Systems and methods for asymmetrical peer forwarding in an SD-WAN environment

Patent metadata

Field	Value
Publication number	US-11824770-B2
Application number	US-202217689029-A
Country	US
Kind code	B2
Filing date	Mar 8, 2022
Priority date	Dec 10, 2021
Publication date	Nov 21, 2023
Grant date	Nov 21, 2023

Abstract

In one embodiment, a method includes receiving, by a first node of a node cluster in a software-defined wide area network (SD-WAN), traffic from a wide area network (WAN), assigning, by the first node of the node cluster, flow ownership of the traffic to the first node, and communicating, by the first node of the node cluster, the traffic to a local area network (LAN). The method also includes receiving, by the first node of the node cluster, return traffic from a second node of the node cluster and detecting, by the first node of the node cluster, a diversion of the return traffic. The method further includes relinquishing, by the first node of the node cluster, the flow ownership and assigning, by the first node of the node cluster, the flow ownership to the second node of the node cluster.

First claim

What is claimed is:

1. A first node of a node cluster in a software-defined wide area network (SD-WAN) environment comprising one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors and including instructions that, when executed by the one or more processors, cause the first node of the node cluster to perform operations comprising:
receiving traffic from a wide area network (WAN);
assigning flow ownership of the traffic to the first node of the node cluster;
communicating the traffic to a local area network (LAN);
receiving return traffic from a second node of the node cluster;
detecting a diversion of the return traffic;
relinquishing the flow ownership; and
assigning the flow ownership to the second node of the node cluster.

2. The first node of claim 1 , wherein the traffic and the return traffic are asymmetrically routed.

3. The first node of claim 1 , wherein:
receiving the traffic from the WAN comprises receiving the traffic from a core network; and
the traffic and the return traffic are symmetrically routed through the core network.

4. The first node of claim 1 , wherein assigning the flow ownership to the first node of the node cluster comprises creating a flow owner entry in a flow entry table to identify the first node as a flow owner.

5. The first node of claim 1 , wherein assigning the flow ownership to the second node of the node cluster comprises updating a flow owner entry in a flow entry table to identify the second node as a flow owner.

6. The first node of claim 1 , wherein detecting the diversion of the return traffic is in response to receiving the return traffic from the second node of the node cluster.

7. The first node of claim 1 , wherein:
receiving the traffic from the WAN comprises receiving the traffic from a border router of a core network; and
an egress node entry in a flow entry table for the border router is updated in response to the first node assigning the flow ownership to the second node of the node cluster.

8. A method, comprising:
receiving, by a first node of a node cluster in a software-defined wide area network (SD-WAN), traffic from a wide area network (WAN);
assigning, by the first node of the node cluster, flow ownership of the traffic to the first node of the node cluster;
communicating, by the first node of the node cluster, the traffic to a local area network (LAN);
receiving, by the first node of the node cluster, return traffic from a second node of the node cluster;
detecting, by the first node of the node cluster, a diversion of the return traffic;
relinquishing, by the first node of the node cluster, the flow ownership; and
assigning, by the first node of the node cluster, the flow ownership to the second node of the node cluster.

9. The method of claim 8 , wherein the traffic and the return traffic are asymmetrically routed.

10. The method of claim 8 , wherein:
receiving the traffic from the WAN comprises receiving the traffic from a core network; and
the traffic and the return traffic are symmetrically routed through the core network.

11. The method of claim 8 , wherein assigning the flow ownership to the first node of the node cluster comprises creating, by the first node of the node cluster, a flow owner entry in a flow entry table to identify the first node as a flow owner.

12. The method of claim 8 , wherein assigning the flow ownership to the second node of the node cluster comprises updating, by the first node of the node cluster, a flow owner entry in a flow entry table to identify the second node as a flow owner.

13. The method of claim 8 , wherein detecting the diversion of the return traffic is in response to receiving the return traffic from the second node of the node cluster.

14. The method of claim 8 , wherein:
receiving the traffic from the WAN comprises receiving the traffic from a border router of a core network; and
an egress node entry in a flow entry table for the border router is updated in response to the first node assigning the flow ownership to the second node of the node cluster.

15. One or more computer-readable non-transitory storage media embodying instructions that, when executed by a processor, cause the processor to perform operations comprising:
receiving, by a first node of a node cluster in a software-defined wide area network (SD-WAN), traffic from a wide area network (WAN);
assigning, by the first node of the node cluster, flow ownership of the traffic to the first node of the node cluster;
communicating, by the first node of the node cluster, the traffic to a local area network (LAN);
receiving, by the first node of the node cluster, return traffic from a second node of the node cluster;
detecting, by the first node of the node cluster, a diversion of the return traffic;
relinquishing, by the first node of the node cluster, the flow ownership; and
assigning, by the first node of the node cluster, the flow ownership to the second node of the node cluster.

16. The one or more computer-readable non-transitory storage media of claim 15 , wherein the traffic and the return traffic are asymmetrically routed.

17. The one or more computer-readable non-transitory storage media of claim 15 , wherein:
receiving the traffic from the WAN comprises receiving the traffic from a core network; and
the traffic and the return traffic are symmetrically routed through the core network.

18. The one or more computer-readable non-transitory storage media of claim 15 , wherein assigning the flow ownership to the first node of the node cluster comprises creating, by the first node of the node cluster, a flow owner entry in a flow entry table to identify the first node as a flow owner.

19. The one or more computer-readable non-transitory storage media of claim 15 , wherein assigning the flow ownership to the second node of the node cluster comprises updating, by the first node of the node cluster, a flow owner entry in a flow entry table to identify the second node as a flow owner.

20. The one or more computer-readable non-transitory storage media of claim 15 , wherein detecting the diversion of the return traffic is in response to receiving the return traffic from the second node of the node cluster.

Assignees

• Cisco Tech Inc

Inventors

• Ponnuru Laxmikantha Reddy
• Manickam Arul Murugan
• Tracy Michael David
• Kumar kannan
• Kardame Hamzah

Classifications

• H04L45/76

  Routing in software-defined topologies, e.g. routing between virtual machines · CPC title

• H04L45/38 Primary

  Flow based routing · CPC title

• H04L45/028

  Dynamic adaptation of the update intervals, e.g. event-triggered updates · CPC title

• H04L45/44 Primary

  Distributed routing · CPC title

• H04L45/64

  using an overlay routing layer · CPC title