Service offloading in communications

Patent metadata

Field	Value
Publication number	US-10057177-B2
Application number	US-201415114995-A
Country	US
Kind code	B2
Filing date	Feb 5, 2014
Priority date	Feb 5, 2014
Publication date	Aug 21, 2018
Grant date	Aug 21, 2018

Abstract

A method is disclosed for service offloading in a communications system, the method comprising determining, in a network apparatus, whether a traffic flow has been properly classified by a deep packet inspection virtual machine. If the traffic flow has been properly classified by the deep packet inspection virtual machine, the method comprises instructing a software defined networking controller to stop sending further packets of said traffic flow to the deep packet inspection virtual machine.

First claim

The invention claimed is:

1. A method for service offloading in a communications system, comprising:
determining, in a network apparatus, whether a traffic flow has been properly classified by a deep packet inspection virtual machine;
keeping track of a content length of a resource being transferred to a client; and
when transferring of each data packet of the traffic flow is completed, disabling offloading the deep packet inspection virtual machine, wherein subsequent data packets of said traffic flow are sent to the deep packet inspection virtual machine through a software defined networking switch,
wherein if the traffic flow has been properly classified by the deep packet inspection virtual machine, the method comprises instructing a software defined networking controller to stop sending further packets of said traffic flow to the deep packet inspection virtual machine.

2. A method according to claim 1 , further comprising:
determining whether there is a change in the traffic flow;
wherein if there is a change in the traffic flow, the method comprises instructing the software defined networking controller to start sending packets to the deep packet inspection virtual machine again.

3. A method according to claim 2 , wherein
the change in the traffic flow comprises a change of URI or host name or some other change that changes the classification of the traffic flow.

4. A method according to claim 1 , wherein
the classification of the traffic flow defines whether the traffic flow belongs to a particular web service and/or web application.

5. A method according to claim 1 , further comprising:
performing classification of the traffic flow based on a first few packets of the traffic flow.

6. A method according to claim 1 , further comprising:
performing classification of the traffic flow by
forwarding the traffic flow to the deep packet inspection virtual machine by programming a software defined networking switch, wherein the data packets are returned back along with a custom header specifying a classification result.

7. An apparatus comprising at least one processor; and at least one memory including a computer program code, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to perform the method steps of claim 1 .

8. A computer program product embodied on a non-transitory computer-readable medium, said product comprising executable code that when executed, causes execution of functions of a method according to claim 1 .

9. A method for service offloading in a communications system, comprising:
determining, in a network apparatus, whether a traffic flow has been properly classified by a deep packet inspection virtual machine;
performing classification of the traffic flow by
forwarding the traffic flow to the deep packet inspection virtual machine by programming a software defined networking switch, wherein the data packets are returned back along with a custom header specifying a classification result,

wherein if the traffic flow has been properly classified by the deep packet inspection virtual machine, the method comprises instructing a software defined networking controller to stop sending further packets of said traffic flow to the deep packet inspection virtual machine, and
wherein if a classification field includes a valid application, a service chain to the deep packet inspection virtual machine is interrupted from a software defined networking switch and the classification result is used for subsequent packets of said traffic flow.

10. An apparatus comprising at least one processor; and at least one memory including a computer program code, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to
disable a deep packet inspection service for a traffic flow, based on instructions received from a packet data gateway, if said instructions instruct the apparatus to stop sending further packets of said traffic flow to a deep packet inspection virtual machine;
enable the deep packet inspection service for the traffic flow, based on the instructions received from the packet data gateway, if said instructions instruct the apparatus to start sending further packets of said traffic flow to the deep packet inspection virtual machine;
keep track of a content length of a resource being transferred to a client; and
when transferring of each data packet of the traffic flow is completed, disable offloading the deep packet inspection virtual machine, wherein subsequent data packets of said traffic flow are sent to the deep packet inspection virtual machine through a software defined networking switch.

Assignees

• Nokia Solutions & Networks Oy

Inventors

• Saha Sumanta
• Hietala Erkki Juhani
• Söderlund Jani Olavi
• Savolainen Niko Markus
• Lindgren Tommy Johannes

Classifications

• H04L47/2483 Primary

  involving identification of individual flows · CPC title

• H04L47/2441 Primary

  relying on flow classification, e.g. using integrated services [IntServ] · CPC title

• H04W88/16

  Gateway arrangements · CPC title

• H04L69/22

  Parsing or analysis of headers · CPC title

• H04L47/10

  Flow control; Congestion control · CPC title