Migration from a legacy network appliance to a network function virtualization (NFV) appliance

Patent metadata

Field	Value
Publication number	US-11070476-B2
Application number	US-201916395774-A
Country	US
Kind code	B2
Filing date	Apr 26, 2019
Priority date	Apr 26, 2019
Publication date	Jul 20, 2021
Grant date	Jul 20, 2021

Abstract

A computing device includes an appliance status table to store at least one of reliability and performance data for one or more network functions virtualization (NFV) appliances and one or more legacy network appliances. The computing device includes a load controller to configure an Internet Protocol (IP) filter rule to select a packet for which processing of the packet is to be migrated from a selected one of the one or more legacy network appliances to a selected one of the one or more NFV appliances, and to update the appliance status table with received at least one of reliability and performance data for the one or more legacy network appliances and the one or more NFV appliances. The computing device includes a packet distributor to receive the packet, to select one of the one or more NFV appliances based at least in part on the appliance status table, and to send the packet to the selected NFV appliance. Other embodiments are described herein.

First claim

The invention claimed is:

1. A method comprising:
configuring a packet migration Internet Protocol (IP) filter rule to select packets for which processing of the packets is to be migrated from a proprietary dedicated hardware legacy network appliance to a selected one of one or more network function virtualization (NFV) appliances;
receiving a packet;
applying the packet migration IP filter rule to the received packet;
when the received packet does not match the packet migration IP filter rule, sending the received packet to the proprietary dedicated hardware legacy network appliance for processing of the received packet; and
when the received packet does match the packet migration IP filter rule:
generating metadata for the packet, the packet metadata including a set of proprietary dedicated hardware legacy network appliance to NFV appliances distributions;
selecting a most reliable NFV appliance from the set based at least in part on the packet metadata;
determining if the selected most reliable NFV appliance is valid;
when the selected most reliable NFV appliance is valid, sending the received packet to the selected most reliable NFV appliance for processing of the received packet; and
when the selected most reliable NFV appliance is not valid, sending the received packet to the proprietary dedicated hardware legacy network appliance for processing of the received packet.

2. The method of claim 1 , comprising updating an appliance status table with performance metrics data generated by processing the received packet by the proprietary dedicated hardware legacy network appliance or the selected most reliable NFV appliance.

3. The method of claim 2 , comprising selecting the most reliable NFV appliance from the set based at least in part on the packet metadata and the performance metrics data from the appliance status table.

4. The method of claim 3 , comprising determining if the selected most reliable NFV appliance is valid by checking if updated performance metrics data for the selected most reliable NFV appliance meets a threshold.

5. At least one non-transitory machine-readable medium comprising a plurality of instructions that in response to being executed by a processor cause the processor to:
configure a packet migration Internet Protocol (IP) filter rule to select packets for which processing of the packets is to be migrated from a proprietary dedicated hardware legacy network appliance to a selected one of one or more network function virtualization (NFV) appliances;
receive a packet;
apply the packet migration IP filter rule to the received packet;
when the received packet does not match the packet migration IP filter rule, send the received packet to the proprietary dedicated hardware legacy network appliance for processing of the received packet; and
when the received packet does match the packet migration IP filter rule:
generate metadata for the packet, the packet metadata including a set of proprietary dedicated hardware legacy network appliance to NFV appliances distributions;
select a most reliable NFV appliance from the set based at least in part on the packet metadata;
determine if the selected most reliable NFV appliance is valid;
when the selected most reliable NFV appliance is valid, send the received packet to the selected most reliable NFV appliance for processing of the received packet; and
when the selected most reliable NFV appliance is not valid, send the received packet to the proprietary dedicated hardware legacy network appliance for processing of the received packet.

6. The at least one non-transitory machine-readable medium of claim 5 , comprising instructions that in response to being executed by the processor cause the processor to update an appliance status table with performance metrics data generated by processing the received packet by the proprietary dedicated hardware legacy network appliance or the selected most reliable NFV appliance.

7. The at least one non-transitory machine-readable medium of claim 6 , comprising instructions that in response to being executed by the processor cause the processor to select the most reliable NFV appliance from the set based at least in part on the packet metadata and the performance metrics data from the appliance status table.

8. The at least one non-transitory machine-readable medium of claim 7 , comprising instructions that in response to being executed by the processor cause the processor to determine if the selected most reliable NFV appliance is valid by checking if updated performance metrics data for the selected most reliable NFV appliance meets a threshold.

9. A computing device comprising:
a packet filter to configure a packet migration Internet Protocol (IP) filter rule to: select packets for which processing of the packets is to be migrated from a proprietary dedicated hardware legacy network appliance to a selected one of one or more network function virtualization (NFV) appliances, to receive a packet, and to apply the packet migration IP filter rule to the received packet; and
an NFV migration controller to:
when the received packet does not match the packet migration IP filter rule, send the received packet to the proprietary dedicated hardware legacy network appliance for processing of the received packet; and
when the received packet does match the packet migration IP filter rule:
generate metadata for the packet, the packet metadata including a set of proprietary dedicated hardware legacy network appliance to NFV appliances distributions;
select a most reliable NFV appliance from the set based at least in part on the packet metadata;
determine if the selected most reliable NFV appliance is valid;
when the selected most reliable NFV appliance is valid, send the received packet to the selected most reliable NFV appliance for processing of the received packet; and
when the selected most reliable NFV appliance is not valid, send the received packet to the proprietary dedicated hardware legacy network appliance for processing of the received packet.

10. The computing device of claim 9 , the NFV migration controller to update an appliance status table with performance metrics data generated by processing the received packet by the proprietary dedicated hardware legacy network appliance or the selected most reliable NFV appliance.

11. The computing device of claim 10 , the NFV migration controller to select the most reliable NFV appliance from the set based at least in part on the packet metadata and the performance metrics data from the appliance status table.

12. The computing device of claim 11 , the NFV migration controller to determine if the selected most reliable NFV appliance is valid by checking if updated performance metrics data for the selected most reliable NFV appliance meets a threshold.

13. The method of claim 1 , wherein the proprietary dedicated hardware legacy network appliance performs one or more of: firewall services, network address translation (NAT) services, domain name system (DNS) services, load-balancing services, deep packet inspection (DPI) services, transmission control protocol (TCP) optimization services, cache management services, and/or Internet Protocol (IP) address management services.

14. The method of claim 1 , wherein the most reliable NFV appliance is based on one or more of: equipment fault metrics, virtualization environment fault metrics, and/or network interface fault metrics.

15. The method of claim 1 , wherein the selected most reliable NFV appliance is valid based on reliability and/or performance status information.

16. The

Assignees

• Intel Corp

Inventors

• Connor Patrick
• Chilikin Andrey
• Ryan Brendan
• Macnamara Chris
• Browne John J
• Jambur Sathyanarayana Krishnamurthy
• Doyle Stephen
• Kantecki Tomasz
• Kelly Anthony
• Loftus Ciara
• Trahe Fiona

Classifications

• H04L43/20

  the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV · CPC title

• H04L41/342

  between virtual entities, e.g. orchestrators, SDN or NFV entities · CPC title

• H04L43/0817 Primary

  by checking functioning · CPC title

• G06F9/455

  Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines · CPC title

• H04L63/0263

  Rule management · CPC title