SRv6 Source SID Execution for Source-Based Network Functions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing SRv6 network programming frameworks primarily execute network functions in the context of destination nodes, limiting the ability to execute functions in the context of source nodes.
Innovation Solution
Implementing source-specific functions within the IPv6 header, using source Segment Identifiers (SIDs) and indicators in the Segment Routing Header (SRH) to enable execution of network functions at source nodes, allowing for functions like per packet Reverse Path Forwarding, source ingress replication, and role-based access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If network functions are executed only in the context of destination nodes, then the network programming framework is simple, but the ability to execute functions in the context of source nodes is limited
Solution Approach 1:
The patent segments the network function execution context by introducing separate source-specific SIDs and destination-specific SIDs. The source-specific SID (with S-bit set) enables independent function execution at source nodes, while the destination-specific SID handles traditional destination-based execution. This segmentation allows the system to support both execution contexts without requiring complete framework redesign.
Solution Approach 2:
The SRv6 framework is enhanced to perform multiple functions by interpreting the S-bit in the SID. When S-bit is set, the node executes source-specific functions; when not set, it executes traditional destination-specific functions. This universal approach allows a single framework to handle both source-based and destination-based network programming, increasing adaptability without proportionally increasing complexity.
2Ease of operation
If source-specific functions are implemented in the IPv6 header, then granular network management is enabled, but the header structure complexity increases
Solution Approach 1:
The patent applies local quality by making the SID structure context-dependent through the S-bit flag. The header structure itself remains standard IPv6, but the interpretation and processing logic vary locally based on the S-bit value. Source-specific functions are enabled only when S-bit is set, allowing granular network management without fundamentally altering the IPv6 header structure for all packets.
Solution Approach 2:
The S-bit parameter in the SID changes the functional interpretation of the IPv6 header. When S-bit=1, the destination address field is interpreted as containing source-specific function information; when S-bit=0, it contains traditional destination routing information. This parameter change enables source-specific network management functions without requiring structural modifications to the IPv6 header format.
3Reliability
If distributed replication and role-based policies are implemented, then network security and performance are enhanced, but the processing overhead at network nodes increases
Solution Approach 1:
The patent implements preliminary action by encoding source-specific function information and replication policies in advance within the source-specific SID before packet transmission. Network nodes can directly execute these pre-configured functions (such as per-packet RPF checks, ingress replication, role-based access control) without requiring complex real-time decision-making, thereby enhancing security and performance while limiting processing overhead to simple flag checking and function execution.
Data Source
AI summary
In one example, a method includes receiving, at a network node of a network deploying segment routing, a data packet, wherein an IPv6 header of the data packet includes a source specific function associated with a source address of the data packet and a destination specific function associated with a destination address of the data packet; determining, at the network node, whether a source flag in an End node address of the network node is set; upon determining that the source flag is set, extracting, by the network node, the source specific function; and executing, by the network node, the source specific function for the data packet.