End-to-end monitoring of overlay networks providing virtualized network services

Patent metadata

Field	Value
Publication number	US-10848403-B1
Application number	US-201715724927-A
Country	US
Kind code	B1
Filing date	Oct 4, 2017
Priority date	Mar 28, 2014
Publication date	Nov 24, 2020
Grant date	Nov 24, 2020

Abstract

In one example, a network device external to a services complex injects a plurality of probe packets along service chains provided by the services complex, wherein each of the plurality of probe packets includes a first timestamp indicating a time at which the network device sent the respective probe packet. Each of a plurality of service nodes in the services complex modifies each of the plurality of probe packets by inserting a respective second timestamp indicating a respective time at which the respective service node processed the respective one of the plurality of probe packets. An analytics device aggregates probe report information received from each of the plurality of service nodes to determine one or more path monitoring metrics.

First claim

What is claimed is:

1. A method comprising:
configuring, by a network device and in response to receiving a signal from a central network controller device due to a first probe packet being lost, a new probe injector in a virtual router component of the network device;
injecting, by the new probe injector of the virtual router component of the network device, a new probe packet within the network device into a service chain, the service chain comprising a first network service and a second network service for use by a subscriber device, the second network service being different than the first network service, wherein the virtual router component originates the new probe packet, the new probe packet having a timestamp field;
receiving, by one of a plurality of service node virtual machines of the network device in the service chain for application of the first network service for use by the subscriber device, the new probe packet;
modifying the new probe packet to create a modified probe packet by adding a timestamp entry to the timestamp field indicating a time at which the one of the plurality of service node virtual machines processed the new probe packet;
by the one of the plurality of service node virtual machines, applying the first network service for use by the subscriber device to the modified probe packet and forwarding the modified probe packet to the virtual router component;
in response to receiving the new probe packet, sending, by the virtual router component to an analytics virtual machine of the plurality of virtual machines of the network device, a message reporting contents of the timestamp field of at least one of the received probe packet or the modified probe packet;
analyzing, by the analytics virtual machine, the message from the virtual router component; and
sending a response message to change configuration of the network device based on analyzing the message.

2. The method of claim 1 , wherein sending a response message to change configuration of the network device comprises sending, by the analytics virtual machine, a response message to launch a new service node virtual machine of the network device.

3. The method of claim 1 , further comprising modifying, by the one of the plurality of service node virtual machines in the service chain, the modified packet by adding a second timestamp entry to the timestamp field indicating a second time at which a network services software instance received the modified packet.

4. The method of claim 1 , wherein the new probe packet is an ICMP packet, and wherein modifying the ICMP packet comprises adding the timestamp entry to an ICMP data field instead of adding padding data to the ICMP data field.

5. The method of claim 1 , wherein the timestamp entry comprises a second timestamp entry, and wherein the modified probe packet includes a first timestamp entry specifying a time at which an originating network device processed the modified probe packet, the method further comprising:
comparing the first timestamp entry to a synchronization clock of the virtual router component; and
determining a time delay from a time of the first timestamp entry to a time of the second timestamp entry,
wherein sending the message to the analytics virtual machine comprises reporting the determined time delay.

6. The method of claim 1 , further comprising:
prior to injecting the new probe packet within the network device, receiving, by the virtual router component and from the central network controller device, instructions to inject the new probe packet, wherein injecting the new probe packet comprises injecting the new probe packet in response to receiving the instructions.

7. The method of claim 1 , further comprising:
modifying, by one or more of a physical switch, a virtual router, or a virtual switch, the modified packet by adding one or more respective timestamp entries to the timestamp field indicating a respective time at which the physical switch, virtual router, or virtual switch received the modified packet.

8. The method of claim 1 , wherein applying the first network service to the modified probe packet comprises applying a subscriber requested network service selected from the group consisting of firewall services, security services, carrier grade network address translation, media optimization, Internet Protocol Security (IP Sec)/Virtual Private Network (VPN) services, deep packet inspection, Hyper Text Transfer Protocol (HTTP) filtering, counting, accounting, charging, and load balancing of packet flows.

9. The method of claim 1 , further comprising:
aggregating, by the analytics virtual machine, information from a plurality of messages from the virtual router component; and
presenting, to a customer, aggregated information.

10. The method of claim 1 , wherein the subscriber device comprises at least one of a personal computer, a laptop computer, a mobile telephone, a desktop computer, a netbook, a video game device, a pager, a smart phone or a personal data assistant.

11. The method of claim 1 , further comprising:
by another of the plurality of service node virtual machines, applying the second network service for use by the subscriber device to the modified probe packet.

12. A network device comprising:
a control unit comprising one or more processors;
a virtual router component, operable by the one or more processors, to configure a new probe injector, based on receiving a signal from a central network controller device due to a first probe packet being lost, that injects a new probe packet within the network device into a service chain, the service chain comprising a first network service and a second network service for use by a subscriber device, the second network service being different than the first network service, the probe packet having a timestamp field;
a plurality of service node virtual machines in the service chain operable by the one or more processors for application of the first network service and the second network service for use by a subscriber device, wherein at least one of the plurality of service node virtual machines receives the new probe packet and modifies the new probe packet to create a modified probe packet by adding a timestamp entry to the timestamp field indicating a time at which the one of the plurality of service node virtual machines processed the new probe packet,
wherein the one of the plurality of service node virtual machines applies the first network service for use by the subscriber device to the modified probe packet and forwards the modified probe packet to the virtual router component, a virtual router component, operable by the one or more processors, that injects a new probe packet within the network device into a service chain, the service chain comprising a first network service and a second network service for use by a subscriber device, the second network service being different than the first network service, the probe packet having a timestamp field;
a plurality of service node virtual machines in the service chain operable by the one or more processors for application of the first network service and the second network service for use by a subscriber device, wherein at least one of the plurality of service node virtual machines receives the new probe packet and modifies the new probe packet by adding a timestamp entry to the timestamp field indicating a time at which the one of the plurality of service node virtual machines processed the new probe packet,
wherein the one of the plurality of service node virtual machines applies the first network service for use by the subscriber device to the modified probe packet and forwards the modified

Assignees

• Juniper Networks Inc

Inventors

• Schroeder Hartmut

Classifications

• H04L43/08

  Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters · CPC title

• H04L43/20

  the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV · CPC title

• H04L43/55

  Testing of service level quality, e.g. simulating service usage · CPC title

• H04L43/106 Primary

  using time related information in packets, e.g. by adding timestamps · CPC title

• H04L43/12

  Network monitoring probes · CPC title