Service node originated service chains in a network environment

Patent metadata

Field	Value
Publication number	US-9608896-B2
Application number	US-201615092117-A
Country	US
Kind code	B2
Filing date	Apr 6, 2016
Priority date	Mar 13, 2014
Publication date	Mar 28, 2017
Grant date	Mar 28, 2017

Abstract

An example method for service node originated service chains in a network environment is provided and includes receiving a packet at a service node in a network environment that includes a plurality of service nodes and a central classifier, analyzing the packet for a service chain modification or a service chain initiation, classifying the packet at the service node to a new service chain based on the analysis, initiating the new service chain at the service node if the analysis indicates service chain initiation, and modifying an existing service chain for the packet to the new service chain if the analysis indicates service chain modification. In specific embodiments, the analysis includes applying classification logic specific to the service node. Some embodiments, service node attributes and order of service nodes in substantially all service chains configured in the network may be received from a central controller.

First claim

What is claimed is:

1. A method, comprising:
receiving, at a service node in a network environment, service path identifiers from a central controller in the network;
receiving, at the service node, policies and rules specific to services provided by the service node;
configuring, by the service node according to the service path identifiers, the policies and the rules, a first service chain comprising a first sequence of service nodes providing a first of network services and a second service chain comprising a second sequence of service nodes providing a second set of network services;
analyzing a data packet according to the policies and rules, wherein the data packet is assigned to the first service chain by the central controller;
selecting, by the service node the second service chain based on the analysis; and
associating the data packet with the selected second service chain.

2. The method of claim 1 , wherein analyzing the data packet comprises determining if the data packet includes a service header.

3. The method of claim 2 , wherein the associating comprises modifying the service header to specify the selected service chain.

4. The method of claim 3 , wherein modifying the service header comprises updating a service path field and service index field in the service header to indicate the selected service chain.

5. The method of claim 2 , wherein if the data packet does not include the service header, the associating comprises adding the service header to the data packet.

6. The method of claim 1 , wherein analyzing the data packet comprises applying the policies and rules to the data packet.

7. The method of claim 1 , wherein analyzing the data packet comprises identifying a state of a flow to which the data packet belongs, wherein subsequent data packets of the flow are associated with the selected service chain.

8. The method of claim 1 , wherein the selected service chain is chosen irrespective of a flow to which the data packet belongs, wherein the first service chain is selected for certain data packets of the flow and the second service chain is selected for certain other data packets of the flow.

9. The method of claim 1 , wherein the analysis is specific to the service node, wherein two different service nodes in the network correspondingly provide different network services to the data packet.

10. The method of claim 1 , wherein the network comprises a distributed virtual switch (DVS) including a plurality of virtual Ethernet modules (VEMs) in communication with the central controller and a plurality of service nodes.

11. Non-transitory tangible media that includes instructions for execution, which when executed by a processor of a service node in a network environment, is operable to perform operations comprising:
receiving, at the service node, service path identifiers from a central controller in the network;
receiving, at the service node, policies and rules specific to services provided by the service node;
configuring, by the service node according to the service path identifiers, the policies and the rules, a first service chain comprising a first sequence of service nodes providing a first of network services and a second service chain comprising a second sequence of service nodes providing a second set of network services;
analyzing a data packet according to the policies and rules, wherein the data packet is assigned to the first service chain by the central controller;
selecting by the service node the second service chain based on the analysis; and
associating the data packet with the selected second service chain.

12. The media of claim 11 , wherein analyzing the data packet comprises determining if the data packet includes a service header.

13. The media of claim 12 , wherein if the data packet does not include the service header, the associating comprises adding the service header to the data packet.

14. The media of claim 11 , wherein the selected service chain is chosen irrespective of a flow to which the data packet belongs, wherein the first service chain is selected for certain data packets of the flow and the second service chain is selected for certain other data packets of the flow.

15. The media of claim 11 , wherein the analysis is specific to the service node, wherein two different service nodes in the network correspondingly provide different network services to the data packet.

16. An apparatus in a network environment, comprising:
a memory element for storing data; and
a processor, wherein the processor executes instructions associated with the data, wherein the processor and the memory element cooperate, such that the apparatus is configured for:
receiving, at the apparatus, service path identifiers from a central controller in the network;
receiving, at the service node, policies and rules specific to services provided by the service node;
configuring, by the service node according to the service path identifiers, the policies and the rules, a first service chain comprising a first sequence of service nodes providing a first of network services and a second service chain comprising a second sequence of service nodes providing a second set of network services;
analyzing a data packet according to the policies and rules, wherein the data packet is assigned to the first service chain by the central controller;
selecting, by the service node the second service chain based on the analysis; and
associating the data packet with the selected second service chain.

17. The apparatus of claim 16 , wherein analyzing the data packet comprises determining if the data packet includes a service header.

18. The apparatus of claim 17 , wherein if the data packet does not include the service header, the associating comprises adding the service header to the data packet.

19. The apparatus of claim 16 , wherein the selected service chain is chosen irrespective of a flow to which the data packet belongs, wherein the first service chain is selected for certain data packets of the flow and the second service chain is selected for certain other data packets of the flow.

20. The apparatus of claim 16 , wherein the analysis is specific to the service node, wherein two different service nodes in the network correspond provide different network services to the data packet.

Assignees

• Cisco Tech Inc

Inventors

• Kumar Surendra M
• Bagepalli Nagaraj A
• Patra Abhijit
• Quinn Paul
• Guichard James N
• Bosch Hendrikus G P

Classifications

• H04L41/0813

  characterised by the conditions triggering a change of settings · CPC title

• H04L45/02 Primary

  Topology update or discovery · CPC title

• H04L45/38

  Flow based routing · CPC title

• H04L45/308 Primary

  Route determination based on user's profile, e.g. premium users · CPC title

• H04L41/08

  Configuration management of networks or network elements (address allocation H04L61/50) · CPC title