Traffic flow trace in a network

A network orchestrator, comprising:

• a processing circuitry;
• and
• a non-transitory, computer-readable medium including instructions that, when executed by the processing circuitry, cause the network device to:
• receive, based on a user input, credentials associated with a traffic flow;
• determine, based on the credentials, whether the traffic flow is received at an ingress overlay network node;
• extract, from the ingress overlay network node and based on the credentials, route information and encapsulation information of the traffic flow;
• identify, based on the route information, a first set of underlay network nodes each of which is a potential next hop for the traffic flow;
• determine, based on the encapsulation information, whether the traffic flow is received by one of the first set of underlay network nodes;
• determine, based on the credentials, whether the traffic flow is received at an egress overlay network node from one of the first set of underlay network nodes;
• determine a network trace of the traffic flow based on the determinations of whether the traffic flow is received at the ingress overlay network node, one of the first set of underlay network nodes, and the egress overlay network node;
• and
• detect, based on the network trace, a failure in the network, wherein the failure includes one of a fault in a link between network nodes, a fault in the ingress overlay network node, a fault in the egress overlay network node, and a fault in one of the first set of underlay network nodes.

A non-transitory, computer readable medium including instructions that, when executed by processing circuitry, cause a network device to:

• receive, based on a user input, credentials associated with the traffic flow;
• determine, based on the credentials, whether the traffic flow is received at an ingress overlay network node;
• extract, from the ingress overlay network node and based on the credentials, route information and encapsulation information of the traffic flow;
• identify, based on the route information, a first set of underlay network nodes each of which is a potential next hop for the traffic flow;
• determine, based on the encapsulation information, whether the traffic flow is received by one of the first set of underlay network nodes;
• determine, based on the credentials, whether the traffic flow is received at an egress overlay network node from one of the first set of underlay network nodes;
• determine a network trace of the traffic flow based on the determinations of whether the traffic flow is received at the ingress overlay network node, one of the first set of underlay network nodes, and the egress overlay network node;
• and
• detect, based on the network trace, a failure in the network, wherein the failure includes one of a fault in a link between network nodes, a fault in the ingress overlay network node, a fault in the egress overlay network node, and a fault in one of the first set of underlay network nodes.