Mapping off-network traffic to an administered network
View Patent ↗Traffic flows through an administered network from an off-network source and/or to an off-network destination are simulated and analyzed by selecting an ingress and/or egress node within the administered network, the ingress node capable of collecting traffic from an off-network source, and the egress node capable of routing traffic to an off-network destination. Traffic flow is mapped from the source or ingress node through the administered network to the egress node. The traffic flow may be simulated and analyzed. The ingress and/or egress nodes may be selected in a variety of ways.
1. A method of mapping network traffic flow through a model of an administered network, where at least a destination of the network traffic flow, the destination having a network address, is not within the administered network, comprising:
inspecting routing information at edge devices of the administered network;
determining one or more candidate egress nodes within the administered network that are capable of routing traffic to the destination address, based on the routing information;
selecting one or more egress nodes from among the candidate egress nodes; and
determining a path of the network traffic flow within the model of the administered network from a source of the network traffic flow, the source having a network address, or an ingress node of the administered network, to one or more of the selected egress nodes.
2. The method of claim 1 further comprising simulating the determined paths within the model of the administered network.
3. The method of claim 1 wherein selecting an egress node from among the candidate egress nodes comprises selecting the egress node prior to performing the simulation.
4. The method of claim 3 further comprising:
if the traffic source is not in the administered network, selecting an ingress node within the administered network capable of collecting traffic from the source address; and
wherein selecting an egress node from among the candidate egress nodes prior to performing the simulation comprises applying network constraints to routes from the source or ingress node to each candidate egress node, and selecting the egress node for which a corresponding route best satisfies the applied constraints.
5. The method of claim 4 wherein a network constraint comprises least cost.
6. The method of claim 4 wherein a network constraint comprises fewest hops.
7. The method of claim 4 wherein analyzing the traffic flow through the administered network to the egress node comprises performing transit network planning.
8. The method of claim 4 further comprising outputting a graphic representation of at least part of the administered network, with the mapped traffic flow depicted as a directed graph from the source or ingress node to the egress node.
9. The method of claim 2 wherein selecting an egress node from among the candidate egress nodes comprises selecting the egress node during the simulation.
10. The method of claim 9 further comprising:
if the traffic source is not in the administered network, selecting an ingress node within the administered network capable of collecting traffic from the source address; and
wherein selecting an egress node from among the candidate egress nodes comprises simulating traffic flow from the source or ingress node through the administered network and selecting the egress node based on the simulated traffic flow.
11. The method of claim 10 wherein selecting an ingress node comprises:
selecting a first ingress node capable of collecting traffic from the source address;
routing the traffic to an egress node; and
treating the egress node as a source, and routing the traffic back toward the first ingress node to discover a second ingress node.
12. The method of claim 9 wherein a route from the source or ingress node through the administered network to a selected egress node is deemed successful if it can be routed through the administered network until it reaches a node where the next hop for the destination points to an unconnected interface.
13. The method of claim 9 wherein a route from the source or ingress node through the administered network to a selected egress node is deemed a failure if a lookup in the routing table for the destination fails on any intermediate node in the administered network.
14. The method of claim 9 further comprising outputting a graphic representation of at least part of the administered network, with the mapped traffic flow depicted as an open-ended graph from the source or ingress node.
15. A non-transitory computer readable medium including one or more computer programs operative to cause a computer to map network traffic flow through a model of an administered network where at least a destination of the network traffic flow, the destination having a network address, is not within the administered network, the computer programs operative to cause the computer to perform the steps of:
inspecting routing information at edge devices of the administered network;
determining one or more candidate egress nodes within the administered network that are capable of routing traffic to the destination address, based on the routing information;
selecting one or more egress nodes from among the candidate egress nodes; and
determining the path of the network traffic flow within the model of the administered network from a source of the network traffic flow, the source having a network address, or an ingress node, of the administered network, to one or more of the selected egress nodes.
16. The computer readable medium of claim 15 wherein the computer programs are further operative to cause the computer to perform the step of simulating the determined paths within the model of the administered network.
17. The computer readable medium of claim 16 wherein selecting an egress node from among the candidate egress nodes comprises selecting the egress node prior to performing the simulation.
18. The computer readable medium of claim 17 wherein the computer programs are further operative to cause the computer to perform the step of:
if the traffic source is not in the administered network, selecting an ingress node within the administered network capable of collecting traffic from the source address; and
wherein selecting an egress node from among the candidate egress nodes prior to performing the simulation comprises applying network constraints to routes from the source or ingress node to each candidate egress node, and selecting the egress node for which a corresponding route best satisfies the applied constraints.
19. The computer readable medium of claim 18 wherein a network constraint comprises least cost.
20. The computer readable medium of claim 18 wherein a network constraint comprises fewest hops.
21. The computer readable medium of claim 18 wherein analyzing the traffic flow through the administered network to the egress node comprises performing transit network planning.
22. The computer readable medium of claim 16 wherein selecting an egress node from among the candidate egress nodes comprises selecting the egress node during the simulation.
23. The computer readable medium of claim 22 wherein the computer programs are further operative to cause the computer to perform the step of:
if the traffic source is not in the administered network, selecting an ingress node within the administered network capable of collecting traffic from the source address; and
wherein selecting an egress node from among the candidate egress nodes comprises simulating traffic flow from the source or ingress node through the administered network and selecting the egress node based on the simulated traffic flow.
24. The computer readable medium of claim 23 wherein selecting an ingress node comprises:
selecting a first ingress node capable of collecting traffic from the source address;
routing the traffic to an egress node; and
treating the egress node as a source, and routing the traffic back toward the first ingress node to discover a second ingress node.
25. The computer readable medium of claim 22 wherein a route from the source or ingress node through the administered network to a selected egress node is deemed successful if it can be routed through the administered network until it reaches a node where the next hop for the destination points to an unconnected interface.
26. The computer readable medium of claim 22 wherein a route from the source or ingress node through the administered network to a selected egress node is deemed a failure if a lookup in the routing table for the destination fails on any intermediate node in the administered network.