Network Switch Uplink Port Oversubscription Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network switches are vulnerable to attacks that cause uplink port oversubscription due to excessive traffic, leading to connectivity issues, which can be caused by Denial-of-Service attacks, network loops, or inefficient bandwidth usage from applications like peer-to-peer file transfers.
Innovation Solution
Implementing a method to monitor data traffic on uplink and host ports, determining oversubscription, flagging excessive traffic contributors, and taking actions such as rate limiting or disabling these ports to prevent network disruption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If network switches allow high bandwidth usage on host ports for applications like peer-to-peer file transfers, then productivity and data transfer efficiency are improved, but uplink ports can become oversubscribed causing network disruptions and connectivity issues
Solution Approach 1:
The patent implements a feedback mechanism where the network switch continuously monitors uplink port utilization and host port traffic patterns. When oversubscription conditions are detected, the system automatically adjusts bandwidth allocation by rate-limiting specific host ports, creating a closed-loop control system that maintains network stability while allowing high productivity during normal operation
Solution Approach 2:
The patent introduces dynamic bandwidth allocation that adjusts traffic limits in real-time based on network conditions. Instead of static bandwidth assignments, the system dynamically modifies rate limits on host ports responding to uplink port utilization thresholds, allowing the network to adapt between high-productivity states and stable-operational states
2Reliability
If network switches implement monitoring and rate limiting mechanisms to prevent uplink port oversubscription, then network reliability and stability are improved, but device complexity and computational overhead increase
Solution Approach 1:
The patent segments the network monitoring function into discrete, manageable components: uplink port utilization monitoring, host port traffic analysis, threshold comparison logic, and rate limit enforcement. This modular approach divides the complex oversubscription prevention task into independent functional blocks that can be implemented and maintained separately
Solution Approach 2:
The network switch performs self-monitoring and self-regulation of traffic patterns without requiring external network management system intervention. The switch autonomously detects oversubscription conditions and applies rate limiting measures, reducing the complexity burden on external controllers while maintaining reliable network operation
3Productivity
If network switches allow unrestricted traffic flow to maximize bandwidth utilization, then productivity is improved, but vulnerability to Denial-of-Service attacks and network loops increases
Solution Approach 1:
The patent implements preliminary protective measures by establishing rate limits and traffic thresholds before attacks or anomalies occur. The monitoring mechanism detects abnormal traffic patterns early and preemptively applies bandwidth restrictions, preventing DoS attacks and network loops from causing full network disruption while allowing legitimate high-bandwidth operations to continue
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In some examples, a method can include monitoring data traffic along an uplink port and along at least a subset of a plurality of host ports, determining whether the uplink port is oversubscribed based on the monitored data traffic, determining whether a given host port of the at least a subset of host ports is receiving excessive data traffic in response to determining that the uplink port is oversubscribed, and flagging a host port that is determined to be receiving excessive data traffic.