Extending nsh services into the vpn l2/l3 domain
AssigneeCisco Technology, Inc.
InventorsJames N. Guichard, Carlos M. Pignataro, Yixing Ruan, Javed Asghar
Life of this patent
Estimating the term…
Abstract
Embodiments of the present disclosure are directed to augmenting a Network Service Header (NSH) metadata of a data packet with a virtual routing and forwarding identifier (VRF-ID) and forgoing augmenting a virtual private network (VPN) label into a multiprotocol label switched (MPLS) metadata of the data packet. A provider edge router can use the VRF-ID to identify a next hop for the data packet as a service to be applied prior to forwarding the data packet to a VPN site.
Claims22
A method for applying network services to data traffic forwarded between virtual private network (VPN) sites, the method comprising:
- on a forwarding edge router in communication with an origin site associated with a VPN, receiving a data packet addressed to a target site associated with the VPN;
- determining a set of services to be applied to the data packet according to a service chain, wherein the determining is a function of at least one of the VPN, the origin site and the target site;
- augmenting a network service header (NSH) metadata of the data packet with an identifier of a virtual network context;
- encapsulating the data packet with Network Service Header (NSH) encapsulation, wherein a header for the encapsulated data packet indicates at least the service chain;
- forwarding the encapsulated data packet in accordance with the service chain.
A router comprising a hardware processor, the router configured to:
- receive a data packet addressed to a target site associated with a VPN;
- determine a set of services to be applied to the data packet according to a service chain, wherein the determining is as a function of at least one of the VPN, an origin site and the target site;
- augment a Network Service Header (NSH) metadata of the data packet with an identifier of a virtual network context associated with the VPN;
- encapsulate the data packet with (NSH) encapsulation, wherein a header for the encapsulated data packet indicates at least the service chain;
- forward the encapsulated data packet in accordance with the service chain.
A method for applying network services to data traffic forwarded between virtual private network (VPN) sites, the method comprising:
- on a forwarding edge router in communication with an origin site associated with a VPN, receiving an data packet addressed to a target site associated with the VPN;
- determining a service to be applied to the data packet according to a service chain based at least in part on an identifier of a virtual network context in a Network Service Header (NSH) metadata of the data packet, wherein the determining is a function of at least one of the VPN, the origin site and the target site;
- and
- routing the data packet to a service function forwarder associated at the determined service.
A router comprising a hardware processor, the router configured to:
- receive an data packet addressed to a target site associated with the VPN;
- determine a service to be applied to the data packet according to a service chain based at least in part on an identifier of a virtual network context in a Network Service Header (NSH) metadata of the data packet, wherein the determining is a function of at least one of the VPN, the origin site and the target site;
- and
- route the data packet to a service function forwarder associated at the determined service.
Dependencies are inferred from the claim text.