Network architecture with distribution of packet services to various switches
View Patent ↗Virtual machine environments are provided in the switches that form a network, with the virtual machines executing network services previously performed by dedicated appliances. The virtual machines can be executed on a single multi-core processor in combination with normal switch functions or on dedicated services processor boards. Packet processors analyze incoming packets and add a services tag containing services entries to any packets. Each switch reviews the services tag and performs any network services resident on that switch. This allows services to be deployed at the optimal locations in the network. The network services may be deployed by use of drag and drop operations. A topology view is presented, along with network services that may be deployed. Services may be selected and dragged to a single switch or multiple switches. The management tool deploys the network services software, with virtual machines being instantiated on the switches as needed.
1. A network comprising:
a plurality of interconnected network switches, wherein the network switches are interconnected in a topology having at least two tiers and wherein at least a first number of said plurality of interconnected network switches execute network services in addition to performing switching functions; and
a management tool coupled to said plurality of interconnected network switches to deploy network services to said plurality of interconnected network switches,
wherein said network services include network services appropriate for different tiers and for different connection configurations, and
wherein said management tool deploys said network services to appropriate of said plurality of interconnected network switches based on the tier of the network switch, the topology of the network and the location of the network switch in the topology.
2. The network of claim 1 , wherein the topology includes a first tier being an edge tier and a second tier being a core tier.
3. The network of claim 1 , wherein said network services includes a wireless network access service, and
wherein said wireless access service is deployed to any network switches which may be connected to wireless access points.
4. The network of claim 1 , wherein said network services includes an identity service, and
wherein said identity service is deployed to any network switches which form an edge of the network.
5. The network of claim 1 , wherein said network services includes an encryption service, and
wherein said encryption service is deployed to any network switches which must communicate securely to an attached device.
6. A method comprising:
interconnecting a plurality of network switches, wherein the network switches are interconnected in a topology having at least two tiers and wherein at least a first number of said plurality of network switches execute network services in addition to performing switching functions; and
deploying, by a management tool, network services to said plurality of interconnected network switches,
wherein said network services include network services appropriate for different tiers and for different connection configurations, and
wherein deployment of said network services is to appropriate of said plurality of interconnected network switches based on the tier of the network switch, the topology of the network and the location of the network switch in said topology.
7. The method of claim 6 , wherein the topology includes a first tier being an edge tier and a second tier being a core tier.
8. The method of claim 6 , wherein said network services includes a wireless network access service, and
wherein said wireless access service is deployed to any network switches which may be connected to wireless access points.
9. The method of claim 6 , wherein said network services includes an identity service, and
wherein said identity service is deployed to any network switches which form an edge of the network.
10. The method of claim 6 , wherein said network services includes an encryption service, and
wherein said encryption service is deployed to any network switches which must communicate securely to an attached device.