Dynamic path selection and data flow forwarding
Various techniques for dynamic path selection and data flow forwarding are disclosed. For example, various systems, processes, and computer program products for dynamic path selection and data flow forwarding are disclosed for providing dynamic path selection and data flow forwarding that can facilitate preserving/enforcing symmetry in data flows as disclosed with respect to various embodiments.
1. A system, comprising:
a processor configured to:
monitor, by a networked branch device, a plurality of network data flows of a selected application from an associated originating interface to an associated destination;
determine for each monitored network data flow of the selected application, by the networked branch device, a corresponding first path over which to forward the monitored network data flow to the associated destination, irrespective of a previous path of the monitored network data flow to the associated destination;
transmit for each monitored network data flow of the selected application, by the networked branch device, the monitored network data flow over the determined corresponding first path;
receive for each monitored network data flow of the selected application, by the networked branch device, a corresponding return data flow from the associated destination to the networked branch device;
determine for each monitored network data flow of the selected application, a corresponding second path on which the return data flow is received from the associated destination, wherein the determined corresponding second path is different from the determined corresponding first path, and wherein the determined corresponding first path comprises a plurality of hub devices;
determine, by a hub device in the determined corresponding second path, a hub device interface on which the hub device received the return data flow; and
move for each monitored network data flow of the selected application, by the networked branch device, a forward direction of the network data flow, wherein the forward direction of the network data flow is from the associated originating interface to the associated destination, to the determined corresponding second path, wherein the forward direction of the network data flow is routed through the determined hub device interface;
wherein for each monitored network data flow of the selected application, all packets following an initial packet of the network data flow in the forward direction on the determined corresponding second path are forwarded on the same second path as that initial packet in order to prevent flow asymmetry between the forward and the return network data flows; and
a memory coupled to the processor and configured to provide the processor with instructions.
2. The system of claim 1 , wherein the processor is further configured to store, in a flow table, the first paths at a Layer 4 (L4) level.
3. The system of claim 1 , wherein the processor is further configured to apply time-based application domain classification.
4. The system of claim 1 , wherein determining a first path and a second path comprises network mapping.
5. The system of claim 1 , wherein the processor is further configured to model an application session.
6. The system of claim 1 , wherein the processor is further configured to store, by the hub device, the determined hub device interface.
7. The system of claim 1 , wherein the processor is further configured to store, by the hub device, the determined hub device interface, wherein storing the determined hub device interface comprises updating a flow table in the hub device.
8. A method, comprising:
monitoring, by a networked branch device, a plurality of network data flows of a selected application from an associated originating interface to an associated destination;
determining for each monitored network data flow of the selected application, by the networked branch device, a corresponding first path over which to forward the monitored network data flow to the associated destination, irrespective of a previous path of the monitored network data flow to the associated destination;
transmitting for each monitored network data flow of the selected application, by the networked branch device, the monitored network data flow over the determined corresponding first path;
receiving for each monitored network data flow of the selected application, by the networked branch device, a corresponding return data flow from the associated destination to the networked branch device;
determining for each monitored network data flow of the selected application, a corresponding second path on which the return data flow is received from the associated destination, wherein the determined corresponding second path is different from the determined corresponding first path, and wherein the determined corresponding first path comprises a plurality of hub devices;
determining, by a hub device in the determined corresponding second path, a hub device interface on which the hub device received the return data flow; and
moving for each monitored network data flow of the selected application, by the networked branch device, a forward direction of the network data flow, wherein the forward direction of the network data flow is from the associated originating interface to the associated destination, to the determined corresponding second path, wherein the forward direction of the network data flow is routed through the determined hub device interface;
wherein for each monitored network data flow of the selected application, all packets following an initial packet of the network data flow in the forward direction on the determined corresponding second path are forwarded on the same second path as that initial packet in order to prevent flow asymmetry between the forward and the return network data flows.
9. The method of claim 8 , further comprising storing, in a flow table, the first paths at a Layer 4 (L4) level.
10. The method of claim 8 , wherein determining a first path comprises applying time-based application domain classification.
11. The method of claim 8 , wherein determining a first path and a second path comprises network mapping.
12. The method of claim 8 , further comprising modeling an application session.
13. The method of claim 8 , further comprising storing, by the hub device, the determined hub device interface.
14. The method of claim 8 , further comprising storing, by the hub device, the determined hub device interface, wherein storing the determined hub device interface comprises updating a flow table in the hub device.
15. A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
monitoring, by a networked branch device, a plurality of network data flows of a selected application from an associated originating interface to an associated destination;
determining for each monitored network data flow of the selected application, by the networked branch device, a corresponding first path over which to forward the monitored network data flow to the associated destination, irrespective of a previous path of the monitored network data flow to the associated destination;
transmitting for each monitored network data flow of the selected application, by the networked branch device, the monitored network data flow over the determined corresponding first path;
receiving for each monitored network data flow of the selected application, by the networked branch device, a corresponding return data flow from the associated destination to the networked branch device;
determining for each monitored network data flow of the selected application, a corresponding second path on which the return data flow is received from the associated destination, wherein the determined corresponding second path is different from the determined corresponding first path, and wherein the determined corresponding first path comprises a plurality of hub devices;
determining, by a hub device in the determined corresponding second path, a hub device interface on which the hub device received the return data flow; and
moving for each monitored network data flow of the selected application, by the networked branch device, a forward direction of the network data flow, wherein the forward direction of the network data flow is from the associated originating interface to the associated destination, to the determined corresponding second path, wherein the forward direction of the network data flow is routed through the determined hub device interface;
wherein for each monitored network data flow of the selected application, all packets following an initial packet of the network data flow in the forward direction on the determined corresponding second path are forwarded on the same second path as that initial packet in order to prevent flow asymmetry between the forward and the return network data flows.
16. The computer program product of claim 15 , further comprising computer instructions for storing, in a flow table, the first paths at a Layer 4 (L4) level.
17. The computer program product of claim 15 , wherein determining a first path comprises applying time-based application domain classification.
18. The computer program product of claim 15 , wherein determining a first path and a second path comprises network mapping.
19. The computer program product of claim 15 , further comprising computer instructions for modeling an application session.
20. The computer program product of claim 15 , further comprising computer instructions for storing, by the hub device, the determined hub device interface.
21. The computer program product of claim 15 , further comprising computer instructions for storing, by the hub device, the determined hub device interface, wherein storing the determined hub device interface comprises updating a flow table in the hub device.