Tunnel Trace Request Splitting for Intermediate Node Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Tunneling protocols, such as VPNs, prevent monitoring of network performance at intermediate nodes by encapsulating and encrypting traffic, making it invisible to performance tools, thereby limiting the ability to trace and monitor media flows and quality of service parameters in real-time.
Innovation Solution
A method where a head-end node of a tunnel splits a trace request into an in-tunnel and an out-of-tunnel request, allowing intermediate nodes to generate trace responses that are relayed back to the head-end node, enabling performance monitoring of nodes along the tunnel path.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If tunneling protocols encapsulate and encrypt traffic, then security is improved, but monitoring capability at intermediate nodes deteriorates
Solution Approach 1:
The patent segments the trace request into two separate paths: an in-tunnel trace request that maintains security encapsulation, and an out-of-tunnel trace request that enables intermediate node monitoring. This segmentation allows both security and monitoring requirements to be satisfied simultaneously without compromising either function.
Solution Approach 2:
The head-end node acts as an intermediary that receives the original trace request and generates both in-tunnel and out-of-tunnel trace requests. This intermediary function enables the system to maintain security while providing monitoring capabilities at intermediate nodes, as the head-end node coordinates both trace paths.
2Reliability
If trace requests are sent only through the tunnel, then security is maintained, but performance monitoring of intermediate nodes is lost
Solution Approach 1:
The patent divides the single trace request into two distinct trace requests with different paths: one that travels through the tunnel to maintain security, and another that travels outside the tunnel to enable precise performance measurement at intermediate nodes. Both measurements can be aggregated to provide comprehensive performance data.
Solution Approach 2:
The patent uses partial action by sending only the necessary portion of trace requests outside the tunnel (out-of-tunnel requests) while keeping the main trace request inside the tunnel. This partial approach provides sufficient performance monitoring data without fully exposing the tunnel traffic, thus maintaining security while enabling measurement.
3Measurement precision
If multiple trace requests are generated, then monitoring coverage is improved, but network traffic increases
Solution Approach 1:
The patent applies partial action by generating out-of-tunnel trace requests only for intermediate nodes that require monitoring, rather than duplicating all trace requests for all nodes. This selective approach provides adequate monitoring coverage while minimizing the additional network traffic generated by the dual trace request mechanism.
Data Source
AI summary
In one embodiment, a head-end node of a tunnel, relative to a tail-end node, receives a trace request, and in response, generates an out-of-tunnel trace request based on the trace-request. The trace request is transmitted in-tunnel to the tail-end node, while also transmitting the out-of-tunnel trace request to at least one subsequent node. The head-end node may then receive a trace response from the tail-end node based on the in-tunnel trace request, as well as a trace response from each of the subsequent nodes based on the out-of-tunnel trace request.