Tunnel-in-tunnel source address correction

Patent metadata

Field	Value
Publication number	US-2016359738-A1
Application number	US-201514730654-A
Country	US
Kind code	A1
Filing date	Jun 4, 2015
Priority date	Jun 4, 2015
Publication date	Dec 8, 2016
Grant date	—

Abstract

In one embodiment, a device in a network identifies a translated source network address for a tunnel source of a tunnel-in-tunnel packet. The device includes the translated source network address within a header of the packet. The header of the packet identifies an inner tunnel that is encapsulated within an outer tunnel during transmission of the packet within the network. The device sends the packet with the translated source network address within the header of the packet.

First claim

What is claimed is:

1 . A method comprising:
identifying, by a device in a network, a translated source network address for a tunnel source of a tunnel-in-tunnel packet; including, by the device, the translated source network address within a header of the packet, wherein the header of the packet identifies an inner tunnel that is encapsulated within an outer tunnel during transmission of the packet within the network; and sending, by the device, the packet with the translated source network address within the header of the packet.

2 . The method as in claim 1 , wherein identifying the translated source address comprises:
receiving, at the device, an indication of the translated source address from a destination of the inner tunnel.

3 . The method as in claim 2 , wherein the indication of the translated source address is received via a Next Hop Resolution Protocol (NHRP) message.

4 . The method as in claim 2 , wherein including the translated source address in the header of the packet that identifies the inner tunnel comprises:
appending, by the device, the header with the translated source address to the packet, prior to appending an outer header to the packet that identifies the outer tunnel.

5 . The method as in claim 1 , wherein a destination of the outer tunnel is a virtual service platform (VSP).

6 . The method as in claim 1 , wherein identifying the translated source address comprises:
identifying, by the device, the translated source address in an outer header of the packet, wherein the outer header of the packet identifies the outer tunnel.

7 . The method as in claim 6 , wherein the device is a destination of the outer tunnel, the method further comprising:
receiving, at the device, the tunnel-in-tunnel packet; and determining, by the device, a difference between the translated source address in the outer header of the packet and a source address included in the header that identifies the inner tunnel.

8 . The method as in claim 7 , further comprising:
decapsulating, by the device, the packet from the outer tunnel; changing, by the device, the source address included in the header that identifies the inner tunnel to be the translated source address, based on the determined difference between the translated source address in the outer header and the source address included in the header that identifies the inner tunnel; and sending, by the device, the decapsulated packet with the translated source address in the header that identifies the inner tunnel to a destination of the inner tunnel.

9 . An apparatus, comprising:
one or more network interfaces to communicate with a computer network; a processor coupled to the one or more network interfaces and configured to execute a process; and a memory configured to store the process executable by the processor, the process when executed operable to:
identify a translated source network address for a tunnel source of a tunnel-in-tunnel packet;
include the translated source network address within a header of the packet, wherein the header of the packet identifies an inner tunnel that is encapsulated within an outer tunnel during transmission of the packet within the network; and
send the packet with the translated source network address within the header of the packet.

10 . The apparatus as in claim 9 , wherein the apparatus identifies the translated source address by receiving an indication of the translated source address from a destination of the inner tunnel.

11 . The apparatus as in claim 10 , wherein the indication of the translated source address is received via a Next Hop Resolution Protocol (NHRP) message.

12 . The apparatus as in claim 10 , wherein the apparatus includes the translated source address in the header of the packet that identifies the inner tunnel by:
appending the header with the translated source address to the packet, prior to appending an outer header to the packet that identifies the outer tunnel.

13 . The apparatus as in claim 9 , wherein a destination of the outer tunnel is a virtual service platform (VSP).

14 . The apparatus as in claim 9 , wherein the apparatus identifies the translated source address by identifying the translated source address in an outer header of the packet, and wherein the outer header of the packet identifies the outer tunnel.

15 . The apparatus as in claim 14 , wherein the apparatus is a destination of the outer tunnel, and wherein the process when executed is further operable to:
receive the tunnel-in-tunnel packet; and determine a difference between the translated source address in the outer header of the packet and a source address included in the header that identifies the inner tunnel.

16 . The apparatus as in claim 15 , wherein the process when executed is further operable to:
decapsulate the packet from the outer tunnel; change the source address included in the header that identifies the inner tunnel to be the translated source address, based on the determined difference between the translated source address in the outer header and the source address included in the header that identifies the inner tunnel; and send the decapsulated packet with the translated source address in the header that identifies the inner tunnel to a destination of the inner tunnel.

17 . A tangible, non-transitory, computer-readable media having software encoded thereon, the software when executed by a processor on a device in a computer network operable to:
identify a translated source network address for a tunnel source of a tunnel-in-tunnel packet; include the translated source network address within a header of the packet, wherein the header of the packet identifies an inner tunnel that is encapsulated within an outer tunnel during transmission of the packet within the network; and send the packet with the translated source network address within the header of the packet.

18 . The computer-readable media as in claim 17 , wherein the device identifies the translated source address by receiving an indication of the translated source address from a destination of the inner tunnel.

19 . The computer-readable media as in claim 17 , wherein the device identifies the translated source address by identifying the translated source address in an outer header of the packet, and wherein the outer header of the packet identifies the outer tunnel.

20 . The computer-readable media as in claim 19 , wherein the software when executed by the processor of the device is further operable to:
receive the tunnel-in-tunnel packet; determine a difference between the translated source address in the outer header of the packet and a source address included in the header that identifies the inner tunnel; decapsulate the packet from the outer tunnel; change the source address included in the header that identifies the inner tunnel to be the translated source address, based on the determined difference between the translated source address in the outer header and the source address included in the header that identifies the inner tunnel; and send the decapsulated packet with the translated source address in the header that identifies the inner tunnel to a destination of the inner tunnel.

Assignees

• Cisco Tech Inc

Inventors

• Sullenberger Michael L
• Kumar Manish
• Ben-Nun Eitan
• Oswal Anand

Classifications

• H04L69/22

  Parsing or analysis of headers · CPC title

• H04L12/4633 Primary

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L45/74 Primary

  Address processing for routing · CPC title

• H04L45/50

  using label swapping, e.g. multi-protocol label switch [MPLS] · CPC title

• H04L61/2592

  using tunnelling or encapsulation · CPC title