Virtual Network Identifier Subnetting for Hierarchical Policy Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtualized network management systems face challenges in mapping policies to Virtual eXtensible Local Area Network (VXLAN) segments due to haphazard assignment of Virtual Network Identifiers (VNIs), making it difficult to implement hierarchical policy structures and manage network access devices effectively.
Innovation Solution
A method and apparatus that determine and apply a plurality of matching policies for a dynamic virtualized network by retrieving a VNI represented as a dotted decimal number, allowing for hierarchical policy assignment and management across network access devices, enabling operators to assign VNIs based on specific policies for different types of VXLAN segments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If VNIs are assigned in a haphazard fashion, then VNI assignment is simple and quick, but policy mapping becomes difficult and hierarchical policy structure cannot be implemented
Solution Approach 1:
The patent changes the format parameter of VNI from a simple numerical identifier to a hierarchical dotted-decimal notation (e.g., 10.20.30.40), where each octet represents a different policy dimension. This parameter change enables automatic policy mapping while maintaining assignment efficiency, as operators can still assign VNIs quickly but the structured format automatically enables hierarchical policy application.
Solution Approach 2:
The VNI is segmented into multiple octets (e.g., four 8-bit segments separated by dots), where each segment corresponds to a specific policy level or dimension. This segmentation allows the system to automatically derive hierarchical policies from the VNI structure itself, resolving the contradiction between simple assignment and complex policy mapping.
2Ease of operation
If a lookup table is used to map VNI to policy, then policy mapping can be implemented, but hierarchical policy structure and automated assignment are not supported
Solution Approach 1:
The VNI format itself serves as the policy mapping key. The hierarchical dotted-decimal structure enables the system to automatically derive and apply policies without requiring external lookup tables or manual configuration. The VNI structure 'services itself' by encoding policy information directly in its format, eliminating the need for separate mapping mechanisms.
Solution Approach 2:
Instead of using a lookup table to map VNI to policy (traditional approach), the patent inverts the approach by having the VNI format itself encode the policy mapping rules. The hierarchical structure of the VNI directly determines the policy hierarchy, reversing the traditional lookup mechanism into a structure-based automatic derivation system.
3Adaptability or versatility
If hierarchical policy structure is implemented, then policy management becomes more structured and scalable, but VNI assignment and policy application complexity increases
Solution Approach 1:
The hierarchical dotted-decimal VNI format serves multiple functions simultaneously: it uniquely identifies VXLAN segments, encodes hierarchical policy information, and enables automated policy derivation. This multi-functionality allows the same VNI structure to support both simple assignment and complex hierarchical policy management without requiring separate mechanisms, thereby reducing overall system complexity despite the enhanced capabilities.
Data Source
AI summary
A method and apparatus that determines a plurality of matching policies for a segment of a dynamic virtualized network is described. A device retrieves a virtual network identifier of the segment, where the virtual network identifier includes a plurality of bits and a plurality of subnets and each of the plurality of subnets is a different subset of the plurality of bits. In addition, the dynamic virtualized network is a virtualized layer 2 network that is overlaid on a layer 3 physical network, where the layer 3 physical network includes a plurality of network access devices, and the segment includes a plurality of endpoints. The device further determines the plurality of matching policies for the segment from the plurality of subnets of the virtual network identifier, where each of the plurality of subnets corresponds to one of the plurality of matching policies. The device additionally applies the plurality of matching policies to each network access device that corresponds to one of the plurality of matching endpoints.