VPN Router Load Reduction via Administrative Data Merging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Large Virtual Private Networks (VPNs) face overload due to the high number of administrative data packets, such as HELLO ACK and probe packets, which need to be periodically transmitted to maintain channel openness and measure performance, leading to router overload.
Innovation Solution
Computing nodes in the VPN append administrative data to client data packets, reducing the number of separate administrative packets transmitted by utilizing unused bytes in client packets and adjusting the Maximum Transmission Unit (MTU) to accommodate this data, thereby minimizing the load on routers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If administrative data packets (HELLO ACK, probe packets) are periodically transmitted to maintain channel openness and measure performance, then network monitoring and channel maintenance are ensured, but router overload occurs due to high packet transmission volume
Solution Approach 1:
The patent combines administrative data (HELLO ACK, probe packets) with client data packets by appending administrative information to the unused bytes of client packets. This merging eliminates the need for separate administrative packet transmissions, reducing overall packet volume while maintaining channel monitoring and performance measurement functions.
Solution Approach 2:
The client data packet is enhanced to serve multiple functions: it carries client data, administrative information for channel maintenance, and performance measurement data. By making the client packet multi-functional, the system eliminates the need for dedicated administrative packets, thereby reducing router load while maintaining reliability.
2Productivity
If the number of HELLO ACK and probe packets is reduced to alleviate router overload, then router load decreases, but network performance monitoring deteriorates
Solution Approach 1:
The patent merges performance measurement data into client data packets by appending probe information and timestamps to the administrative data section of client packets. This allows performance monitoring to continue with reduced packet transmission, as the measurement data is now embedded within existing client traffic rather than requiring separate probe packets.
Solution Approach 2:
By embedding administrative and measurement data in every client packet transmission, the system ensures continuous monitoring and performance measurement without the interruptions or gaps that would occur with reduced periodic probe packets. The useful action of monitoring continues seamlessly with every client data exchange.
Data Source
AI summary
A source node can append a unique identifier to an outbound client packet, transmit the outbound client packet to a recipient node via a port, and create a transmission record including: the unique identifier, a time stamp of the outbound client packet, and an identifier for the port. The source node can receive an inbound client packet that is appended with the unique identifier and a delta time indicating an amount of elapsed time between the recipient node receiving the outbound client packet and the recipient node transmitting the inbound client packet. The source node can determine a performance level of a VPN tunnel provided by the port based on the time stamp value of the outbound client packet, the delta time, and a time stamp value of the inbound client packet indicating a time at which the inbound client packet was received by the source node.