US 9,001,827 B2 · Methods for configuring network switches

Abstract

Network switches may be configured using flow tables. Flow table entries may contain header fields and associated actions. When a packet is received by a network switch, the network switch can compare fields in the packet to fields in the flow table entries and can take corresponding actions when matches are detected. A controller server can determine the topology of a network and can gather information on the capacities of network switches and other network switch capabilities. Based on this information and network configuration rules, the controller server can generate flow tables for the network switches that direct the switches to forward packets along desired paths through the network. The flow table entries for switches that are nearer the network core can be provided with more wildcarding than switches nearer the network edge. Traffic can be forwarded through encapsulation and deencapsulation engines to allow tunneling between isolated network domains.

Claims13

Dependent claims

A method of using a controller server to provide network switches in a network with flow table entries, wherein each network switch processes packets by comparing packet fields to fields in the flow table entries, the method comprising:

with the controller server, categorizing some of the network switches as being edge network switches and some of the network switches as being non-edge switches;
with the controller server, querying the network switches to identify capacities of the network switches for handling flow table entries;
and
with the controller server, generating and distributing different flow table entries to the network switches that have been categorized as the edge network switches than the network switches that have been categorized as the non-edge switches based on the identified capacities of the network switches for handling flow table entries, wherein distributing the flow table entries comprises distributing a first portion of the flow table entries with only complete fields to the edge switches and a second portion of the flow table entries with at least some wildcarded fields to the non-edge switches without distributing the first portion of the flow table entries to the non-edge switches and without distributing the second portion of the flow table entries to the edge switches.

1 more element

A method of operating a network having a first network domain associated with a first set of end hosts and network switches, a second network domain associated with a second set of end hosts and network switches, a controller server that supplies flow table entries for the network switches in the first network domain and the second network domain, and a local core network, wherein each network switch processes received packets by comparing packet fields to fields in the flow table entries, wherein an encapsulation engine is implemented on a first network switch in the first network domain, and wherein a deencapsulation engine is implemented on a second network switch in the second domain, the method comprising:

with the controller server, generating a plurality of flow table entries for the network switches in the first domain and the network switches in the second domain that direct the network switches in the first and second domain to forward packets from a first end host in the first network domain to the encapsulation engine, to forward encapsulated packets from the encapsulation engine through the local core network to the deencapsulation engine, and to forward packets from the deencapsulation engine to a second end host in the second domain;
with the controller server, identifying a location in the first network domain of the encapsulation engine;
with the controller server, identifying a path from the first end host to the location of the encapsulation engine;
with the controller server, identifying a location in the second network domain of the deencapsulation engine based on information retrieved from the switches;
and
with the controller server, identifying a path from the location of the encapsulation engine to the location of the deencapsulation engine through the local core network.

3 more elements

Dependencies are inferred from the claim text.

Methods for configuring network switches

Life of this patent

Methods for configuring network switches

Life of this patent

Abstract

Claims13