Smart Switch Service Port Packet Redirection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network switches face challenges in efficiently processing network packets for advanced services like NAT and micro-segmentation, requiring complex configuration, separate monitoring, and increased operational costs due to the need for dedicated physical/virtual appliances that complicate scaling and maintenance.
Innovation Solution
A smart switch architecture that includes a switching device with exposed and service ports, allowing for the redirection and reinjection of packets to a service device for processing, which reduces complexity and integrates stateful services within the network, eliminating the need for separate appliances and cabling.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If dedicated physical/virtual appliances are used for advanced services like NAT and micro-segmentation, then service functionality is improved, but device complexity and operational costs increase
Solution Approach 1:
The patent merges the service device functionality directly into the network switch by integrating a service port and service device into the switch architecture. This allows the switch to perform advanced services like NAT and micro-segmentation internally without requiring separate dedicated appliances, thereby reducing configuration complexity while maintaining service functionality.
Solution Approach 2:
The network switch is designed with multi-functionality by incorporating both standard switching operations and advanced service processing capabilities within a single device. The service device integrated into the switch can handle multiple service types (NAT, micro-segmentation, etc.) through a universal processing architecture that receives packets via service ports and applies various service processing pipelines.
2Productivity
If separate physical/virtual appliances are deployed for stateful services, then service processing capability is improved, but the need for additional cabling and appliances increases complexity
Solution Approach 1:
The service device is integrated directly into the network switch architecture, eliminating the need for separate physical appliances and their associated cabling. The service port provides a direct internal connection between the switching fabric and the service device, allowing stateful services to be processed within the same physical infrastructure without adding external components.
Solution Approach 2:
The service port acts as an intermediary interface within the switch that connects the switching fabric to the service device. This internal mediator enables packet redirection to service processing and reinjection back into the switching fabric without requiring external cabling or separate appliance connections, thereby simplifying the network infrastructure.
3Productivity
If packets are redirected to service device for processing, then service processing is improved, but packet forwarding complexity increases
Solution Approach 1:
The switch determines whether a packet requires service processing before standard forwarding operations are completed. By evaluating service processing requirements in advance and redirecting only necessary packets to the service device via the service port, the system avoids unnecessary service processing overhead for standard packets while maintaining efficient service handling for packets that require it.
Solution Approach 2:
The service port serves as an internal intermediary that simplifies packet forwarding logic by providing a dedicated path between the switching fabric and service device. Packets requiring service processing are redirected through this intermediary, processed, and then reinjected into the switching fabric, which simplifies the forwarding logic compared to complex external appliance integration while maintaining service processing efficiency.
Data Source
AI summary
A network appliance or smart switch can include service devices as well as a switching device such as those used in high-speed switches having limited processing ability and are stateless with respect to sessions. Service devices can provide stateful and complex processing. A first exposed port of a switching device can receive network packets and can determine which network packets the service devices are to process to produce processed network packets. A network packet can be sent to a service device in a redirected packet. A processed network packet can be received from a service device in a reinjected packet that is used to recover a port identifier of the first exposed port. The port identifier can be used to determine a network destination of the processed network packet. The processed network packet can be sent from a second exposed port of the switching device toward the network destination.