Network physical connection inference for IP tunnels
View Patent ↗The physical connection corresponding to IP tunnels in a network are found by tracing through the device configuration and routing tables at the routers in the network to determine the outbound interface associated with each tunnel endpoint, and then inferring a likely return interface associated with the opposite tunnel endpoint. Having determined the physical devices at the source and destination of each tunnel, the physical path between these source and destination devices is traced from the source toward the destination until the path is terminated at the destination device, or at an interface to an external network. If the path ends at an external network, the path is traced from the destination device toward the source device until a corresponding interface to the external network is reached.
1. A method comprising:
receiving configuration data associated with devices in a network at a network analysis system that is configured to provide a model of the network,
identifying, by the network analysis system, a plurality of tunnel definitions in the configuration data,
identifying, by the network analysis system, a source device and a destination device of a select tunnel,
determining, by the network analysis system, a pair of interfaces corresponding to source and destination interfaces of the select tunnel at the source and destination devices, based on complementary data in the tunnel definitions at the source and destination devices,
determining, by the network analysis system, a physical path between the source and destination interfaces corresponding to the select tunnel, and
enhancing, by the network analysis system, the model of the network based on the determination of the physical path between the source and destination interfaces corresponding to the select tunnel,
wherein determining the physical path includes a hierarchical search that includes a search based on logical connections, and a search based on physical connections.
2. The method of claim 1 , wherein the search based on physical connections includes a search based on layer-3 data-based physical connections, and a search based on layer-2 physical connections.
3. The method of claim 1 , wherein the hierarchical search includes a search based on layer-3 data-based physical connections, and a search based on layer-2 physical connections.
4. The method of claim 1 , wherein one or more searches of the hierarchical search include determining a connection based on an assumed communications symmetry.
5. The method of claim 1 , wherein determining the physical path between the source and destination interfaces includes tracing a first path from the source interface to the destination interface, and tracing a second path from the destination interface to the source interface.
6. The method of claim 5 , wherein if the first path does not reach the destination interface, and the second path does not reach the source interface, the method includes identifying a last determined interface of each of the first path and the second path, and defining a coupling of these last determined interfaces via an assumed external network.
7. The method of claim 5 , wherein if the first path does not correspond to the second path, the method includes selecting one of the first and second paths as the physical path between the source and destination interfaces, based on a degree of ambiguity in each of the first and second paths.
8. The method of claim 1 , including providing the physical path corresponding to the select tunnel to a network analysis tool.
9. A non-transitory computer readable medium that includes a computer program that, when executed by a processor causes the processor to:
receive configuration data associated with devices in a network,
identify a plurality of tunnel definitions in the configuration data,
identify a source device and a destination device of a select tunnel,
determining a pair of interfaces corresponding to source and destination interfaces of the select tunnel, based on complementary data in the tunnel definitions at the source and destination devices, and
determine a physical path between the source and destination interfaces corresponding to the select tunnel, and
enhancing a model of a physical topology of the network based on the determination of the first physical interface corresponding to the first destination address and the second physical interface corresponding to the first source address,
wherein the processor determines the physical path via a hierarchical search that includes a search based on logical connections, and a search based on physical connections.
10. The medium of claim 9 , wherein the search based on physical connections includes a search based on layer-3 data-based physical connections, and a search based on layer-2 physical connections.
11. The medium of claim 9 , wherein the hierarchical search includes a search based on layer-3 data-based physical connections, and a search based on layer-2 physical connections.
12. The medium of claim 9 , wherein one or more searches of the hierarchical search include determining a connection based on an assumed communications symmetry.
13. The medium of claim 9 , wherein the processor determines the physical path between the source and destination interfaces by tracing a first path from the source interface to the destination interface, and tracing a second path from the destination interface to the source interface.
14. The medium of claim 13 , wherein if the first path does not reach the destination interface, and the second path does not reach the source interface, the processor identifies a last determined interface of each of the first path and the second path, and defines a coupling of these last determined interfaces via an assumed external network.
15. The medium of claim 13 , wherein if the first path does not correspond to the second path, the processor selects one of the first and second paths as the physical path between the source and destination interfaces, based on a degree of ambiguity in each of the first and second paths.
16. The medium of claim 9 , wherein the computer program causes the processor to provide the physical path corresponding to the select tunnel to a network analysis tool.