Dynamic path steering utilizing automatic generation of user threshold profiles

Patent metadata

Field	Value
Publication number	US-11528329-B2
Application number	US-202016909410-A
Country	US
Kind code	B2
Filing date	Jun 23, 2020
Priority date	May 8, 2020
Publication date	Dec 13, 2022
Grant date	Dec 13, 2022

Abstract

Dynamic path steering utilizing automatic generation of user threshold profiles is described. An example of a storage medium includes instructions for obtaining a threshold policy for a first application, the threshold policy including a set of threshold values for operational parameters; generating a migration score for a first user, the migration score based at least in part on a user score for the first user; generating a set of secondary threshold values for the first user based at least in part on the migration score and the set of threshold values; enabling operation of the first application for the first user using a first network uplink; monitoring network parameter values in operation of the first application; and upon detecting an operational parameter value exceeding a secondary threshold value, migrating operation of the first application for the first user from the first network uplink to a second network uplink.

First claim

What is claimed is:

1. One or more non-transitory computer-readable storage mediums having stored thereon executable computer program instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
obtaining a threshold policy for a first application, the threshold policy including a set of primary threshold values for operational parameters for the first application;
generating a migration score for a first user, the migration score being based at least in part on a user score for the first user, wherein the user score is calculated based on at least two of location, bandwidth consumption, quality of service (QoS) of data traffic, user reputation, user security score, and user role;
generating a set of secondary threshold values for the first user, wherein generating each of the set of secondary threshold values comprises:
applying the migration score of each user as a weight to a first difference between a respective primary threshold and a respective baseline value, and
generating each of the set of secondary threshold values as a second difference between the respective primary threshold and the weighted first difference;

enabling operation of the first application for the first user using a first network uplink of a plurality of network uplinks;
monitoring network parameter values in operation of the first application; and
upon detecting an operational parameter value for the first application exceeding a first secondary threshold value of the set of secondary threshold values, migrating the operation of the first application for the first user from the first network uplink to a second network uplink.

2. The one or more storage mediums of claim 1 , wherein the instructions further include instructions for:
generating a migration score for a second user, the migration score for the second user being different than the migration score for the first user; and
generating a second set of one or more secondary threshold values for the second user based at least in part on the migration score for the second user and the set of one or more threshold values for the first application, the second set of secondary threshold values for the second user being different than the set of secondary threshold values for the first user.

3. The one or more storage mediums of claim 1 , wherein the instructions further include instructions for:
generating the user score for the first user based on one or more factors relating to the first user.

4. The one or more storage mediums of claim 3 , wherein the one or more factors relating to the first user include one or more of:
location of operation;
critical and non-critical bandwidth consumption;
QoS of traffic;
user reputation based at least in part on type of content accessed;
a threat score based at least in part on events related to the first user; and
priority of role of the first user.

5. The one or more mediums of claim 1 , wherein the first network uplink is a primary network uplink for the first application and the second network uplink is a fallback network uplink for the first application.

6. The one or more mediums of claim 1 , wherein the first network uplink utilizes a first communication technology and the second network uplink utilizes a second, different communication technology.

7. The one or more mediums of claim 1 , wherein the first network uplink and the second network uplink provide network communication for a SD-WAN Software Defined Wide Area Network).

8. The one or more storage mediums of claim 1 , wherein the user score is calculated based on the user reputation and at least one of location, bandwidth consumption, QoS of data traffic, user reputation, user security score, and user role.

9. A network device comprising:
a processor;
a memory for storage of data; and
ports for connection of a plurality of network uplinks, including at least a first network uplink utilizing a first communication technology and a second network uplink utilizing a second, different communication technology;
wherein the network device is to provide dynamic path steering for users of one or more applications, including the network device to:
obtain a threshold policy for a first application, the threshold policy including a set of primary threshold values for operational parameters for the first application;
generate a migration score for each of a plurality of users, the migration score for each user being based at least in part on a user score for the user, wherein the user score is calculated based on at least two of location, bandwidth consumption, quality of service (QoS) of data traffic, user reputation, user security score, and user role;
generate a set of secondary threshold values for each of the plurality of users, wherein generating each of the set of secondary threshold values comprises:
applying the migration score of each user as a weight to a first difference between a respective primary threshold and a respective baseline value, and
generating each of the set of secondary threshold values as a second difference between the respective primary threshold and the weighted first difference;

enable operation of the first application for the plurality of users using the first network uplink;
monitor network parameter values in operation of the first application; and
upon detecting an operational parameter value for the first application exceeding a first secondary threshold value of the set of secondary threshold values for a first user of the plurality of users, migrate the operation of the first application for the first user from the first network uplink to the second network uplink.

10. The network device of claim 9 , wherein a migration score generated for the first user is different than a migration score generated for a second user.

11. The network device of claim 9 , wherein the network device is further to:
upon detecting an operational parameter value for the first application exceeding a first secondary threshold value of the set of secondary threshold values for a second user of the plurality of users, migrating the operation of the first application for the second user from the first network uplink to the second network uplink, wherein the first user and second user are migrated to the second network uplink at different operational parameter values for the first application.

12. The network device of claim 9 , wherein the network device is further to:
generate the user score for each user of the plurality of users based on one or more factors relating to each user.

13. The network device of claim 9 , wherein the network device is a network gateway.

14. The network device of claim 9 , wherein the plurality of network uplinks include one or more of Internet, MPLS (Multi-Protocol Label Switching), 4G/LTE (Long-Term Evolution), or 5G communication technology.

15. The network device of claim 9 , wherein the network device provides support for an SD-WAN Software Defined Wide Area Network).

16. A method comprising:
obtaining a threshold policy for a first application in an SD-WAN Software Defined Wide Area Network), the threshold policy including a set of primary threshold values for operational parameters for the first application;
generating a migration score for each of a plurality of users, the migration score for each user being based at least in part on a user score for the user, wherein the user score is calculated based on at least two of location, bandwidth consumption, quality of service (QoS) of data traffic, user reputation, user securi

Assignees

• Hewlett Packard Entpr Dev Lp

Inventors

• Gupta Gopal
• Mishra Abhinesh

Classifications

• H04L67/01

  Protocols · CPC title

• H04L43/16

  Threshold monitoring · CPC title

• H04L45/124

  using a combination of metrics · CPC title

• H04L43/0882 Primary

  Utilisation of link capacity · CPC title

• H04W40/34

  Modification of an existing route · CPC title