VPC Traffic Rerouting With Predetermined Paths and Failure Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for rerouting traffic to a Virtual Private Cloud (VPC) are not scalable and take too long to recover from failures, especially for mission-critical applications hosted on VPCs, due to the time required for failure detection and recalculation of alternate paths.

Innovation Solution

Implementing proactive techniques for quickly rerouting traffic to a predetermined alternate VPC location by pre-calculating routes, monitoring for errors using TCP and ICMP data, and validating failures with BFD or SBFD, allowing for seamless fast reroute (FRR) when a primary VPC fails.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional failure detection and path recalculation methods are used, then network reliability is improved, but the time required for failure recovery increases

Engineering Contradiction:
Improvenetwork reliabilityVSAvoidfailure recovery time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent pre-calculates and stores multiple alternate paths before failures occur. When a failure is detected, the system immediately switches to a pre-computed path without needing to recalculate, thereby reducing failure recovery time while maintaining network reliability

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system dynamically adjusts the failure detection mechanism by using ICMP echo requests with configurable intervals. The detection frequency adapts based on network conditions and failure severity, allowing faster detection when needed while reducing overhead during normal operation

Inventive Principle:
Principle #15Dynamics

2Loss of time

If proactive error detection and fast reroute mechanisms are implemented, then failure recovery time is reduced, but device complexity increases

Engineering Contradiction:
Improvefailure recovery timeVSAvoidsystem complexity
Core Design Contradiction:
Loss of timeVSDevice complexity

Solution Approach 1:

The system segments the path selection function into a separate path calculation module that operates independently from the main routing logic. This modular approach allows fast rerouting without complicating the core routing system, as the path segmentation logic can be pre-computed and stored

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary path calculation module that acts as a mediator between the routing system and failure detection mechanisms. This intermediary pre-calculates alternate paths and stores them in a lookup table, simplifying the overall system architecture while enabling fast failure recovery

Inventive Principle:
Principle #24Intermediary (Mediator)

3Measurement precision

If multiple monitoring mechanisms (TCP, ICMP, BFD) are used for failure detection, then measurement precision is improved, but device complexity increases

Engineering Contradiction:
Improvefailure detection accuracyVSAvoidmonitoring system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent combines multiple monitoring mechanisms (TCP connection status, ICMP echo requests, and BFD sessions) into a unified failure detection system. These mechanisms work together synergistically, with each providing complementary information about network health, improving detection accuracy without requiring separate independent systems

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The monitoring system is designed with multi-functionality, where a single monitoring infrastructure supports multiple detection methods (TCP, ICMP, BFD). This universal approach reduces overall system complexity compared to implementing separate dedicated systems for each monitoring method

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12494991B2Traffic protection with predetermined reroute and adaptive failure detection for use of applications hosted on virtual private clouds
Publication Date: 2025.12.09 CISCO TECHNOLOGY INC
  • US12494991B2 patent drawing
  • US12494991B2 patent drawing
  • US12494991B2 patent drawing

AI summary

Techniques are described for quickly rerouting traffic to an application hosted on a first Virtual Private Cloud (VPC) location. In the event of an error in routing traffic to the first VPC portion traffic can be rerouted to a second VPC portion. The first and second VPC portions can be different portions of the same VPC or could be different VPSs. The techniques include steps for calculating a predetermined route to the second private virtual cloud location. The techniques further include steps for monitoring data for detecting an error in the first cloud location. The steps further include detecting a potential error based on the monitored data, and also verifying that the potential error is in fact a valid error. In response to verifying that the error is a valid error, further steps include performing a fast reroute of traffic to the second cloud locations along the predetermined route.