Network traffic synchronization mechanism
View Patent ↗Methods, apparatuses and systems directed to a network traffic synchronization mechanism facilitating the deployment of network devices in redundant network topologies. In certain embodiments, when a first network device directly receives network traffic, it copies the network traffic and transmits it to at least one partner network device. The partner network device processes the copied network traffic, just as if it had received it directly, but, in one embodiment, discards the traffic before forwarding it on to its destination. In one embodiment, the partner network devices are operative to exchange directly received network traffic. As a result, the present invention provides enhanced reliability and seamless failover. Each unit, for example, is ready at any time to take over for the other unit should a failure occur. As discussed below, the network traffic synchronization mechanism can be applied to a variety of network devices, such as firewalls, gateways, network routers, and bandwidth management devices.
1. An apparatus enabling synchronization of network traffic with at least one network device, comprising
a first network interface for communication with a first network device;
a second network interface for communication with a second network device;
at least a third network interface for exchange of synchronization packets with a partner network device;
a control module operative to
receive data packets on the first network interface;
receive data packets on the second network interface wherein the data packets received on the first and second network interfaces are addressed to destination hosts;
receive synchronization packets on the at least a third network interface from the partner network device;
transmit, on the at least a third network interface, the data packets received on the first network interface as synchronization packets to the partner network device;
transmit, on the at least a third network interface, the data packets received on the second network interface as synchronization packets to the partner network device;
process the received data packets and the synchronization packets;
forward the data packets received on the first network interface from the second network interface;
forward the data packets received on the second network interface from the first network interface;
wherein the control module is further operative to compose summary versions of the packets received on the first and second network interfaces and transmit the summary versions as synchronization packets on the at least a third network interface; and
wherein the summary versions each comprise a packet header and a payload size.
2. The apparatus of claim 1 wherein the control module is further operative to discard the received synchronization packets before transmitting the data packets to the destination hosts.
3. The apparatus of claim 1 further comprising a fourth network interface for exchange of synchronization packets with the partner network device; and wherein the control module is operative to
transmit, on the third network interface, the data packets received on the first network interface as synchronization packets to the partner network device;
transmit, on the fourth network interface, the data packets received on the second network interface as synchronization packets to the partner network device.
4. The apparatus of claim 1 wherein the control module is further operative to
encapsulate the data packets received on the first and second network interfaces with synchronization headers before transmitting the data packets on the at least a third network interface, and
decapsulate the synchronization packets received from the partner network device on the at least a third network interface network interface.
5. The apparatus of claim 4 wherein the control module is further operative to
include meta information relating to the data packets in the synchronization header.
6. The apparatus of claim 1 wherein the first network interface is a wired network interface.
7. The apparatus of claim 1 wherein the first network interface is a wireless network interface.
8. The apparatus of claim 1 wherein the at least a third network interface is a wireless network interface.
9. The apparatus of claim 3 wherein the fourth network interface is a wireless network interface.
10. The apparatus of claim 1 wherein the control module is further operative to verify the packets received on the at least a third network interface.
11. The apparatus of claim 10 wherein the synchronization packets include a magic identifier, and wherein the control module is operative to verify the packets received on the at least a third network interface by validating the magic identifier.
12. The apparatus of claim 10 wherein the control module is further operative to include magic identifiers to synchronization packets transmitted on the at least a third network interface.
13. A method directed to synchronization of network traffic with at least one partner network device, comprising
receiving data packets on first and second network interfaces, wherein the data packets are addressed to destination hosts;
receiving synchronization packets on at least a third network interface from at least one partner network device;
transmitting, on the at least a third network interface, the data packets received on the first network interface as synchronization packets to at least one partner network device;
transmitting, on the at least a third network interface, the data packets received on the second network interface as synchronization packets to the at least one partner network device;
processing the received data packets and the received synchronization packets;
discarding the received synchronization packets after processing;
forwarding the data packets received on the first network interface from the second network interface;
forwarding the data packets received on the second network interface from the first network interface;
composing summary versions of the packets received on the first and second network interfaces and transmit the summary versions as synchronization packets on the at least a third network interface; and
wherein the summary versions each comprise a packet header and a payload size.
14. A system, comprising
a first network device operably connected to a first communication path in a computer network,
a second network device operably connected to a second communication path in the computer network,
wherein the first network device is operably connected to the second network device to transmit and receive synchronization packets, wherein the first and second network devices each comprise
a first network interface;
a second network interface;
a control module operative to
receive data packets on the first and second network interfaces, wherein the data packets are addressed to destination hosts;
receive synchronization packets from a partner network device;
transmit the data packets received on the first network interface as synchronization packets to the partner network device;
transmit the data packets received on the second network interface as synchronization packets to the partner network device;
process the received data packets and the received synchronization packets;
discard the received synchronization packets;
forward the data packets received on the first network interface from the second network interface;
forward the data packets received on the second network interface from the first network interface;
wherein the control module is further operative to compose summary versions of the packets received on the first and second network interfaces and transmit the summary versions as synchronization packets on the at least a third network interface; and
wherein the summary versions each comprise a packet header and a payload size.
15. The system of claim 14 wherein the first and second network devices are each further operative to
encapsulate the data packets received on the communications path with synchronization headers before transmitting the data packets to the at least one partner network device, and
decapsulate the synchronization packets received from the at least one partner network device.
16. The system of claim 15 wherein the first and second network devices are each further operative to
include meta information relating to the data packets in the synchronization header.
17. The system of claim 14 wherein the first and second network devices each comprise
at least a third network interface for exchange of synchronization packets with the partner network device.
18. The system of claim 17 wherein the first and second network devices further comprise a fourth network interface for exchange of synchronization packets with the partner network device; and wherein the control module is operative to
transmit, on the third network interface, the data packets received on the first network interface as synchronization packets to the partner network device;
transmit, on the fourth network interface, the data packets received on the second network interface as synchronization packets to the partner network device.
19. The system of claim 17 wherein the control module is further operative to
encapsulate the data packets received on the first and second network interfaces with synchronization headers before transmitting the data packets on the at least a third network interface, and
decapsulate the synchronization packets received on the at least a third network interface network interface.
20. The system of claim 19 wherein the control module is further operative to
include meta information relating to the data packets in the synchronization header.
21. The system of claim 17 wherein the first network interface is a wired network interface.
22. The system of claim 17 wherein the first network interface is a wireless network interface.
23. The system of claim 17 wherein the at least a third network interface is a wireless network interface.
24. The system of claim 18 wherein the fourth network interface is a wireless network interface.
25. A bandwidth management device operative to synchronize network traffic data with at least one other bandwidth management device comprising
a first network interface for communication with a first computer network;
a second network interface for communication with a second computer network;
at least a third network interface for exchange of synchronization packets with at least one partner bandwidth management device;
a bandwidth management module operative to
receive data packets on the first and second network interfaces, wherein the data packets are addressed to destination hosts;
receive synchronization packets on the at least a third network interface;
transmit, on the at least a third network interface, the data packets received on the first network interface as synchronization packets to the partner network device;
transmit, on the at least a third network interface, the data packets received on the second network interface as synchronization packets to the partner network device;
process the received data packets and the synchronization packets;
enforce bandwidth utilization controls on the data packets received at the first and second network interfaces;
discard the received synchronization packets after processing;
forward the data packets received on the first network interface from the second network interface;
forward the data packets received on the second network interface from the first network interface;
wherein the bandwidth management module is further operative to compose summary versions of the packets received on the first and second network interfaces and transmit the summary versions as synchronization packets on the at least a third network interface; and
wherein the summary versions each comprise a packet header and a payload size.
26. The bandwidth management device of claim 25 wherein processing of the synchronization packets influences enforcement of the bandwidth utilization controls on the data packets received at the first and second network interfaces.
27. The bandwidth management device of claim 25 further comprising a fourth network interface for exchange of synchronization packets with the partner network device; and wherein the control module is operative to
transmit, on the third network interface, the data packets received on the first network interface as synchronization packets to the partner network device;
transmit, on the fourth network interface, the data packets received on the second network interface as synchronization packets to the partner network device.
28. The bandwidth management device of claim 25 wherein the control module is further operative to
encapsulate the data packets received on the first and second network interfaces with synchronization headers before transmitting the data packets on the at least a third network interface, and
decapsulate the synchronization packets received on the at least a third network interface network interface.
29. The bandwidth management device of claim 28 wherein the control module is further operative to include meta information relating to the data packets in the synchronization header.
30. The bandwidth management device of claim 25 wherein the first network interface is a wired network interface.
31. The bandwidth management device of claim 25 wherein the first network interface is a wireless network interface.
32. The bandwidth management device of claim 25 wherein the at least a third network interface is a wireless network interface.
33. The bandwidth management device of claim 27 wherein the fourth network interface is a wireless network interface.
34. An apparatus enabling synchronization of network traffic with at least one network device, comprising
a first network interface;
a second network interface;
at least one synchronization interface for exchange of synchronization packets with a partner network device;
a control module operative to
receive data packets on the first and second network interfaces;
receive synchronization packets on the at least one synchronization interface;
transmit, on the at least one synchronization interface, the data packets received on the first and second network interfaces as synchronization packets to the partner network device;
process the received data packets and the synchronization packets;
discard the received synchronization packets after processing;
forward the data packets received on the first network interface from the second network interface;
forward the data packets received on the second network interface from the first network interface;
wherein the control module is further operative to compose summary versions of the packets received on the first and second network interfaces and transmit the summary versions as synchronization packets on the at least a third network interface; and
wherein the summary versions each comprise a packet header and a payload size.