Chaining service zones by way of route re-origination

Patent metadata

Field	Value
Publication number	US-10270843-B2
Application number	US-201715711235-A
Country	US
Kind code	B2
Filing date	Sep 21, 2017
Priority date	May 21, 2013
Publication date	Apr 23, 2019
Grant date	Apr 23, 2019

Abstract

Presented herein are techniques for use in a network environment that includes one or more service zones, each service zone including at least one instance of an in-line application service to be applied to network traffic and one or more routers to direct network traffic to the at least one service, and a route target being assigned to a unique service zone to serve as a community value for route import and export between routers of other service zones, destination networks or source networks via a control protocol. An edge router in each service zone or destination network advertises routes by its destination network prefix tagged with its route target. A service chain is created by importing and exporting of destination network prefixes by way of route targets at edge routers of the service zones or source networks.

First claim

What is claimed is:

1. A method comprising;
providing in a network environment a plurality of service zones, each service zone including a plurality of instances of an in-line application service to be applied to network traffic and one or more edge routers to direct network traffic to one or more application services;
assigning a route target to each service zone to serve as a community value for route import and export between routers of other service zones, destination networks or source networks;
advertising, by an edge router in each service zone or destination network, routes by destination network prefix tagged with its route target;
at an edge router of a first service zone, generating a re-originated route advertisement for import by a third service zone that is further upstream, with respect to a traffic flow, to the first service zone, the re-originated route advertisement being generated by re-originating an imported route from a second service zone or destination network such that the edge router of the first service zone sets itself as the forwarding next hop, replaces the route target of the second service zone with the route target for the first service zone and inserts the first service zone between the third service zone and the second service zone or destination network for the traffic flow;
creating a service chain by importing and exporting, via a routing control protocol, destination network prefixes by way of route targets at edge routers of the service zones or source networks;
providing a plurality of virtual routing and forwarding (VRF) functions in the edge router at which traffic is received in a particular service zone and a plurality of attachment circuits connected between VRF functions and service instances, each VRF function storing data maintaining a corresponding one of the attachment circuits for traffic flow to and from a corresponding service instance;
providing a session routing and forwarding (SRF) function that stores session information to select which attachment circuits to use, as stored by the VRF functions, for purposes of directing traffic received at the edge router of the particular service zone to service instances and receiving traffic back from the service instances, the session information representing assignment of packet sessions to attachment circuits for delivery to service instances according to session flow parameters of the packets; and
after creation of the service chain, performing operations including:
receiving traffic at an edge router in the particular service zone;
directing the traffic to a service instance in the particular service zone;
receiving traffic back from the service instance in the particular service zone;
forwarding the traffic on from the particular service zone; and
determining which of the plurality of service instances to direct the traffic to in the particular service zone.

2. The method of claim 1 , further comprising:
horizontally scaling a given service chain by dynamically inserting and/or removing one or more service instances in the given service chain;
vertically scaling the given service chain by dynamically increasing and/or reducing a capacity of one or more service instances in the given service chain according to demand changes for the one or more service instances; and
within the particular service zone, dynamically adjusting routing, forwarding and service capacity by adding and/or removing on or more VRF functions and associated SRF functions based on the horizontally scaling and the vertically scaling.

3. The method of claim 1 , wherein creating a service chain comprises:
receiving at the edge router of the first service zone a route advertisement from an edge router of the second service zone or destination network, the route advertisement advertising a destination network prefix of the second service zone or destination network tagged with the route target for the second service zone; and
at the edge router of the first service zone, importing the destination network prefix advertised for the second service zone or destination network based on the route advertisement received from the edge router of the second service zone.

4. The method of claim 1 , further comprising:
advertising to an edge router of the third service zone or source network, the re-originated route advertisement learned from the edge router of the second service zone, the re-originated route advertisement including information indicating the destination network prefix of the second service zone, an address of the edge router for the first service zone as the forwarding next hop and the route target of the first service zone.

5. The method of claim 1 , wherein the edge routers of the service zones are physical routers or virtual routers.

6. The method of claim 1 , wherein receiving traffic comprises receiving packets at a VRF function of the edge router of the particular service zone, wherein directing comprises:
passing the packets to the SRF function in the particular service zone function;
the SRF function matching session flow parameters of the packets against the session information; and
passing the packets back to the VRF function with appropriate session information; and the VRF function forwarding packets over attachment circuits to service instances according to the session information.

7. An apparatus comprising:
a plurality of ports configured to receive packets from and to send output packets to a network;
a router unit coupled to the plurality of ports and configured make decisions as to how to route received packets to ports for output to the network;
a processor coupled to the router unit, wherein the processor is configured to:
define a plurality of service zones, each service zone including a plurality instances of an in-line application service to be applied to network traffic and one or more edge routers to direct network traffic to one or more application services;
assign a route target to each service zone to serve as a community value for route import and export between routers of other service zones, destination networks or source networks;
advertise routes by destination network prefix tagged with its route target;
for a first service zone, generate a re-originated route advertisement for import by a third service zone that is further upstream, with respect to a traffic flow, to the first service zone, the re-originated route advertisement being generated by re-originating an imported route from a second service zone or destination network such that the edge router of the first service zone sets itself as the forwarding next hop, replaces the route target of the second service zone with the route target for the first service zone and inserts the first service zone between the third service zone and the second service zone or destination network for the traffic flow;
create a service chain by importing and exporting, via a routing control protocol, destination network prefixes by way of route targets at edge routers of the service zones or source networks;
execute a plurality of virtual routing and forwarding (VRF) functions in the edge router at which traffic is received in a particular service zone and a plurality of attachment circuits connected between VRF functions and service instances, each VRF function storing data maintaining a corresponding one of the attachment circuits for traffic flow to and from a corresponding service instance;
execute a session routing and forwarding (SRF) function that stores session information to select which attachment circuits to use, as stored by the VRF functions, for purposes of directing traffic received at the edge router of the particular service zone to service instances and receiving traffic back from the ser

Assignees

• Cisco Tech Inc

Inventors

• Bosch Hendrikus G P
• Guichard James
• Barach Dave
• Duminuco Alessandro
• Fang Luyuan
• Quinn Paul
• Fernando Rex
• Ward David

Classifications

• H04L67/10 Primary

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L45/02

  Topology update or discovery · CPC title

• H04L45/04 Primary

  Interdomain routing, e.g. hierarchical routing · CPC title

• H04L45/0377

  for service chaining · CPC title