Opportunistic mesh for software-defined wide area network (SD-WAN)

Patent metadata

Field	Value
Publication number	US-12363035-B2
Application number	US-202117449311-A
Country	US
Kind code	B2
Filing date	Sep 29, 2021
Priority date	Sep 29, 2021
Publication date	Jul 15, 2025
Grant date	Jul 15, 2025

Abstract

Techniques are described for forming on-demand mesh connections between spoke routers of a Software-Defined Wide Area Network (SD-WAN) arranged in a hub-and-spoke topology. A first spoke router modifies the first packet to include metadata specifying first reachability information and first Internet Protocol (IP) address information for the first spoke router. The first spoke router forwards the first packet to a hub router for forwarding to a second spoke router. The first spoke router receives a second packet from the hub router that includes metadata specifying second reachability information and second IP address information for the second spoke router. In response to determining that the first reachability information is compatible with the second reachability information, the first spoke router initiates a peering connection with the second spoke router along a path which bypasses the hub router for forwarding subsequent packets of the forward packet flow.

First claim

What is claimed is:

1. A method comprising:
receiving, by a first spoke router of a plurality of spoke routers, a first packet of a plurality of packets of a forward packet flow originating from a first client device and destined for a second client device;
modifying, by the first spoke router, the first packet of the forward packet flow to include metadata specifying first reachability information for the first spoke router and first Internet Protocol (IP) address information for the first spoke router; and
forwarding, by the first spoke router, the first packet to a hub router for forwarding to a second spoke router of the plurality of spoke routers for forwarding, by the second spoke router, to the second client device,
wherein the plurality of spoke routers and the hub router are configured to operate according to a hub-and-spoke topology to form a Software-Defined Wide Area Network (SD-WAN) that provides interconnectivity to a plurality of customer networks connected to the plurality of spoke routers, and
wherein the first client device belongs to a first customer network of the plurality of customer networks and the second client device belongs to a second customer network of the plurality of customer networks.

2. The method of claim 1 , further comprising:
receiving, by the first spoke router and from the hub router, a second packet of a plurality of packets of a reverse packet flow originating from the second client device and destined for the first client device, wherein the second packet includes metadata specifying second reachability information for the second spoke router and second IP address information for the second spoke router;
determining, by the first spoke router, that the first reachability information is compatible with the second reachability information;
initiating, by the first spoke router, based on the determination that the first reachability information is compatible with the second reachability information, and using the first IP address information and the second IP address information, a peering connection with the second spoke router along a path which bypasses the hub router; and
forwarding, by the first spoke router, to the second spoke router, and along the path which bypasses the hub router, subsequent packets of the forward packet flow.

3. The method of claim 2 ,
wherein the path which bypasses the hub router comprises a first path which bypasses the hub router,
wherein the method further comprises:
determining one or more first path quality metrics for the first path which bypasses the hub router;
determining one or more second path quality metrics for a second path from the first spoke router through the hub router to the second spoke router; and
comparing, the one or more first path quality metrics to the one or more second path quality metrics, and

wherein forwarding the subsequent packets of the forward packet flow comprises forwarding, along the first path which bypasses the hub router, the subsequent packets of the forward packet flow based on the comparison of the one or more first path quality metrics to the one or more second path quality metrics.

4. The method of claim 3 ,
wherein determining the one or more first path quality metrics for the first path comprises determining, via a first Bidirectional Forwarding Detection (BFD) session between the first spoke router and the second spoke router, the one or more first path quality metrics, and
wherein determining the one or more second path quality metrics for the second path comprises determining, via a second BFD session between the first spoke router and the hub router, the one or more second path quality metrics.

5. The method of claim 2 , wherein the metadata of the second packet further specifies that a path over which the second spoke router forwards the plurality of packets of the reverse packet flow comprises a bidirectional path.

6. The method of claim 2 ,
wherein the first reachability information comprises a first tag with which at least a first interface of the first spoke router is configured, and
wherein the second reachability information comprises a second tag with which at least a second interface of the second spoke router is configured, and
wherein determining that the first reachability information is compatible with the second reachability information comprises determining that the first tag and the second tag specify a same label.

7. The method of claim 2 ,
wherein the first IP address information comprises a first IP address and a first port of the first spoke router, and
wherein the second IP address information comprises a second IP address and a second port of the second spoke router.

8. The method of claim 1 , further comprising:
in response to the second spoke router initiating, based on the first reachability information and using the first IP address information, a peering connection with the first spoke router along a path which bypasses the hub router, forwarding, by the first spoke router, to the second spoke router, and along the path which bypasses the hub router, subsequent packets of the forward packet flow.

9. The method of claim 8 , further comprising:
receiving, by the first spoke router and from the hub router, a second packet of a plurality of packets of a reverse packet flow originating from the second client device and destined for the first client device; and
after forwarding the first packet specifying the first reachability information and the first IP address information, receiving, by the first spoke router, from the second router, and via the path which bypasses the hub router, a third packet of the plurality of packets of the reverse packet flow.

10. The method of claim 9 , wherein a path over which the first spoke router receives the plurality of packets of the reverse packet flow from the second spoke router comprises a unidirectional path.

11. The method of claim 1 , wherein modifying the first packet to include the metadata specifying the first reachability information for the first spoke router and the first IP address information for the first spoke router comprises:
modifying the first packet to include metadata specifying a first tag with which at least a first interface of the first spoke router is configured and the first IP address information for the first spoke router.

12. A first spoke router of a plurality of spoke routers, the first spoke router comprising processing circuitry configured to:
receive a first packet of a plurality of packets of a forward packet flow originating from a first client device and destined for a second client device;
modify the first packet of the forward packet flow to include metadata specifying first reachability information for the first spoke router and first Internet Protocol (IP) address information for the first spoke router; and
forward the first packet to a hub router for forwarding to a second spoke router of the plurality of spoke routers for forwarding, by the second spoke router, to the second client device,
wherein the plurality of spoke routers and the hub router are configured to operate according to a hub-and-spoke topology to form a Software-Defined Wide Area Network (SD-WAN) that provides interconnectivity to a plurality of customer networks connected to the plurality of spoke routers, and
wherein the first client device belongs to a first customer network of the plurality of customer networks and the second client device belongs to a second customer network of the plurality of customer networks.

13. The first spoke router of claim 12 , wherein the processing circuitry is further configured to:
receive,

Assignees

• Juniper Networks Inc

Inventors

• Scholz Hendrik
• Menon Abilash

Classifications

• H04L61/2567

  for reachability, e.g. inquiring the address of a correspondent behind a NAT server · CPC title

• H04L45/123

  Evaluation of link metrics (techniques for monitoring network metrics H04L43/08) · CPC title

• H04L41/20

  Network management software packages · CPC title

• H04L41/12

  Discovery or management of network topologies · CPC title

• H04L45/22

  Alternate routing · CPC title