SmartNIC Self-Learning Egress Traffic Controller

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing network monitoring tools are not fully integrated with the infrastructure, leading to under-utilization of network capabilities and inefficient monitoring, especially in cloud native applications with dynamic deployment conditions.

Innovation Solution

A closed-loop framework using SmartNICs (Data Processing Units) to perform application-aware network services, including continuous monitoring of application performance metrics and real-time remediation of security or performance issues, leveraging machine learning techniques.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If conventional NICs with host CPU-based datapath processing are used, then basic packet forwarding functionality is provided, but CPU resources are shared between applications and datapath processing, reducing application performance

Engineering Contradiction:
Improveapplication performanceVSAvoidCPU resource sharing
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent extracts the datapath processing functionality from the host CPU and relocates it to a separate SmartNIC device. This extraction allows the host CPU to dedicate its resources entirely to application workloads while the SmartNIC handles packet processing, policing, and networking tasks independently, thereby improving application performance without adding complexity to the CPU architecture.

Inventive Principle:
Principle #2Taking out (Extraction)

2Adaptability or versatility

If SmartNICs with augmented datapath processing are used, then datapath processing is offloaded from the host CPU, but network monitoring tools are not fully integrated with the infrastructure, leading to under-utilization of network capabilities

Engineering Contradiction:
Improveapplication-aware network servicesVSAvoidmonitoring integration
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent merges the network monitoring capabilities directly into the SmartNIC device. The SmartNIC not only performs datapath processing but also integrates application-aware monitoring functions, allowing it to observe and analyze network traffic patterns, detect anomalies, and provide insights into application performance. This combination eliminates the need for separate monitoring tools and achieves full infrastructure integration, enabling under-utilized network capabilities to be leveraged effectively.

Inventive Principle:
Principle #5Merging (Combining)

3Productivity

If existing network monitoring tools are used, then monitoring functionality is provided, but they are not fully integrated with the infrastructure, resulting in inefficient monitoring and under-utilization of network capabilities

Engineering Contradiction:
Improvemonitoring efficiencyVSAvoidmonitoring architecture
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent implements self-service monitoring where the SmartNIC autonomously performs application-aware monitoring of network traffic. The device automatically detects anomalies, analyzes traffic patterns, and generates insights without requiring external monitoring tools or complex centralized monitoring architectures. This self-service capability streamlines the monitoring process, improves efficiency, and eliminates the overhead of separate monitoring infrastructure.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20250184309A1Self-learning egress traffic controller
Publication Date: 2025.06.05 JUNIPER NETWORKS INC
  • US20250184309A1 patent drawing
  • US20250184309A1 patent drawing
  • US20250184309A1 patent drawing

AI summary

An example network system includes processing circuitry and one or more memories coupled to the processing circuitry. The one or more memories are configured to store instructions which, when executed by the processing circuitry, cause the network system to receive connection data related to an egress connection of an application service of an application. The instructions cause the network system to analyze the connection data to determine that the egress connection is an anomalous connection. The instructions cause the network system to generate a notification indicative of the egress connection being an anomalous connection and send the notification to a computing device.