Service automation for IoT devices using P4

A method of managing packet forwarding by end devices that use Zigbee protocol, the method comprising:

• receiving, at a switch, a packet forwarded by a first endpoint in a first one of the end devices and destined for a second endpoint using Zigbee protocol, wherein the switch is implemented at an edge of an Internet-Protocol (IP) network as an intermediary between the end devices so that packets forwarded by each of the end devices flow through the switch;
• parsing, via a P4 parser in the switch, the packet to identify fields of the packet;
• and
• processing, via a P4 analyzer in the switch, a plurality of match-action tables and the fields of the packet to provide data plane handling of the packet;
• wherein processing via the P4 analyzer comprises:
• determining an encryption status of the packet after parsing by the P4 parser;
• and
• routing the packet through a first control flow of first match-action tables of the plurality to decrypt the packet responsive to a determination that the packet is encrypted;
• wherein the method further comprises re-circulating the packet as decrypted back to the P4 parser;
• wherein processing via the P4 analyzer further comprises:
• determining the encryption status of the packet after parsing by the P4 parser upon the packet being re-circulated;
• and
• routing the packet through a second control flow of second match-action tables of the plurality responsive to a determination that the packet is decrypted.

A non-transitory computer readable medium embodying programmed instructions executed by one or more processors, wherein the instructions direct the processors to implement a method of managing packet forwarding by end devices that use Zigbee protocol, the method comprising:

• receiving, at a switch, a packet forwarded by a first endpoint in a first one of the end devices and destined for a second endpoint using Zigbee protocol, wherein the switch is implemented at an edge of an Internet-Protocol (IP) network as an intermediary between the end devices so that packets forwarded by each of the end devices flow through the switch;
• parsing, via a P4 parser in the switch, the packet to identify fields of the packet;
• and
• processing, via a P4 analyzer in the switch, a plurality of match-action tables and the fields of the packet to provide data plane handling of the packet;
• wherein processing via the P4 analyzer comprises:
• determining an encryption status of the packet after parsing by the P4 parser;
• and
• routing the packet through a first control flow of first match-action tables of the plurality to decrypt the packet responsive to a determination that the packet is encrypted;
• wherein the method further comprises re-circulating the packet as decrypted back to the P4 parser;
• wherein processing via the P4 analyzer further comprises:
• determining the encryption status of the packet after parsing by the P4 parser upon the packet being re-circulated;
• and
• routing the packet through a second control flow of second match-action tables of the plurality responsive to a determination that the packet is decrypted.