Method of detecting large flows within a switch fabric of an SDN switch

Patent metadata

Field	Value
Publication number	US-9729442-B1
Application number	US-201514634848-A
Country	US
Kind code	B1
Filing date	Mar 1, 2015
Priority date	Mar 1, 2015
Publication date	Aug 8, 2017
Grant date	Aug 8, 2017

Abstract

A method of Software-Defined Networking (SDN) switching. A packet of a flow is received onto a SDN switch via a NFX circuit. The NFX circuit determines that the packet matches a flow entry stored in any flow table in the NFX circuit, counts the number of packets of the flow received, and determines that the number of packets of the flow received is above a threshold value. The NFX circuit then forwards the packet to a NFP circuit in the SDN switch. The NFP circuit determines that the packet matches a flow entry stored in the flow table in the NFX and generates a new flow entry that applies to a relatively narrow subflow of packets that is forwarded to and stored the flow table in the NFX circuit. A subsequent packet of the flow is switched by the SDN switch without forwarding the packet to the NFP.

First claim

What is claimed is:

1. A method of Software-Defined Networking (SDN) switching, wherein a SDN switch comprises a fabric of Network Flow Switch (NFX) circuits and a Network Flow Processor (NFP) circuit, wherein none of the NFX circuits comprises any SDN protocol stack, wherein packets received onto the SDN switch from external sources are received via the fabric of NFX circuits, wherein packets output from the SDN switch to external destinations are output via the fabric of NFX circuits, wherein each of the NFX circuits maintains at least one flow table, wherein the NFP circuit maintains at least one flow table, the method comprising:
(a) receiving a packet of a flow onto the SDN switch via a first NFX circuit;
(b) determining in the first NFX circuit that the packet matches a flow entry stored in at least one flow table in the first NFX;
(c) counting a number of packets of the flow received;
(d) determining that the number of packets of the flow received is above a threshold value;
(e) forwarding one of the packets of the flow from the first NFX circuit to the NFP circuit;
(f) determining in the NFP circuit that the one of the packets matches a flow entry stored in the flow table in the first NFX circuit;
(g) generating a second flow entry in the NFP circuit, wherein the second flow entry applies to a relatively narrow sub flow of packets;
(h) forwarding the second flow entry from the NFP circuit to the first NFX circuit and storing the second flow entry in at least one flow table in the first NFX circuit; and
(i) receiving a subsequent packet of the flow onto the SDN switch via the first NFX circuit and determining that the subsequent packet matches the second flow entry and using the second flow entry to output the subsequent packet from the SDN switch without forwarding the subsequent packet to the NFP circuit.

2. The method of claim 1 , wherein the first flow entry is a SDN flow entry, wherein the SDN flow entry was received onto the SDN switch as part of a SDN protocol message.

3. The method of claim 2 , wherein the second flow entry is not a SDN flow entry, and wherein the second flow entry was not received onto the SDN switch as a part of any SDN protocol message.

4. The method of claim 3 , wherein the SDN switch further comprises a controller processor, the method further comprising:
(j) executing an SDN protocol stack on the controller processor, wherein the SDN protocol message is processed by the SDN protocol stack, and wherein neither the NFP circuit nor any of the NFX circuits of the fabric of NFX circuits executes any SDN protocol stack.

5. The method of claim 1 , wherein the NFP circuit receives multiple packets of the relatively narrow subflow of packets from the first NFX circuit after the receiving of (a) and before the NFP circuit generates the second flow entry in (g).

6. The method of claim 1 , wherein the first NFX circuit analyzes the packet received in (a) thereby generating analysis information, and wherein the first NFX circuit forwards the analysis information to the NFP circuit in (e) along with the one of the packets of the flow.

7. The method of claim 6 , wherein the NFX circuits are all substantially identical to one another, and wherein none of the NFX circuits comprises any instruction-executing processor that fetches instructions, that has an instruction counter, and that analyzes any packet.

8. The method of claim 1 , wherein the SDN switch comprises a plurality of printed circuit boards and a housing, wherein the fabric of NFX circuits and the NFP circuit are disposed on the printed circuit boards and are disposed within the housing.

9. The method of claim 1 , further comprising:
(j) maintaining a flow table on the NFP circuit that contains a copy of all flow entries stored in the first NFX circuit.

10. The method of claim 9 , wherein the first NFX circuit comprises no flow table that stores any SDN flow entry.

11. The method of claim 1 , wherein after the second flow entry is stored in the first NFX circuit in (h) some packets of the flow are then received onto the SDN switch via the fabric of NFX circuits and are output from the SDN switch without ever being forwarded to the NFP circuit whereas other packets of the broad flow are received onto the SDN switch via the fabric of NFX circuits and are forwarded to the NFP circuit before being output from the SDN switch via the fabric of NFX circuits.

12. A method of Software-Defined Networking (SDN) switching, wherein the SDN switch comprises a fabric of Network Flow Switch (NFX) circuits and a Network Flow Processor (NFP) circuit, wherein none of the NFX circuits comprises any SDN protocol stack, wherein packets received onto the SDN switch from external sources are received via the fabric of NFX circuits, wherein packets output from the SDN switch to external destinations are output via the fabric of NFX circuits, wherein each of the NFX circuits maintains at least one flow table, wherein the NFP circuit maintains at least one flow table, the method comprising:
(a) receiving a packet of a flow onto the SDN switch via a first NFX circuit;
(b) determining in the first NFX circuit that the packet matches a first flow entry stored in a flow table in the first NFX circuit and that a number of packets received of the flow is greater than a threshold value, wherein the first flow entry applies to a relatively broad flow of packets;
(c) outputting the packet from the SDN switch in accordance with the first flow entry;
(d) generating a second flow entry in the NFP circuit, wherein the second flow entry applies to a relatively narrow subflow of packets, wherein the packet received in (a) is one of the packets of the relatively narrow subflow of packets, wherein all packets of the relatively narrow subflow of packets are also packets of the relatively broad flow of packets, and wherein some packets of the relatively broad flow of packets are not packets of the relatively subflow of packets;
(e) forwarding the second flow entry from the first NFP circuit to the NFX circuit and storing the second flow entry in at least one flow table in the first NFX circuit;
(f) receiving a first subsequent packet of the relatively broad flow of packets onto the SDN switch via the first NFX circuit and determining that the first subsequent packet matches the second flow entry and using the second flow entry to output the first subsequent packet from the SDN switch without consulting any flow table in the NFP circuit; and
(g) receiving a second subsequent packet of the relatively broad flow of packets onto the SDN switch via the first NFX circuit and determining that the second subsequent packet does not match the second flow entry and forwarding the second subsequent packet to the NFP circuit before outputting the second subsequent packet from the SDN switch.

13. The method of claim 12 , wherein the first NFX circuit that received the packet in (a) analyzes the packet received in (a) thereby generating analysis information, and wherein the first NFX circuit forwards the analysis information to the NFP circuit before the generating of the second flow entry in (d).

14. The method of claim 13 , wherein the NFX circuits are all substantially identical to one another, and wherein none of the NFX circuits comprises any instruction-executing processor that fetches instructions, that has an instruction counter, and that analyzes any packet.

15. The method of claim 12 , further comprising:
(h) maintaining on the NFP circuit a copy of all flow entries that are stored in any flow table of any of the NFX circuits.

16. The method of claim 12

Assignees

• Netronome Systems Inc

Inventors

• Stark Gavin J
• Wray Stuart C

Classifications

• H04L45/54

  Organization of routing tables · CPC title

• H04L49/25

  Routing or path finding in a switch fabric · CPC title

• H04L49/35

  Switches specially adapted for specific applications · CPC title

• H04L45/745 Primary

  Address table lookup; Address filtering · CPC title