Method and system for optimizing service device traffic management
AssigneeArista Networks, Inc.
InventorsAnuraag Mittal, Krishna Ram Kuttuva Jeyaram
Life of this patent
Estimating the term…
Abstract
A method and system for optimizing service device traffic management. Specifically, the method and system disclosed herein entail filtering network traffic flows directed to service devices, distributed throughout a network, for inspection. Through the aforementioned filtering, a targeted subset of network traffic flows may be identified and excluded from service device processing. The filtering thus alleviates traffic congestion and improves traffic throughput at the service device(s), thereby optimizing the management and/or processing of network traffic flows redirected to the service device(s).
Claims20
A method for managing a network device fabric, comprising:
- obtaining, from a service device, a first service device policy;
- examining the first service device to identify a first set of qualifiers;
- performing a first lookup on a group assignment table using the first set of qualifiers, to identify a first set of groups;
- deriving, from the first service device policy, a first network device redirect rule comprising the first set of groups;
- deriving, from the first network device redirect rule, a first modified network device redirect rule set;
- and
- making a first attempt at a fabric-wide deployment of the first modified network device redirect rule set,
- wherein, based on a success of the first attempt, enforcement of the first service device policy is offloaded onto the network device fabric.
A non-transitory computer readable medium (CRM) comprising computer readable program code, which when executed by a computer processor, enables the computer processor to:
- obtain, from a service device, a service device policy;
- examine the service device to identify a set of qualifiers;
- perform a lookup on a group assignment table using the set of qualifiers, to identify a set of groups;
- derive, from the service device policy, a network device redirect rule comprising the set of groups;
- derive, from the network device redirect rule, a modified network device redirect rule set;
- and
- make an attempt at a fabric-wide deployment of the modified network device redirect rule set,
- wherein, based on a success of the attempt, enforcement of the service device policy is offloaded onto a network device fabric.
A system, comprising:
- a network device fabric comprising a plurality of interconnected network devices;
- a service device directly-connected to a network device of the network device fabric;
- and
- a control plane service (CPS) operatively connected to the network device fabric, and programmed to:
- obtain, from the service device, a service device policy;
- examine the service device to identify a set of qualifiers;
- perform a lookup on a group assignment table using the set of qualifiers, to identify a set of groups;
- derive, from the service device policy, a network device redirect rule comprising the set of groups;
- derive, from the network device redirect rule, a modified network device redirect rule set;
- and
- make an attempt at a fabric-wide deployment of the modified network device redirect rule set,
- wherein, based on a success of the attempt, enforcement of the service device policy is offloaded onto the network device fabric.
Dependencies are inferred from the claim text.