Per-input port, per-control plane network data traffic class control plane policing

Patent metadata

Field	Value
Publication number	US-11165887-B2
Application number	US-202016850474-A
Country	US
Kind code	B2
Filing date	Apr 16, 2020
Priority date	Feb 26, 2016
Publication date	Nov 2, 2021
Grant date	Nov 2, 2021

Abstract

Methods and systems for per-input port, per-control plane network data traffic class control plane policing in a network element are described. In one embodiment, the method comprises receiving control plane network data at an input port of a network element, wherein the control plane network data is data that is processed by the control plane. The method may also include classifying the control plane network data based on characteristics of the control plane network data. Furthermore, the method may include storing the control plane network data in one of a plurality of output queues for the input port based on a class of the control plane network data, and forwarding control plane network data from a selected one of the plurality of output queues to a control plane of the network element.

First claim

What is claimed is:

1. A non-transitory machine-readable medium storing instructions which, when executed by one or more processing units of a network element, cause the processing units to perform operations comprising:
receiving control plane network data at an input port of the network element, the network element comprising a plurality of input ports, each of the input ports has a plurality of output queues dedicated to it, wherein the control plane network data is data that is processed by the control plane;
classifying the control plane network data in a class based on characteristics of the control plane network data;
storing the control plane network data in one of a plurality of output queues specific to the input port based on the class of the control plane network data; and
forwarding control plane network data from a selected one of the plurality of output queues specific to the input port to a control plane of the network element.

2. The non-transitory machine-readable medium of claim 1 , wherein each output queue is associated with a bandwidth, a shape, or a combination thereof, and wherein control plane network data is dropped before placement in one of a plurality of output queues when a bandwidth requirement associated with the one of the plurality of output queues is exceeded.

3. The non-transitory machine-readable medium of claim 1 , wherein control plane network data is dropped before placement in one of a plurality of output queues when a bandwidth requirement associated with the one of the plurality of output queues is exceeded and the one of the plurality of output queues is bigger than an associated tail drop threshold.

4. The non-transitory machine-readable medium of claim 1 , wherein each output queue of the input port is associated with a set of classes of control plane network data.

5. The non-transitory machine-readable medium of claim 1 , wherein each output queue of the input port is associated with a single class of control plane network data.

6. The non-transitory machine-readable medium of claim 1 , wherein the control plane network data comprises a system message for delivery to the control plane processor.

7. The non-transitory machine-readable medium of claim 1 , wherein the operations further comprise:
determining whether the control plane network data can be enqueued on an output queue specific to the input port for the control plane network data; and
when the control plane network data cannot be enqueued on an output queue specific to the input port, applying a policer test to the control plane network data based on a combination of the input port and the class of the control plane network data, and storing the control plane network data in a common queue for the class of control plane network data when a bandwidth requirement associated with a policer applying the policer test is satisfied.

8. The non-transitory machine-readable medium of claim 7 , wherein each input port in the plurality of input ports is associated with a set of policers for different classes of control plane network data.

9. The non-transitory machine-readable medium of claim 7 , wherein the operations further comprise:
applying a control plane policing policy to the control plane network data prior to enqueuing the control plane network data on an output queue,
wherein the control plane network data is dropped when the policer test fails.

10. The non-transitory machine-readable medium of claim 1 , wherein the control plane network data comprises a routing protocol update message, a routing table update message, a request to make a routing decision, a link layer state updates message, a link state update messages, an exception message that cannot be dealt with in hardware, a program message, a message for a routing table miss, a time control message, a message for a packet marked as being of interest for snooping, or a message used to collect traffic diagnostics, address resolution messages (ARP) requests and replies, neighbor solicitation requests and replies, or general communication to the control plane of the network element.

11. The non-transitory machine-readable medium of claim 1 , wherein the operations further comprise:
determining, for a network data on egress from the network element, that the network data is to be forwarded to the control plane;
classifying the network data in a class based on characteristics of the control plane network data; and
storing the network data, for forwarding to the control plane, in an output queue based on the class of the network data.

12. A method comprising:
receiving control plane network data at an input port of a network element, the network element comprising a plurality of input ports, each of the input ports has a plurality of output queues dedicated to it, wherein the control plane network data is data that is processed by the control plane;
classifying the control plane network data in a class based on characteristics of the control plane network data;
storing the control plane network data in one of a plurality of output queues specific to the input port based on the class of the control plane network data; and
forwarding control plane network data from a selected one of the plurality of output queues specific to the input port to a control plane of the network element.

13. The method of claim 12 , wherein each output queue is associated with a bandwidth, a shape, or a combination thereof, and wherein control plane network data is dropped before placement in one of a plurality of output queues when a bandwidth requirement associated with the one of the plurality of output queues is exceeded.

14. The method of claim 12 , wherein each output queue is associated with a bandwidth, a shape, or a combination thereof, and wherein control plane network data is dropped before placement in one of a plurality of output queues when a bandwidth requirement associated with the one of the plurality of output queues is exceeded and the one of the plurality of output queues is bigger than an associated tail drop threshold.

15. The method of claim 12 , wherein each output queue of the input port is associated with a set of classes of control plane network data.

16. The method of claim 12 , wherein each output queue of the input port is associated with a single class of control plane network data.

17. The method of claim 12 , wherein the control plane network data comprises a system message for delivery to the control plane processor.

18. The method of claim 12 , further comprising:
determining whether the control plane network data can be enqueued on an output queue specific to the input port for the control plane network data; and
when the control plane network data cannot be enqueued on an output queue specific to the input port, applying a policer test to the control plane network data based on a combination of the input port and the class of the control plane network data, and storing the control plane network data in a common queue for the class of control plane network data when a bandwidth requirement associated with a policer applying the policer test is satisfied.

19. The method of claim 18 , wherein each input port in the plurality of input ports is associated with a set of policers for different classes of control plane network data.

20. The method of claim 12 , further comprising:
applying a control plane policing policy to the control plane network data prior to enqueuing the control plane network data on an output queue,
wherein the control p

Assignees

• Arista Networks Inc

Inventors

• Kumar Eerpini Satish
• Emmons Thomas Benjamin
• Labonte Francois

Classifications

• H04L49/90

  Buffering arrangements · CPC title

• H04L67/63

  Routing a service request depending on the request content or context · CPC title

• H04L47/6215 Primary

  Individual queue per QOS, rate or priority · CPC title

• H04L69/329

  in the application layer [OSI layer 7] · CPC title

• H04L47/20

  Traffic policing · CPC title