Resource allocation using an auto-discovery mechanism for provider-provisioned layer-2 and layer-3 virtual private networks
View Patent ↗A technique for resource distribution using an auto-discovery mechanism for Provider-Provisioned Layer- 2 and Layer- 3 Virtual Private Networks. In one particular exemplary embodiment, the technique may be realized by a method for establishing a Virtual Private Network (VPN) tunnel between a first provider edge (PE) device and a second (PE) device of a provider-provisioned VPN. The method may comprise advertising at least one tunnel-based parameter to one or more PE devices over a network backbone using an auto-discovery mechanism, the one or more PE devices including at least one of the first and second PE devices. The method further may comprise configuring a VPN tunnel between the first and second PE devices based at least in part on the at least one tunnel-based parameter.
1. A method for establishing a Virtual Private Network (VPN) tunnel between a first provider edge (PE) device and a second provider edge (PE) device of a Provider-Provisioned VPN (PPVPN) comprising:
advertising at least one tunnel-based parameter to one or more PE devices over a network backbone using an extension to an auto-discovery protocol, the one or more PE devices including at least one of the first and second PE devices;
determining VPN capability discovery information including the at least one tunnel-based parameter; and
negotiating between the first and second PE devices to automatically establish and configure a VPN tunnel between the first and second PE devices based upon the VPN capability discovery information.
2. The method as in claim 1 , wherein the auto-discovery protocol includes one of a group consisting of: a Border Gateway Protocol (BGP)-based mechanism; a Domain Name Service (DNS)-based mechanism; and a Remote Authentication Dial In User Service (RADIUS)-based mechanism.
3. The method as in claim 1 , wherein automatically configuring the VPN tunnel includes automatically configuring the VPN tunnel using at least one tunnel signalling mechanism.
4. The method as in claim 3 , wherein the at least one tunnel signalling mechanism includes one of a group consisting of: a Resource Reservation Protocol (RSVP)-based mechanism; a Resource Reservation Protocol-Traffic Engineered (RSVP-TE)-based mechanism; a Label Distribution Protocol (LDP)-based mechanism; and a Constraint-based Routing LDP (CR-LDP) based mechanism.
5. The method as in claim 1 , wherein the at least one tunnel-based parameter includes one of a group consisting of: a type of tunnelling mechanism; at least one PE tunnel endpoint; at least one community route target; topology information; and at least one resource parameter.
6. The method as in claim 5 , wherein the at least one resource parameter includes one of a group consisting of: minimum bandwidth; maximum delay; committed burst size; committed rate; jitter; error; ownership; physical position and transport medium.
7. At least one processor readable carrier for storing a computer program of instructions configured to be readable by at least one processor for instructing the at least one processor to execute a computer process for performing the method as recited in claim 1 .
8. The method of claim 1 , wherein automatically configuring the VPN tunnel includes selecting a pre-existing VPN tunnel, the pre-existing VPN tunnel being compliant with the at least one tunnel-based parameter.
9. In a Provider-Provisioned Virtual Private Network (PPVPN), a system comprising:
auto-discovery means for distributing at least one Virtual Private Network (VPN) tunnel-based parameter to at least a first provider edge (PE) device and a second provider edge (PE) device using an extension to an auto-discovery protocol; and
tunnel signalling means for determining VPN capability discovery information including the at least one tunnel-based parameter, and negotiating between the first and second PE devices to automatically establish and configure a VPN tunnel between the first and second PE devices based upon the VPN capability discovery information.
10. The system as in claim 1 , wherein the auto-discovery protocol comprises one of a group consisting of: a Border Gateway Protocol (BGP)-based mechanism; a Domain Name Service (DNS)-based mechanism; and a Remote Authentication Dial In User Service (RADIUS)-based mechanism.
11. The system as in claim 10 , wherein the tunnel signalling means includes one of a group consisting of: a Resource Reservation Protocol (RSVP)-based mechanism; a Resource Reservation Protocol-Traffic Engineered (RSVP-TE)-based mechanism; a Label Distribution Protocol (LDP)-based mechanism; and a Constraint-based Routing LDP (CR-LDP) based mechanism.
12. The system as in claim 10 , wherein the at least one tunnel-based parameter includes one of a group consisting of: a type of tunnelling mechanism; at least one PE tunnel endpoint; at least one community route target; topology information; and at least one resource parameter.
13. The system as in claim 12 , wherein the at least one resource parameter includes one of a group consisting of: minimum bandwidth; maximum delay; committed burst size; committed rate; jitter; error; ownership; physical position and transport medium.
14. In a distributed network, a Provider-Provisioned Virtual Private Network (PPVPN) system comprising:
a network backbone;
a first provider edge (PE) device and a second provider edge (PE) device, each operably connected to the network backbone;
an auto-discovery mechanism for distributing at least one VPN tunnel-based parameter to at least the first and second PE devices using an extension to an auto-discovery protocol; and
a tunnel signalling mechanism adapted to determine VPN capability discovery information including the at least one tunnel-based parameter, and negotiate between the first and second PE devices to automatically establish and configure a VPN tunnel between the first and second PE devices based upon the VPN capability discovery information.
15. The system as in claim 14 , wherein the auto-discovery protocol comprises one of a group consisting of: a Border Gateway Protocol (BGP)-based mechanism; a Domain Name Service (DNS)-based mechanism; and a Remote Authentication Dial In User Service (RADIUS)-based mechanism.
16. The system as in claim 14 , wherein the tunnel signalling mechanism includes one of a group consisting of: a Resource Reservation Protocol (RSVP)-based mechanism; a Resource Reservation Protocol-Traffic Engineered (RSVP-TE)-based mechanism; a Label Distribution Protocol (LDP)-based mechanism; and a Constraint-based Routing LDP (CR-LDP) based mechanism.
17. The system as in claim 14 , wherein the at least one tunnel-based parameter includes one of a group consisting of: a type of tunnelling mechanism; at least one PE tunnel endpoint; at least one community route target; topology information; and at least one resource parameter.
18. The system as in claim 17 , wherein the at least one resource parameter includes one of a group consisting of: minimum bandwidth; maximum delay; committed burst size; committed rate; jitter; error; ownership; physical position and transport medium.