Selective data transmission in networks
Implementations generally relate to data transmission in networks. In some implementations, a method includes determining communication paths in a network, where the communication paths connect a plurality of network nodes, and where the network nodes include one or more edge devices and one or more core devices. The method further includes determining if a forwarding information base (FIB) is permitted at at least one network node. The method further includes filtering one or more packets at the at least one network node if the FIB is not permitted. The method further includes enabling traffic flow of one or more packets at the at least one network node if the FIB is permitted.
1. A computer-implemented method comprising:
determining communication paths in a network, wherein the communication paths connect a plurality of network nodes, and wherein the network nodes include one or more edge devices and one or more core devices;
determining if a forwarding information base (FIB) is permitted at at least one network node based on one or more access policies;
denying packet flow by not allowing FIB records to be downloaded based on the one or more access policies;
filtering, at a control plane, one or more packets at the at least one network node if the FIB is not permitted, wherein the filtering of the one or more packets comprises dropping the one or more packets before reaching a data plane, and wherein the filtering of the one or more packets eliminates a need to use filter rules in the data plane for the one or more packets: and
enabling traffic flow of one or more of the packets at the at least one network node if the FIB is permitted.
2. The method of claim 1 , wherein the determining of the communication paths is based on shortest path bridging.
3. The method of claim 1 , wherein the determining if the FIB is permitted is based on one or more access policies, and wherein one or more of the access polices are unicast protocol access policies.
4. The method of claim 1 , wherein the determining if the FIB is permitted is based on one or more access policies, and wherein one or more of the access polices restrict communication between at least two different network nodes.
5. The method of claim 1 , wherein the filtering comprises:
determining that the FIB is not permitted; and
dropping one or more of the packets in response to determining that the FIB is not permitted.
6. The method of claim 1 , wherein, if the FIB is permitted, the method further comprises:
downloading the FIB; and
enabling traffic flow of one or more of the packets using the downloaded FIB.
7. A non-transitory computer-readable storage medium with program instructions stored thereon, the instructions when executed by one or more processors cause the one or more processors to perform operations comprising;
determining communication paths in a network, wherein the communication paths connect a plurality of network nodes, and wherein the network nodes include one or more edge devices and one or more core devices;
determining if a forwarding information base (FIB) is permitted at at least one network node based on one or more access policies;
denying packet flow by not allowing FIB records to be downloaded based on the one or more access policies:
filtering, at a control plane, one or more packets at the at least one network node if the FIB is not permitted, wherein the filtering of the one or more packets comprises dropping the one or more packets before reaching a data plane, and wherein the filtering of the one or more packets eliminates a need to use filter rules in the data plane for the one or more packets for the one or more packets: and
enabling traffic flow of one or more of the packets at the at least one network node if the FIB is permitted.
8. The computer-readable storage medium of claim 7 , wherein the determining of the communication paths is based on shortest path bridging.
9. The computer-readable storage medium of claim 7 , wherein the determining if the FIB is permitted is based on one or more access policies, and wherein one or more of the access polices are unicast protocol access policies.
10. The computer-readable storage medium of claim 7 , wherein the determining if the FIB is permitted is based on one or more access policies, and wherein one or more of the access polices restrict communication between at least two different network nodes.
11. The computer-readable storage medium of claim 7 , wherein, to filter the one or more packets, the instructions further cause the one or more processors to perform operations comprising:
determining that the FIB is not permitted; and
dropping one or more of the packets in response to determining that the FIB is not permitted.
12. The computer-readable storage medium of claim 7 , wherein, if the FIB is permitted, the instructions further cause the one or more processors to perform operations comprising:
downloading the FIB; and
enabling traffic flow of one or more of the packets using the downloaded FIB.
13. A system comprising; one or more processors; and
logic encoded in one or more non-transitory computer-readable storage media for execution by the one or more processors and when executed operable to perform operations comprising:
determining communication paths in a network, wherein the communication paths connect a plurality of network nodes, and wherein the network nodes include one or more edge devices and one or more core devices;
determining if a forwarding information base (FIB) is permitted at at least one network node based on one or more access policies;
denying packet flow by not allowing FIB records to be downloaded based on the one or more access policies:
filtering at a control plane, one or more packets at the at least one network node if the FIB is not permitted, wherein the filtering of the one or more packets comprises dropping the one or more packets before reaching a data plane, and wherein the filtering of the one or more packets eliminates a need to use filter rules in the data plane for the one or more packets: and
enabling traffic flow of one or more of the packets at the at least one network node if the FIB is permitted.
14. The system of claim 13 , wherein the determining of the communication paths is based on shortest path bridging.
15. The system of claim 13 , wherein the determining if the FIB is permitted is based on one or more access policies, and wherein one or more of the access polices are unicast protocol access policies.
16. The system of claim 13 , wherein the determining if the FIB is permitted is based on one or more access policies, and wherein one or more of the access polices restrict communication between at least two different network nodes.
17. The system of claim 13 , wherein, to filter the one or more packets, the logic when executed is further operable to perform operations comprising:
determining that the FIB is not permitted; and
dropping one or more of the packets in response to determining that the FIB is not permitted.