Zero-Touch Virtual Network Node Provisioning via Blockchain
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network setup and management in wide area networks are time-consuming and prone to errors due to manual processes, and existing SD-WAN technologies lack assurance of successful configuration changes, leading to potential network outages and security vulnerabilities.
Innovation Solution
A method utilizing a permissioned blockchain distributed ledger for order management and zero-touch provisioning of operational nodes, where orders are recorded immutably and automatically executed by nodes in the network, eliminating the need for manual configuration and ensuring secure, error-free network changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual processes are used for network setup and configuration, then network security and control can be maintained, but setup time increases to 1-3 months and human errors are introduced
Solution Approach 1:
The system enables self-service through automated provisioning where network nodes automatically configure themselves by reading configuration data from the blockchain ledger, eliminating the need for manual engineer intervention while maintaining security through cryptographic verification of configuration integrity
Solution Approach 2:
Configuration data is prepared and stored on the blockchain ledger in advance before actual network provisioning occurs. This preliminary action allows nodes to automatically retrieve and apply pre-validated configurations, reducing setup time from months to minutes while maintaining security through prior validation
2Adaptability or versatility
If manual configuration updates are performed by network engineers, then configuration changes can be made, but the risk of introducing errors increases and considerable human resources are required
Solution Approach 1:
The system implements feedback through automated validation mechanisms where configuration changes are validated against the blockchain ledger before deployment. Nodes continuously monitor the ledger for updates and automatically verify configuration integrity, providing immediate feedback if errors are detected and preventing propagation of incorrect configurations
Solution Approach 2:
Manual mechanical configuration processes are replaced with automated digital systems. Network engineers no longer manually configure nodes; instead, configuration data is automatically distributed via blockchain and applied by nodes through software automation, eliminating human error while maintaining configuration flexibility
3Productivity
If SD-WAN centralized control is used, then deployment of configuration changes is simplified, but errors in configuration information are propagated to every node resulting in network outages or security vulnerabilities
Solution Approach 1:
The blockchain ledger serves as an intermediary between configuration management and network nodes. Instead of direct centralized control pushing configurations to nodes, the system uses the immutable blockchain ledger as a medium that stores validated configuration data. Nodes independently retrieve and validate configurations from the ledger, preventing error propagation while maintaining fast deployment
Solution Approach 2:
Configuration validation and preparation are performed in advance and stored on the blockchain before deployment. This preliminary validation ensures configuration accuracy is verified before distribution, allowing rapid deployment to all nodes without propagating errors that would cause outages or security issues
4Loss of time
If automated provisioning is implemented, then setup time is reduced and human error is minimized, but complex infrastructure including blockchain distributed ledger is required
Solution Approach 1:
The blockchain ledger serves multiple functions simultaneously: it acts as a secure configuration repository, a validation mechanism, a distribution channel, and an audit trail. This multi-functionality reduces the need for separate complex infrastructure components while enabling automated provisioning that reduces setup time and eliminates human error
Data Source
AI summary
An autonomous distributed wise area network (AD-WAN) includes several nodes, where each node connects a local area network to an open wide area network, and provides tunnels over the open wide area network to other nodes in the AD-WAN so that computing resources behind each node can communicate as if they were located on a common intranet. Each node has a blockchain wallet and receives updates to a private permissioned blockchain ledger for that AD-WAN. The updates are provided by a control node. Set up, and subsequent change to the AD-WAN are commenced via a customer portal which provides order information to the control node, where the control node processes the order information and generates a blockchain update that informs the affected nodes in the AD-WAN as to what changes are to be made. As a result, the blockchain provides both control plane and order management operation of the AD-WAN.