Back to results
US 2019/0104040 A1Published application
Service chaining segmentation analytics
AssigneeCisco Technology, Inc.
InventorSamar Sharma
Life of this patent
Estimating the term…
Abstract
Presented herein are service chaining techniques for selective traffic redirection based on Access Control List (ACL) configurations on switches. Network traffic forwarded along one or more service chains may be monitored on the basis of individual segments of the service chains. In one example, the network traffic forwarded along individual segments may be counted on a per-segment basis.
Claims20
A method comprising:
- storing, in at least one hardware module of a network device having a plurality of ports, attributes for at least one access control list and associated actions that cause network packets received at one of the plurality of ports that match the attributes for the at least one access control list, to be directed into one or more service chains, each service chain including one or more applications and a plurality of segments wherein each segment represents a portion of a service chain between an ingress port of the network device to a first application of a service chain, a portion between successively applied applications of a chain, or a portion between a last application of a service chain and an egress port of the network device;
- directing received network packets that match the attributes for the at least one access control list into the one or more service chains;
- counting network packets through respective segments of each of the one or more service chains;
- and
- based on the counting, generating analytics of network traffic for each segment of each of the one or more service chains.
2 more elements
An apparatus comprising:
- at least one hardware module of a network device having a plurality of ports, the at least one hardware module configured to store attributes for at least one access control list and associated actions that cause network packets received at one of the plurality of ports that match the attributes for the at least one access control list, to be directed into one or more service chains, each service chain including one or more applications and a plurality of segments wherein each segment represents a portion of a service chain between an ingress port of the network device to a first application of a service chain, a portion between successively applied applications of a chain, or a portion between a last application of a service chain and an egress port of the network device;
- and
- a processor configured to communicate with the at least one hardware module and to:
- direct received network packets that match the attributes for the at least one access control list into the one or more service chains;
- count network packets through respective segments of each of the one or more service chains;
- and
- based on counted network packets, generate analytics of network traffic for each segment of each of the one or more service chains.
4 more elements
One or more non-transitory computer readable storage media encoded with software comprising computer executable instructions and when the software is executed operable to perform operations comprising:
- storing, in at least one hardware module of a network device having a plurality of ports, attributes for at least one access control list and associated actions that cause network packets received at one of the plurality of ports that match the attributes for the at least one access control list, to be directed into one or more service chains, each service chain including one or more applications and a plurality of segments wherein each segment represents a portion of a service chain between an ingress port of the network device to a first application of a service chain, a portion between successively applied applications of a chain, or a portion between a last application of a service chain and an egress port of the network device;
- directing received network packets that match the attributes for the at least one access control list into the one or more service chains;
- counting network packets through respective segments of each of the one or more service chains;
- and
- based on the counting, generating analytics of network traffic for each segment of each of the one or more service chains.
2 more elements
Dependencies are inferred from the claim text.