IP Library Granted Patent US 12706849
Granted Patent B2
US 12706849 · App. 18/356,853 · Granted Aug 11, 2026

Routable and intent-based service chains

Inventors: Pritam Baruah (Fremont, CA); Amjad Inamdar (Karnataka, IN); Laxmikantha Reddy Ponnuru (San Ramon, CA); Samir D Thoria (Saratoga, CA)
Assignee: Cisco Technology, Inc.
H04L47/2408H04L45/24
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12706849
App. No.
18/356,853
Granted
Aug 11, 2026
Kind
B2
Abstract

The present disclosure is directed to making service-chains routable and intent-based within an enterprise network. In one aspect, a method for simplifying steering of network traffic includes receiving an intent-based description of one or more services to be applied to the network traffic; defining a type for a service chain that includes the one or more services based on the intent-based description, the type serving as an address for the service chain for routing the network traffic to and from the one or more service included in the service chain; implementing the service chain at one or more network hubs; and implementing a traffic steering policy in the network for steering the network traffic to the one or more network hubs to be serviced by the one or more services.

Claims (49)

1 . A method for simplifying steering of network traffic, the method comprising:

receiving an intent-based description of one or more services to be applied to the network traffic;

applying a language processing model to the intent-based description to define a type for a service chain that includes an identification of the service chain, a virtual routing and forwarding identification of the service chain, and a respective identification of each of the one or more services based on the intent-based description;

routing the network traffic to and from the one or more service included in the service chain using the type as an address of the service chain;

implementing the service chain at one or more network hubs;

generating a traffic steering policy in the network for steering the network traffic to the one or more network hubs to be serviced by the one or more services; and

sending the traffic steering policy to one or more network routers for steering the network traffic (1) to the one or more network hubs; and (2) to one or more intended destination after the network traffic is serviced by the one or more services.

2 . The method of claim 1 , wherein the type is selected from a group of service chain types.

3 . The method of claim 1 , wherein the intent-based description identifies the one or more network hubs, and

implementing the service chain includes instantiating the service chain at each of the one or more network hubs.

4 . The method of claim 3 , wherein instantiating the service chain comprises:

generating a configuration for the service chain; and

downloading the configuration at each of the one or more network hubs.

5 . The method of claim 1 , wherein the service chain is implemented at least two network hubs, and

the network traffic is steered to one of the two network hubs based on Equal Cost Multi-Path (ECMP) routing.

6 . The method of claim 1 , wherein the one or more services include at least one of a firewall service, an intrusion detection system service, and a flow analyzer service.

7 . A network controller comprising:

one or more memories having computer-readable instructions stored therein; and

one or more processors configured to execute the computer-readable instructions to:

receive an intent-based description of one or more services to be applied to network traffic;

applying a language processing model to the intent-based description to define a type for a service chain that includes an identification of the service chain, a virtual routing and forwarding identification of the service chain, and a respective identification of each of the one or more services based on the intent-based description;

route the network traffic to and from the one or more service included in the service chain using the type as an address of the service chain;

implement the service chain at one or more network hubs; and

generate a traffic steering policy in the network for steering the network traffic to the one or more network hubs to be serviced by the one or more services; and

send the traffic steering policy to one or more network routers for steering the network traffic (1) to the one or more network hubs; and (2) to one or more intended destination after the network traffic is serviced by the one or more services.

8 . The network controller of claim 7 , wherein the type is selected from a group of service chain types.

9 . The network controller of claim 7 , wherein the intent-based description identifies the one or more network hubs, and

the network controller is configured to implement the service chain by instantiating the service chain at each of the one or more network hubs.

10 . The network controller of claim 9 , wherein the network controller is configured to instantiate the service chain by:

generating a configuration for the service chain; and

downloading the configuration at each of the one or more network hubs.

11 . The network controller of claim 7 , wherein the service chain is implemented at least two network hubs, and

the network traffic is steered to one of the two network hubs based on Equal Cost Multi-Path (ECMP) routing.

12 . The network controller of claim 7 , wherein the one or more services include at least one of a firewall service, an intrusion detection system service, and a flow analyzer service.

13 . One or more non-transitory computer-readable media comprising computer-readable instructions, which when executed by one or more processors of a network controller, cause the network controller to:

receive an intent-based description of one or more services to be applied to network traffic;

apply a language processing model to the intent-based description to define a type for a service chain that includes an identification of the service chain, a virtual routing and forwarding identification of the service chain, and a respective identification of each of the one or more services based on the intent-based description;

route the network traffic to and from the one or more service included in the service chain using the type as an address of the service chain;

implement the service chain at one or more network hubs;

generate a traffic steering policy in the network for steering the network traffic to the one or more network hubs to be serviced by the one or more services; and

send the traffic steering policy to one or more network routers for steering the network traffic (1) to the one or more network hubs; and (2) to one or more intended destination after the network traffic is serviced by the one or more services.

14 . The one or more non-transitory computer-readable media of claim 13 , wherein the intent-based description identifies the one or more network hubs, and

the execution of the computer-readable instructions cause the network controller to implement the service chain by instantiating the service chain at each of the one or more network hubs.

15 . The one or more non-transitory computer-readable media of claim 14 , wherein the execution of the computer-readable instructions cause the network controller to instantiate the service chain by:

generating a configuration for the service chain; and

downloading the configuration at each of the one or more network hubs.

16 . The one or more non-transitory computer-readable media of claim 13 , wherein the service chain is implemented at least two network hubs, and

the network traffic is steered to one of the two network hubs based on Equal Cost Multi-Path (ECMP) routing.

17 . The one or more non-transitory computer-readable media of claim 13 , wherein the one or more services include at least one of a firewall service, an intrusion detection system service, and a flow analyzer service.