsulation headers and local contexts, enabling service function chaining and metadata sharing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If centralized policy implementation is used in SDN, then policy management is simplified, but communication overhead between controllers and service functions increases
Solution Approach 1:
The patent segments policy management into centralized policy definition (at controller) and distributed policy execution (at service functions). The encapsulation header carries policy rules from controller to service functions, enabling local execution without continuous controller communication.
Solution Approach 2:
The patent implements preliminary action by pre-configuring service functions with policy rules through encapsulation headers before packet processing. Service functions receive and store policy rules in advance, enabling them to execute policies autonomously without real-time controller intervention.
2Adaptability or versatility
If granular and dynamic application policies are implemented, then policy flexibility improves, but resource allocation complexity increases
Solution Approach 1:
The patent uses copying by creating encapsulation headers that contain policy rule copies and distributing them to multiple service functions. This allows granular policy application across different network elements without duplicating entire policy management systems at each location.
Solution Approach 2:
The patent implements dynamics by enabling service functions to dynamically execute policies based on encapsulation header rules and update their behavior without centralized reconfiguration. The system adapts to different traffic flows and policy requirements in real-time.
3Reliability
If service functions transmit packets to controller for policy decisions, then centralized control is maintained, but processing time increases
Solution Approach 1:
The patent extracts policy decision-making capability from the centralized controller and places it in the encapsulation headers that are distributed to service functions. This extraction allows service functions to make local policy decisions while the controller retains overall policy definition authority.
Solution Approach 2:
The patent implements self-service by enabling service functions to autonomously execute policies using rules from encapsulation headers without requiring continuous controller intervention. Service functions independently process packets according to their local policy context.
Data Source
Figure 1~2
Figure 3~4b
Figure 5
AI summary
Management of the application of a policy in an SDN environment of a communication network. The present technique relates to a method for managing a policy for applying rules in a virtualized communication network comprising virtualized functions, called service functions (SF), the method comprising the following steps implemented by an SDN controller of said network: · generation (S1), on the basis of a set of rules describing said policy, referred to as model (M), of an encapsulation header comprising a context relating to said model (M) and of at least one local application policy context associated with at least one of said service functions (SFi); · transmission (S2) of said at least one local context to said at least one service function (SFi); · transmission (S3) of said encapsulation header to at least one packet router, called classifier (SCL).