SDN Switch Flow Processing Units for Scalable Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing hardware-based network security devices struggle to provide scalability and flexibility in handling rapidly increasing IP traffic and policy rules, as they lack the ability to incorporate new forwarding rules efficiently, leading to difficulties in monitoring and controlling data traffic effectively.
Innovation Solution
A software-defined networking (SDN) switch is designed with multiple flow processing units that facilitate differential routing and transect forwarding modes, allowing for dynamic decision-making based on flow tables to forward packets to appropriate network devices or drop them, thereby enhancing scalability and flexibility in network traffic management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If hardware-based switches or network security devices are used, then device complexity is reduced and ease of operation is improved, but scalability and flexibility to incorporate new forwarding rules deteriorate
Solution Approach 1:
The patent segments the network device into two distinct planes: the control plane (software-based) and the data plane (hardware-based). The control plane handles complex forwarding rule processing and policy decisions, while the data plane handles high-speed packet forwarding. This segmentation allows the system to incorporate new forwarding rules flexibly through software updates without requiring hardware changes, resolving the contradiction between adaptability and device complexity.
Solution Approach 2:
The patent introduces a flow processing unit (FPU) as an intermediary component that bridges the control plane and data plane. The FPU receives forwarding rules from the control plane, processes them through flow tables, and translates them into hardware-friendly formats for the data plane. This intermediary enables flexible rule incorporation while maintaining hardware-based forwarding performance, resolving the contradiction between adaptability and device complexity.
2Productivity
If SDN switches with multiple flow processing units are used, then scalability and flexibility are improved, but device complexity increases
Solution Approach 1:
The patent merges multiple flow processing units into a unified architecture where multiple FPUs share common flow tables and control plane interfaces. This allows the system to process multiple packet flows in parallel (improving productivity) while avoiding the complexity of completely independent processing units. The shared resources reduce redundancy and simplify the overall system architecture.
Solution Approach 2:
The patent designs flow processing units with multi-functional capabilities, where each FPU can handle multiple types of packet processing tasks (forwarding, filtering, routing) through a single unified structure. The flow tables can be dynamically configured to perform different functions based on traffic requirements, eliminating the need for separate dedicated hardware for each function and reducing overall device complexity while maintaining high processing capacity.
Data Source
AI summary
Systems and methods for an SDN switch that facilitates forwarding/differential routing decision determination are provided. A packet is received at an input port of the SDN switch. The switch includes a first and second set of flow processing units (FPUs). The packet is forwarded to a first FPU of the first set. Based on a flow table associated with the first FPU, it is determined whether the packet is to be forwarded to a network device or an output port. The packet is received from the network device at a second FPU of the second set. Based on a flow table associated with the second FPU, it is determined whether to execute one or more instructions to forward the packet to the input or output port, or to drop or default forward the packet to the input or output port.