Route map policies for network switches

1. A computing apparatus for providing an integrated service engine on a network switch, comprising:

one or more logic elements comprising a protocol engine operable for providing routing policies to the network switch, comprising:

providing an ADD command to the network switch, comprising a first ordinal list of operations, wherein the first ordinal list of operations comprises the following sequence of ordered operations performed in order:

(1) creating an access control list (ACL) based on a real server Internet Protocol (IP) address, a port, and protocol received from a service appliance for performing at least one network service;

(2) creating a route map based on the real server IP address, the port, and the protocol received from the service appliance;

(3) associating the ACL with the route map;

(4) programming an action for the route map based on a next-hop IP address for the service appliance performing the at least one network service; and

(5) applying the route map to a network interface;

and

providing a DELETE command to the network switch, comprising a second ordinal list of operations, wherein the second ordinal list of operations comprises the following sequence of ordered operations performed in order:

(6) removing the route map from the network interface;

(7) removing the action;

(8) removing the association of the ACL with the route map;

(9) deleting the route map; and

(10) deleting the ACL,

wherein the second ordinal list of operations is the ordinal inverse of the first ordinal list of operations.

2. The computing apparatus of claim 1 , wherein the ADD and DELETE commands are non-blocking, and wherein the ADD and DELETE commands are configured to be mutually aware and to synchronize the routing policies upon a collision.

3. The computing apparatus of claim 1 , wherein the protocol engine is further operable for:

providing automatic policy-based routing, the automatic policy-based routing comprising:

inferring a subnetwork from a group of IP addresses having a common policy; and

applying the common policy to the subnetwork.

4. The computing apparatus of claim 1 , wherein the protocol engine is further operable for:

providing a persistent storage;

flagging a policy as not persistent; and

excluding the not persistent policy from the persistent storage.

5. The computing apparatus of claim 1 , wherein the protocol engine is further operable for providing a PURGE command, comprising:

deleting a full access list in a single request; and

deleting a full route map in a single request.

6. One or more tangible non-transitory computer-readable storage mediums having stored thereon executable instructions for providing a protocol engine operable for providing routing policies to a network switch comprising:

providing an ADD command to the network switch, comprising a first ordinal list of operations, wherein the first ordinal list of operations comprises the following sequence of ordered operations performed in order:

(1) creating an access control list (ACL) based on a real server Internet Protocol (IP) address, a port, and protocol received from a service appliance for performing at least one network service;

(2) creating a route map based on the real server IP address, the port, and the protocol received from the service appliance;

(3) associating the ACL with the route map;

(4) programming an action for the route map based on a next-hop IP address for the service appliance performing the at least one network service; and

(5) applying the route map to a network interface;

and

providing a DELETE command to the network switch, comprising a second ordinal list of operations, wherein the second ordinal list of operations comprises the following sequence of ordered operations performed in order:

(6) removing the route map from the network interface;

(7) removing the action;

(8) removing the association of the ACL with the route map;

(9) deleting the route map; and

(10) deleting the ACL,

wherein the second ordinal list of operations is the ordinal inverse of the first ordinal list of operations.

7. The one or more tangible non-transitory computer-readable storage mediums of claim 6 , wherein the ADD and DELETE commands are non-blocking, and wherein the ADD and DELETE commands are configured to be mutually aware and to synchronize the routing policies upon a collision.

8. The one or more tangible non-transitory computer-readable storage mediums of claim 6 , wherein the protocol engine is further operable for:

providing automatic policy-based routing, the automatic policy-based routing comprising:

inferring a subnetwork from a group of IP addresses having a common policy; and

applying the common policy to the subnetwork.

9. The one or more tangible non-transitory computer-readable storage mediums of claim 6 , wherein the protocol engine is further operable for:

providing a persistent storage;

flagging a policy as not persistent; and

excluding the not persistent policy from the persistent storage.

10. The one or more tangible non-transitory computer-readable storage mediums of claim 6 , wherein the protocol engine is further operable for providing a PURGE command, comprising:

deleting a full access list in a single request; and

deleting a full route map in a single request.

11. A computer-implemented method of providing a protocol engine for providing routing policies to a network switch, comprising:

providing an ADD command to the network switch, comprising a first ordinal list of operations, wherein the first ordinal list of operations comprises the following sequence of ordered operations performed in order:

(1) creating an access control list (ACL) based on a real server Internet Protocol (IP) address, a port, and protocol received from a service appliance for performing at least one network service;

(2) creating a route map based on the real server IP address, the port, and the protocol received from the service appliance;

(3) associating the ACL with the route map;

(4) programming an action for the route map based on a next-hop IP address for the service appliance performing the at least one network service; and

(5) applying the route map to a network interface;

and

providing a DELETE command to the network switch, comprising a second ordinal list of operations, wherein the second ordinal list of operations comprises the following sequence of ordered operations performed in order:

(6) removing the route map from the network interface;

(7) removing the action;

(8) removing the association of the ACL with the route map;

(9) deleting the route map; and

(10) deleting the ACL,

wherein the second ordinal list of operations is the ordinal inverse of the first ordinal list of operations.

12. The computer-implemented method of claim 11 , wherein the ADD and DELETE commands are non-blocking, and wherein the ADD and DELETE commands are configured to be mutually aware and to synchronize the routing policies upon a collision.

13. The computer-implemented method of claim 11 , wherein the protocol engine is further operable for:

providing automatic policy-based routing, the automatic policy-based routing comprising:

inferring a subnetwork from a group of IP addresses having a common policy; and

applying the common policy to the subnetwork.

14. The computer-implemented method of claim 11 , wherein the protocol engine is further operable for:

providing a persistent storage;

flagging a policy as not persistent; and

excluding the not persistent policy from the persistent storage.

15. The computer-implemented method of claim 11 , wherein the protocol engine is further operable for providing a PURGE command, comprising:

deleting a full access list in a single request; and

deleting a full route map in a single request.