Service Function Chain Packet Drop Identification via ICMP Feedback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In service function chain environments, network administrators face challenges in distinguishing between packet drops caused by policy enforcement and those resulting from malfunctioning service functions, which hinders effective troubleshooting and management.
Innovation Solution
The introduction of a reserved bit in the packet header, such as the Validation bit (V-bit), allows operators to differentiate between policy-based drops and unexpected drops by setting a Drop-Propagate bit when a packet is expected to be dropped due to policy, enabling the service function forwarder to generate an ICMP message and notify the initiator, thereby facilitating error differentiation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If packet drops are monitored without differentiation, then packet loss detection is simple, but the ability to identify specific causes of drops deteriorates
Solution Approach 1:
The patent segments packet drop causes into distinct categories by introducing separate indicator bits: the Validation bit (V-bit) for policy-based drops and the Drop-Propagate bit for unexpected drops. This segmentation allows precise identification of drop causes while maintaining manageable system complexity through structured bit manipulation in existing packet headers.
Solution Approach 2:
The patent introduces ICMP messages as an intermediary mechanism to communicate drop cause information from service functions to network administrators. The ICMP messages carry diagnostic information about packet drops without requiring complex modifications to the core service function chain architecture, thus improving measurement precision while controlling device complexity.
2Adaptability or versatility
If service functions are deployed flexibly anywhere on the network, then network agility and adaptability improve, but the ability to troubleshoot packet drops deteriorates
Solution Approach 1:
The patent implements a feedback mechanism where service functions send ICMP messages back to network administrators with diagnostic information about packet drops. The V-bit and Drop-Propagate bit provide feedback on the nature of drops, enabling troubleshooting even when service functions are deployed flexibly throughout the network infrastructure.
Solution Approach 2:
The patent uses bit flags in packet headers as visual indicators (analogous to color changes) to mark different types of packet drops. The V-bit and Drop-Propagate bit act as diagnostic markers that remain attached to packets throughout their journey through the flexible service function chain, enabling source identification regardless of deployment location.
3Productivity
If all packet drops are treated the same way, then processing is simple and fast, but troubleshooting efficiency deteriorates
Solution Approach 1:
The patent applies preliminary action by setting the V-bit and Drop-Propagate bit at the moment of packet drop, before any troubleshooting activities begin. This pre-marking of packet characteristics eliminates the need for time-consuming diagnostic procedures later, as the cause of each drop is already identified and communicated via ICMP messages.
Data Source
AI summary
Embodiments are directed to a service function configured to receive, from a service function forwarder, a data packet comprising a bit field to indicate that a packet drop is to be monitored; apply a policy for the data packet; determine that the data packet is to be dropped based on the policy; set a drop-propagate bit in a header of the data packet; and transmit the data packet to the service function forwarder. Embodiments are directed to a service function forwarder configured to receive a data packet from a service function, the data packet comprising a bit set to indicate that a packet drop is to be monitored; generate an Internet Control Message Protocol (ICMP) message, the ICMP message comprising a destination address for the ICMP message identified from the data packet; transmit the ICMP message to the destination address; and drop the data packet from the service function chain.