SD-WAN Deep Packet Inspection via Local and Remote Inspector Segmentation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing SD-WAN solutions face challenges in efficiently performing deep packet inspection (DPI) across multiple edge nodes and cloud gateways, leading to inconsistencies in DPI parameters and suboptimal network path selection.

Innovation Solution

The method employs both local and remote deep packet inspectors to perform DPI on packet flows, generating and comparing DPI parameters to identify discrepancies. These discrepancies are used to improve the local inspector's performance and modify network path selection for improved traffic management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If only local deep packet inspector is used at edge nodes, then device complexity is reduced, but measurement precision and reliability of DPI operations deteriorate due to inconsistent DPI parameters

Engineering Contradiction:

ImproveDPI system complexityVSAvoidDPI parameter consistency

Core Design Contradiction:

Device complexityVSMeasurement precision

Solution Approach 1:

The DPI system is segmented into local deep packet inspectors at edge nodes and a remote deep packet inspector at the controller cluster. Each local inspector handles DPI operations locally, while the remote inspector provides centralized coordination and consistency management across the distributed SD-WAN network.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system implements feedback mechanisms where DPI parameters and inspection results from local inspectors are collected, compared, and analyzed by the remote inspector. This feedback loop enables identification of parameter inconsistencies and allows for optimization of local DPI operations to maintain precision while managing complexity.

Inventive Principle:

Principle #23Feedback

2Measurement precision

If deep packet inspection is performed at multiple edge nodes, then network path selection accuracy is improved, but device complexity and operational difficulty increase

Engineering Contradiction:

Improvenetwork path selection accuracyVSAvoidmulti-node DPI coordination complexity

Core Design Contradiction:

Measurement precisionVSDevice complexity

Solution Approach 1:

The system merges the DPI capabilities of multiple edge nodes under a unified remote deep packet inspector at the controller cluster. This consolidation allows coordinated DPI operations across multiple nodes, improving path selection accuracy through aggregated insights while managing complexity through centralized control.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The remote deep packet inspector serves multiple functions: it acts as a centralized DPI engine, a coordination point for multiple edge nodes, a repository for DPI parameter standards, and an optimizer for network path selection. This multi-functionality improves path selection accuracy while avoiding the need for each edge node to independently manage complex DPI operations.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Measurement precision

If deep packet inspection is performed at multiple edge nodes, then network path selection accuracy is improved, but ease of operation deteriorates

Engineering Contradiction:

Improvenetwork path selection accuracyVSAvoidDPI operation management ease

Core Design Contradiction:

Measurement precisionVSEase of operation

Solution Approach 1:

The remote deep packet inspector acts as an intermediary between multiple edge nodes and the network control plane. It mediates DPI operations by collecting parameters from local inspectors, ensuring consistency, and coordinating path selection decisions, thereby improving accuracy while simplifying operation management through a single point of control.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Reliability

If local and remote deep packet inspectors are used together, then DPI operation reliability is improved, but device complexity and loss of information increase

Engineering Contradiction:

ImproveDPI operation reliabilityVSAvoidDPI parameter synchronization overhead

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The system performs preliminary actions by establishing DPI parameter standards and coordination protocols before actual DPI operations begin. The remote inspector pre-configures local inspectors with consistent parameter templates and expectations, reducing synchronization overhead and information loss during runtime operations while maintaining high reliability.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS20250080472A1Performing deep packet inspection in a software defined wide area network

Publication Date: 2025.03.06 VELOCLOUD NETWORKS LLC

AI summary

Some embodiments provide a method for performing deep packet inspection (DPI) for an SD-WAN (software defined, wide area network) established for an entity by a plurality of edge nodes and a set of one or more cloud gateways. At a particular edge node, the method uses local and remote deep packet inspectors to perform DPI for a packet flow. Specifically, the method initially uses the local deep packet inspector to perform a first DPI operation on a set of packets of a first packet flow to generate a set of DPI parameters for the first packet flow. The method then forwards a copy of the set of packets to the remote deep packet inspector to perform a second DPI operation to generate a second set of DPI parameters. In some embodiments, the remote deep packet inspector is accessible by a controller cluster that configures the edge nodes and the gateways.