Service Appliance Agent for Switch Integration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems face challenges in efficiently integrating service appliances with switches due to platform dependencies, leading to complex configurations, increased integration time, and security concerns, particularly in managing communication channels and handling failures in data center networks.

Innovation Solution

An agent is deployed on service appliances to manage communication channels and handle failures, providing platform-independent processing, secure channel infrastructure, and standardized features, reducing the burden on vendors and enhancing code quality, integration speed, and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If service appliances are integrated with switches using traditional methods, then communication functionality is achieved, but platform dependencies increase complexity and integration time

Engineering Contradiction:
Improvecommunication reliabilityVSAvoidintegration complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

An agent is introduced as an intermediary component deployed on the service appliance to manage communication channels and handle failures. This agent acts as a mediator between the service appliance and the network switch, abstracting platform-specific details and providing standardized communication interfaces, thereby reducing integration complexity while maintaining communication reliability

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The communication management functionality is segmented into separate modular components: the agent running on the service appliance, the communication channel manager on the switch, and failure recovery mechanisms. This segmentation allows independent deployment, updates, and troubleshooting of each component, reducing overall system complexity

Inventive Principle:
Principle #1Segmentation

2Ease of operation

If traditional integration methods are used, then basic communication is established, but integration time increases due to complex configurations

Engineering Contradiction:
Improveintegration easeVSAvoidintegration time
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The agent is pre-configured with communication channel management capabilities and failure handling mechanisms before deployment. Standardized protocols and pre-built communication templates are prepared in advance, allowing rapid deployment and integration without time-consuming manual configurations

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The agent provides universal communication management capabilities that work across different service appliance platforms and switch types. By implementing a platform-independent communication layer with standardized interfaces, the system achieves ease of operation across diverse environments without requiring platform-specific integration procedures

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If communication channels are managed without an agent, then system simplicity is maintained, but security concerns increase

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The agent serves as a security intermediary that manages communication channels between the service appliance and network. It implements authentication, authorization, and encryption protocols, and monitors communication for security threats, thereby enhancing security without requiring complex security infrastructure

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The agent implements self-service security mechanisms including automatic authentication, certificate management, and failure recovery. The system can autonomously detect security issues, respond to threats, and recover from failures without external intervention, providing robust security while maintaining manageable system complexity

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10237182B1Systems, methods, and apparatus for implementing agents in service appliances
Publication Date: 2019.03.19 CISCO TECHNOLOGY INC
  • US10237182B1 patent drawing
  • US10237182B1 patent drawing
  • US10237182B1 patent drawing

AI summary

The present disclosure describes several key features of an agent deployable on a service appliance: agent architecture/design, transport and channel abstractions of the agent, new message definition components, channel switching (e.g., platform independent processing), Channel state machine, platform dependent hooks (e.g., memory, timers), Service key data store, and Secure channel infrastructure. Many of these features alleviate the vendor of the service appliance from having to provide the features. The features and standardization thereof enable the system to be more robust (and increases code quality). Speed of integration is decreased while the risk of integration issues is also decreased. Updates to the agent can be deployed in a controlled and efficient manner. Furthermore, the agent can ensure security between a switch and the agent. The agent deployed and running on vendor appliances provides a unique way to present transport channels that run between the switch, agent, and other service appliance components.