Service Broker Network Interface Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In service mesh deployments, micro-services face challenges in dynamically selecting the correct network interface for outbound connections to external endpoints, especially in large-scale environments where static routes are inflexible and hard to update, and security policies require priority-based connectivity.
Innovation Solution
A service broker dynamically selects a network interface for micro-services based on user policies, independent of default routes, by mapping micro-service network interfaces to service engine host interfaces and enforcing priority policies in a multi-network environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If static routes are used for network interface selection in micro-services, then routing is simple to configure, but flexibility and adaptability are poor and hard to update
Solution Approach 1:
The patent introduces a service broker as an intermediary component that mediates between micro-services and network interfaces. The service broker receives network interface selection requests from micro-services, consults policy decisions, and returns the selected interface. This mediator approach eliminates the need for complex static routing configurations while providing flexible, policy-driven network interface selection across the service mesh.
2Reliability
If default network routes are used for micro-service communication, then network connectivity is automatic, but security policies cannot be enforced and priority-based selection is lost
Solution Approach 1:
The patent implements dynamic network interface selection that replaces static default routes with a dynamic policy-based selection mechanism. The service broker dynamically determines which network interface to use based on current policy decisions, allowing security policies and priority-based selection to be enforced while maintaining automated connectivity. The system adapts its routing behavior in real-time based on policy changes rather than relying on fixed default routes.
3Reliability
If multiple network interfaces are provided for micro-services, then network redundancy and security are improved, but the ability to detect and select the correct interface becomes more difficult
Solution Approach 1:
The patent implements a feedback mechanism where micro-services send network interface selection requests to the service broker, which provides feedback about the correct interface to use based on policy decisions. This feedback loop enables the system to automatically detect and select the appropriate network interface without requiring complex detection algorithms, while maintaining network redundancy through multiple available interfaces.
Data Source
AI summary
In one embodiment, a method includes mapping micro-service network interfaces in a service network to service engine network interfaces for connecting micro-services to external endpoints, transmitting a request for communication with one of the external endpoints from one of the micro-services to a service broker operable to select one of the micro-service network interfaces for the communication with the external endpoint, and receiving a response from the service broker with the selected micro-service network interface. The service broker dynamically selects a service path for the communication based on a policy and independent from default network routes.