Apparatuses and methods related to connecting tunnels through a virtual switch

Patent metadata

Field	Value
Publication number	US-11057268-B2
Application number	US-201214410292-A
Country	US
Kind code	B2
Filing date	Jul 13, 2012
Priority date	Jul 13, 2012
Publication date	Jul 6, 2021
Grant date	Jul 6, 2021

Abstract

Apparatuses and methods enable connecting tunnels channeling data flow from a user terminal and to a mobile network through a virtual switch in a network device which is configured to provide a service by processing data in the data flow. A method performed by a device having one or more processors includes establishing a first tunnel between the device and a node of the mobile network, and a second tunnel between the device and another network device of the mobile network, the first tunnel and the second tunnel operating according to Internet protocols. The method further includes connecting the first tunnel to the second tunnel using a virtual switch running on the device, and connecting a virtual machine running on the device to the virtual switch, the virtual machine being configured to provide a service by processing data in the data flow.

First claim

What is claimed is:

1. A method for interposing a computing unit between a network node and another network device in a mobile network, the method comprising:
dispatching a virtual machine on the computing unit, the virtual machine being configured to provide a service by processing data in a data flow from a user terminal to the other network device through the network node to support functionality of an application running in the virtual machine;
configuring a first General Packet Radio Service (GPRS) Tunneling Protocol (GTP) tunnel between the network node and the computing unit to receive the data flow via the first GTP tunnel, and a second GTP tunnel between the computing unit and the other network device to forward the data flow there-through; and
configuring, in the computing unit, a virtual switch having a first port that is a terminal point for the first GTP tunnel and a second port that is a starting point for the second GTP tunnel to forward the data flow there-between, and configured to supply the data to the virtual machine,
wherein the virtual switch operates to forward the data flow from the first GTP tunnel to the second GTP tunnel, according to one or more predetermined traffic management rules.

2. A method performed by a device having one or more processors, the method comprising:
establishing
a first tunnel between the device and a node of a mobile network to receive a data flow from a user terminal via the first tunnel, and
a second tunnel between the device and another network device of the mobile network to forward the data flow via the second tunnel,
the first tunnel and the second tunnel operating according to Internet protocols;

connecting the first tunnel to the second tunnel using a virtual switch running on the device;
connecting a virtual machine running on the device to the virtual switch, the virtual machine being configured to provide a service by processing data in the data flow to support functionality of an application running in the virtual machine; and
configuring the virtual switch to forward the data flow from the first tunnel to the second tunnel, according to one or more predetermined traffic management rules.

3. The method of claim 2 , further comprising:
breaking an existing tunnel between the node and the other device, wherein the breaking of the existing tunnel triggers no change in the other device.

4. The method of claim 2 , wherein the data flow includes General Packet Radio Service packets and the Internet protocols are included in a GPRS Tunneling Protocol.

5. The method of claim 4 , further comprising:
configuring, by a switch controller, the virtual switch to operate as a GTP tunnel end point.

6. The method of claim 5 , wherein the mobile network is a Long Term Evolution (LTE) system, and the switch controller receives the information from a Mobility Management Entity (MME).

7. The method of claim 2 , wherein the virtual switch includes:
a first port that operates as an end point of the first tunnel, and
a second port that operates as a start point of the second tunnel,
the first port and the second port being each linked to a physical interface of the device, respectively, configured to enable communication with the node and the other network device, respectively.

8. The method of claim 2 , wherein the virtual machine is connected to the virtual switch via a virtual Internet Protocol interface.

9. The method of claim 2 , wherein the mobile network is an LTE system and the node is an eNodeB or a Radio Network Controller (RNC).

10. The method of claim 2 , wherein the mobile network is an LTE system and the other network device is a Serving Gateway (SGW), a Packet Data Network (PDN) Gateway (PDN-GW), a General Packet Radio Service (GPRS) Support Node (GSN) or a Service GPRS Serving Nodes (SGSN).

11. The method of claim 2 , further comprising:
connecting the virtual switch to Internet; and
forwarding the data flow from the first tunnel to the second tunnel while performing, according to the one or more predetermined traffic management rules, at least one of breaking-out the data flow and breaking-in the data flow one or more traffic flows to or from Internet.

12. The method of claim 2 , wherein the one or more predetermined traffic management rules include at least one of:
directing a first part of the data flow to a first network device and a second part of the data flow to a second network device,
attributing a higher priority to a third part of the data flow than a priority attributed to a fourth part of the data flow, and
forwarding a fifth part of the data flow at a predetermined minimum speed.

13. A computing unit, comprising:
at least one physical interface configured to communicate with a node of a mobile network and another network device of the mobile network; and
a data processing unit including one or more processors and configured
to establish a first tunnel between the computing unit and the node of the mobile network to enable a data flow from a user terminal via the first tunnel, and a second tunnel between the computing unit and the other network device to forward the data flow, the first tunnel and the second tunnel operating according to Internet protocols,
to run executable codes corresponding to a virtual switch connecting the first tunnel to the second tunnel, and

to run executable codes corresponding to a virtual machine connected to the virtual switch, the virtual machine being configured to provide a service to the user terminal by processing data in the data flow to support functionality of an application running in the virtual machine,
wherein the data processing unit is further configured to run the executable codes corresponding to the virtual switch such that to forward the data flow from the first tunnel to the second tunnel, according to one or more predetermined traffic management rules.

14. The computing unit of claim 13 , wherein the data flow includes GPRS packets and the Internet protocols are included in the GPRS Tunneling Protocol, and
wherein the mobile network is an LTE system, the node is an eNodeB or a Radio Network Controller, and the other network device is a gateway or a support node.

15. A non-transitory computer readable medium storing executable codes which, when executed on a computer having a mobile network interface and one or more processors, make the computer perform a method comprising:
establishing
a first tunnel between the device and a node of a mobile network to receive a data flow from a user terminal via the first tunnel, and
a second tunnel between the device and another network device of the mobile network to forward the data flow,
the first tunnel and the second tunnel operating according to Internet protocols;

connecting the first tunnel to the second tunnel using a virtual switch running on the device; and
connecting a virtual machine running on the device to the virtual switch, the virtual machine being configured to provide a service by processing data in the data flow to support functionality of an application running in the virtual machine;
wherein the virtual switch operates to forward the data flow from the first tunnel to the second tunnel, according to one or more predetermined traffic management rules.

16. The computer readable medium of claim 15 , the method further comprising:
breaking an existing tunnel between the node and the other device, wherein the breaking of the existing tunnel triggers no change in the other device.

17. The computer readable medium of claim 15 ,
wherein the data flow includ

Assignees

• Melander Bob
• Fernandez Casado Enrique Eduardo
• Puthalath Hareesh
• Sefidcon Azimeh
• Ericsson Telefon Ab L M

Inventors

• Melander Bob
• Fernández Casado Enrique Eduardo
• Puthalath Hareesh
• Sefidcon Azimeh

Classifications

• H04L12/4633 Primary

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L47/825 Primary

  Involving tunnels, e.g. MPLS · CPC title

• H04L47/824

  Applicable to portable or mobile terminals · CPC title

• H04W76/12

  Setup of transport tunnels · CPC title

• H04L41/0806 Primary

  for initial configuration or provisioning, e.g. plug-and-play · CPC title