Method and apparatus for assigning and allocating network resources to packet-based virtual private networks
View Patent ↗A method and apparatus for controlling bandwidth in a Virtual Private Network assigns and allocates transmission bandwidth to packet VPNs for either connectionless or connection-oriented communication. The method creates two views of transmission facilities: a user plane view and a control plane view. In the user plane view, the bandwidth of the transmission facility is split into quantified and identified partitions. In the control plane view, transmission facilities are represented as logical links forming a topology that can be used for the purpose of routing the VPN. The two views are tied together by assigning user plane partitions to VPN control plane links. As a result, the allocation of bandwidth to VPNs becomes a controllable and viewable entity, thereby facilitating management and QoS provisioning in a VPN network.
1. A system for operating a virtual private network (VPN) service, comprising:
a transmission facility database configured to store bandwidth partition information for at least one transmission facility; and
a VPN map configured to map at least one VPN logical link of at least one VPN to at least one bandwidth partition of the at least one transmission facility;
wherein the at least one transmission facility is configured to provide selective customer access to the VPN map and the transmission facility database, wherein the selective customer access enables a customer to view the VPN map.
2. The system of claim 1 , wherein the at least one transmission facility is configured to provide to a particular customer associated with a particular VPN an indication of utilization of bandwidth of the at least one bandwidth partition for at least one VPN logical link of the particular VPN.
3. The system of claim 2 , wherein the at least one transmission facility is configured to provide the indication of utilization of bandwidth based on information in the transmission facility database.
4. The system of claim 1 , wherein the at least one transmission facility is configured to enable a particular customer associated with a particular VPN to access the VPN map to assign at least a portion of the at least one bandwidth partition of the at least one transmission facility to the particular VPN.
5. The system of claim 4 , wherein the at least one transmission facility comprises a VPN bandwidth allocator.
6. The system of claim 1 , further comprising a key table configured to store encryption keys associated with VPNs provided by the VPN service.
7. The system of claim 1 , further comprising a registration table configured to store customer edge equipment identifiers associated with VPNs provided by the VPN service.
8. The system of claim 1 , further comprising a policy administrator configured to administer security policies for VPNs provided by the VPN service.
9. The system of claim 1 , implemented on at least one discrete entity coupled to provider network devices and customer network devices.
10. The system of claim 1 , implemented on at least one provider network device coupled to other provider network devices and customer network devices.
11. The system of claim 1 , implemented as functional elements distributed among multiple network devices configured to provide the at least one VPN.
12. The system of claim 1 , wherein the VPN map stores, for each VPN provided by the VPN service, a list of bandwidth partitions of transmission facilities assigned to each VPN.
13. The system of claim 1 , wherein the transmission facility database stores, for each transmission facility associated with the VPN service, a list of bandwidth partitions and the bandwidth associated with each bandwidth partition.
14. The system of claim 1 , further comprising transmission facility control elements at each end of each transmission facility associated with the VPN service, the transmission facility control elements being configured to control entry of VPN traffic associated with each VPN served by each transmission facility.
15. The system of claim 14 , wherein the transmission facility control elements at each end of each transmission facility comprise:
at least one queue configured to queue VPN traffic entering the transmission facility; and
at least one selector configured to select the VPN traffic from the at least one queue for transmission by the transmission facility, the at least one selector being configured to select the VPN traffic in accordance with bandwidth partitions allocated to each VPN served by each transmission facility.
16. The system of claim 15 , wherein the at least one selector is controlled in accordance with:
the VPN map configured to associate bandwidth partitions with each VPN served by the transmission facility; and
a bandwidth map configured to store bandwidth allocations associated with each bandwidth partition.
17. A method of operating a virtual private network (VPN) service, comprising:
storing, in a transmission facility database, bandwidth partition information for at least one transmission facility;
configuring a VPN map to map at least one VPN logical link of at least one VPN to at least one bandwidth partition of the at least one transmission facility; and
providing, by the at least one transmission facility, selective customer access to the VPN map and the transmission facility database, wherein the selective customer access enables a customer to view the VPN map.
18. The method of claim 17 , wherein the at least one transmission facility is configured to provide to a particular customer associated with a particular VPN an indication of utilization of bandwidth of the at least one bandwidth partition for the at least one VPN logical link of the particular VPN.
19. The method of claim 18 , wherein the at least one transmission facility is configured to provide the indication of utilization of bandwidth based on information in the transmission facility database.
20. The method of claim 17 , wherein the at least one transmission facility is configured to enable a particular customer associated with a particular VPN to access the VPN map to assign at least a portion of at least one bandwidth partition of the at least one transmission facility to the particular VPN.