Open platform architecture for integrating multiple heterogeneous network functions
A platform for seamlessly hosts a plurality of disparate types of packet processing applications. One or more applications are loaded onto a service card on the platform. A programmable path structure is included that maps a logical path for processing of the packets through one or more of the plurality of service cards according to characteristics of the packets. Multiple path structures may be programmed into the platform to offer different service paths for different types of packets.
1. A platform for performing processing of packets at the edge of a network, the platform comprising:
a plurality of service cards of a forwarding plane, each service card configured to execute at least one application;
a programmable service path structure, that maps a logical path for processing of the packets through one or more of the plurality of service cards according to characteristics of the packets;
a plurality of input/output (I/O) cards, each I/O card configured to route packets from an ingress or to an egress of the platform;
a fabric including a plurality of input and output ports configured to physically route the packets between one or more of the plurality of I/O cards and one or more of the plurality of service cards according to the programmable service path structure; and
a control plane coupled to the forwarding plane, the control plane comprising at least one feature server configured to execute one or more customer-configured applications and to modify the programmable service path structure.
2. The platform as recited in claim 1 , wherein executing at least one application includes executing an application associated with network security comprising at least one of a firewall process, a Deep Packet Inspection process, a virus detection process, and a denial of service detection process.
3. The platform as recited in claim 1 , wherein executing at least one application includes executing an application associated with traffic accounting/monitoring comprising at least one of a flow monitoring process, traffic measuring process, and a probing process.
4. The platform as recited in claim 1 , wherein the least one feature server is used in conjunction with the forwarding plane for executing an application associated with at least one bandwidth management or a traffic management process.
5. The platform as recited in claim 1 , wherein the at least one feature server is used in conjunction with the forwarding plane for executing an application associated with at least one content adaptation process or an application acceleration process.
6. The platform as recited in claim 1 , wherein at least one of the service cards and/or I/O cards is configured to identify at least one characteristic of the packets, and based on the identified at least one characteristic, assign a classifier to the packets, which is then used to navigate the packets through the programmable service path structure.
7. The platform as recited in claim 1 , wherein at least one of the service cards and/or I/O cards is configured to route packets to a next destination.
8. The platform as recited in claim 1 , wherein each of the service cards is dynamically reprogrammable.
9. The platform as recited in claim 1 , wherein the programmable service path structure is dynamically reprogrammable.
10. A system for processing a packet, comprising:
a plurality of service applications, each configured to perform a specific segment of processing on the packet;
a plurality of service paths, programmably configured to link a completion of processing of one specific segment of processing associated with one of the service applications to a start of processing of another specific segment of another of the service applications such that each portion of processing of the packet can be performed in a specific order and by any of the plurality of service applications specified by the plurality of service paths;
a plurality of input/output (I/O) cards, each I/O card configured to route packets from an ingress or to an egress of the system, wherein at least one of the plurality of service paths provides a link between at least one of the plurality of service applications with at least one of the plurality of I/O cards; and
a feature server configured to execute one or more customer-configured applications and to modify at least one of the plurality of service paths.
11. The system as recited in claim 10 , wherein at least one specific segment of processing on the packet includes executing an application associated with network security comprising at least one of a firewall process, a Deep Packet Inspection process, a virus detection process, and a denial of service detection process.
12. The platform as recited in claim 10 , wherein at least one specific segment of processing on the packet includes executing an application associated with traffic accounting/monitoring.
13. The system as recited in claim 10 , wherein the specific order and the plurality of service applications specified by the plurality of service paths are determined based on at least one identified characteristic of the packet.
14. The system as recited in claim 10 , further comprising a plurality of service cards, each configured to execute at least one of the service applications.
15. The system as in claim 10 , further comprising a control plane and a forwarding plane, the control plane and the forwarding plane each controlling one or more portions of the programmable service path structure.
16. The system as recited in claim 10 , wherein at least one of the plurality of service applications is dynamically reprogrammable.
17. The system as recited in claim 10 , wherein at least one of the plurality of service paths is dynamically reprogrammable.