Dynamically identifying and associating control packets to an application layer
AssigneeJuniper Networks, Inc.
InventorsSaravanadas P. Subramanian, Dhiraj D. Ballal, Kartik D. Shah, Prasad Chigurupati
Life of this patent
Estimating the term…
Abstract
A device may receive a control packet associated with a connection. The control packet may include a network address. The device may identify an application layer identifier that is associated with the network address. The device may identify a service rule associated with the application layer identifier. The service rule may identify a service to be applied to a data packet associated with the connection. The device may provide the control packet based on identifying the service rule. The control packet may be provided to permit the service to be applied to the data packet in accordance with the service rule.
Claims20
A first device, comprising:
- a memory;
- and
- one or more processors to:
- receive a control packet associated with a connection;
- perform a shallow packet inspection of the control packet to inspect a header of the control packet after receiving the control packet,
- the header of the control packet identifying a network address;
- determine the network address based on performing the shallow packet inspection;
- match an application layer identifier to the network address;
- identify a service rule associated with the application layer identifier,
- the service rule identifying a service to be applied to a data packet associated with the application layer identifier;
- identify, based on the service rule, a second device associated with applying the service;
- and
- provide, based on identifying the second device, the control packet to the second device to permit the service to be applied to the data packet in accordance with the service rule.
A non-transitory computer-readable medium storing instructions, the instructions comprising:
- one or more instructions that, when executed by one or more processors, cause the one or more processors to:
- perform a shallow packet inspection of a control packet to inspect a header of the control packet,
- the header of the control packet identifying a network address;
- determine the network address based on performing the shallow packet inspection;
- match an application layer identifier to the network address;
- identify a service rule associated with the application layer identifier,
- the service rule identifying a service to be applied to a data packet associated with the application layer identifier;
- identify, based on the service rule, a device associated with applying the service;
- and
- provide, based on identifying the device, the control packet to the device to permit the service to be applied to the data packet in accordance with the service rule.
A method, comprising:
- receiving, by a first device, a control packet associated with a connection;
- performing, by the first device, a shallow packet inspection of the control packet to inspect a header of the control packet after receiving the control packet,
- the header of the control packet identifying a network address;
- determining, by the first device, the network address based on performing the shallow packet inspection;
- matching, by the first device, an application layer identifier to the network address;
- identifying, by the first device, a service rule associated with the application layer identifier,
- the service rule identifying a service to be applied to a data packet associated with the application layer identifier;
- identifying, by the first device and based on the service rule, a second device associated with applying the service;
- and
- providing, by the first device and based on identifying the second device, the control packet to the second device to permit the service to be applied to the data packet in accordance with the service rule.
Dependencies are inferred from the claim text.