Encapsulated Tunnel Throughput via Logical Interface Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems that utilize receive packet steering (RPS) are ineffective when packets need to be encapsulated during transmission, leading to underutilization of available processing cores and decreased throughput potential.
Innovation Solution
The implementation of multiple data transmission tunnels between network devices, utilizing multiple logical interfaces and virtual IP addresses to create separate tunneling sessions, allowing each session to be processed by a separate processing core.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If receive packet steering (RPS) is used to distribute packets to different processing cores, then processing throughput should improve, but when packets are encapsulated in TCP/UDP tunnels, the hash result becomes constant and all packets are directed to the same core, leaving other cores underutilized
Solution Approach 1:
The patent segments the single tunnel session into multiple tunnel sessions by creating multiple logical interfaces between network devices. Each logical interface is assigned a unique IP address, allowing the system to divide the encapsulated traffic into multiple separate TCP/UDP sessions. This segmentation enables RPS to distribute packets across different processing cores while maintaining the benefits of tunnel encapsulation.
Solution Approach 2:
The patent changes the parameter of tunnel session identification from a single constant hash result to multiple variable hash results. By creating multiple logical interfaces with unique IP addresses, each interface generates different hash results for the same encapsulated packets, allowing RPS to distribute traffic across multiple cores while maintaining session consistency within each logical interface.
2Productivity
If multiple logical interfaces with unique IP addresses are created to enable multiple tunnel sessions, then processing core utilization improves, but device configuration and session management complexity increases
Solution Approach 1:
The patent implements multi-functionality by allowing each logical interface to serve dual purposes: maintaining tunnel encapsulation functionality while simultaneously enabling load distribution across multiple processing cores. The logical interfaces act as universal components that can handle both security encapsulation and traffic steering functions, reducing the need for separate specialized components.
Solution Approach 2:
The system implements self-service through automatic session management. When multiple logical interfaces are created, the system automatically generates unique IP addresses for each interface and establishes corresponding tunnel sessions. The RPS mechanism automatically distributes packets to appropriate processing cores based on the interface-specific hash results, eliminating manual configuration requirements.
3Device complexity
If a single tunnel session is used for encapsulated IPSEC packets, then session management is simplified, but available processing cores are underutilized and throughput potential decreases
Solution Approach 1:
The patent adds another dimension to tunnel session management by introducing multiple logical interfaces as a new layer above the single tunnel session. Instead of managing multiple sessions at the same level, the system creates a hierarchical structure where multiple logical interfaces (each with unique IP addresses) operate within the context of a single underlying tunnel session, enabling both simplified management and improved throughput.
Data Source
AI summary
A computerized method for increasing throughput of encapsulated data over a network is described. First, a determination, at a first network device, of a number of available processing resources located at a second network device is conducted. Thereafter, a plurality of connections are generated between the first network device and the second device. The plurality of connections corresponding in number to the number of available processing resources. Data received by the first network device is associated with a first connection of the plurality of tunneling connections. Thereafter, translation data unique to a tunneling session associated with the first connection is generated and the received data is encapsulated with the translation data to generate the encapsulated data for transmission to the second network device.