IP Library Granted Patent US 9,923,773
Granted Patent B2
US 9,923,773 · App. 14/730,637 · Granted Mar 20, 2018

Dynamic, broker-based virtual service platform (VSP) engagement for computer networks

Inventors: Dana L. Blair (Alpharetta, GA); Anand Oswal (Pleasanton, CA)
Assignee: Cisco Technology, Inc.
H04L41/0893H04L12/4641H04L45/586H04L45/70H04L47/20H04L47/783H04L47/825
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,923,773
App. No.
14/730,637
Granted
Mar 20, 2018
Kind
B2
Abstract

In one embodiment, a device in a network determines one or more network metrics regarding operation of the network. The device determines one or more policy constraints regarding the routing of network traffic through a virtual service platform (VSP). The device generates a VSP usage policy based on the one or more network metrics and on the one or more policy constraints. The VSP usage policy is operable to cause traffic in the network to be routed through a particular VSP that is selected based on the VSP usage policy. The device causes the VSP usage policy to be implemented in the network.

Claims (45)

1. A method comprising:

determining, by a device in a network, one or more network metrics regarding operation of the network;

determining, by the device, one or more policy constraints regarding the routing of network traffic from a first routing domain through a virtual service platform (VSP) to a second routing domain;

dynamically generating, by the device, a VSP usage policy based on the one or more network metrics and on the one or more policy constraints, wherein the VSP usage policy is operable to cause traffic in the network to be routed through a particular VSP that is selected based on the VSP usage policy, wherein the VSP is in between the first routing domain and the second routing domain;

controlling, by the device, a router to route traffic through the particular VSP that is selected by the device based on the VSP usage policy by establishing a virtual private network (VPN) tunnel to the VSP;

detecting, by the device, a change in the network;

adjusting, by the device, the VSP usage policy based on the detected change;

causing, by the device, the adjusted VSP usage policy to be implemented in the network, wherein the adjusted VSP usage policy is operable to cause the traffic to be routed through a different VSP than the particular VSP; and

providing, by the device, a wireless service provider policy to a router, wherein the wireless service provider policy is operable to cause the router to use a particular wireless service provider to send the traffic.

2. The method as in claim 1 , wherein the one or more policy constraints comprise at least one of: a geographic region associated with the particular VSP; an operator of the particular VSP; a time period associated with the particular VSP, or a type of traffic associated with the particular VSP.

3. The method as in claim 2 , wherein determining the one or more policy constraints comprises:

receiving, at the device, the one or more policy constraints from a user interface.

4. The method as in claim 1 , wherein the VSP usage policy is operable to cause the router to route traffic through the particular VSP based on at least one of: a time of day, a geographic location associated with the traffic, in response to detecting an anomaly in the traffic, a source or destination of the traffic, or a type associated with the traffic.

5. The method as in claim 1 , wherein causing the VSP usage policy to be implemented in the network comprises:

providing, by the device, the VSP usage policy to a router.

6. The method as in claim 1 , wherein the one or more network metrics comprise at least one of: a bandwidth, a variation in the bandwidth, a traffic volume, or a data usage cost.

7. The method as in claim 1 , wherein the particular VSP is operable to perform a service for the traffic comprising at least one of: content caching, traffic analytics, or a security operation on the traffic.

8. An apparatus, comprising:

one or more network interfaces to communicate with a computer network;

a processor coupled to the one or more network interfaces and configured to execute a process; and

a memory configured to store the process executable by the processor, the process when executed operable to:

determine one or more network metrics regarding operation of the network;

determine one or more policy constraints regarding the routing of network traffic from a first routing domain through a virtual service platform (VSP) to a second routing domain;

dynamically generate a VSP usage policy based on the one or more network metrics and on the one or more policy constraints, wherein the VSP usage policy is operable to cause traffic in the network to be routed through a particular VSP that is selected based on the VSP usage policy, wherein the VSP is in between the first routing domain and the second routing domain;

control a router to route traffic through the particular VSP that is selected by the device based on the VSP usage policy by establishing a virtual private network (VPN) tunnel to the VSP;

detect a change in the network;

adjust the VSP usage policy based on the detected change;

cause the adjusted VSP usage policy to be implemented in the network, wherein the adjusted VSP usage policy is operable to cause the traffic to be routed through a different VSP than the particular VSP; and

provide a wireless service provider policy to a router, wherein the wireless service provider policy is operable to cause the router to use a particular wireless service provider to send the traffic.

9. The apparatus as in claim 8 , wherein the one or more policy constraints comprise at least one of: a geographic region associated with the particular VSP; an operator of the particular VSP; a time period associated with the particular VSP, or a type of traffic associated with the particular VSP.

10. The apparatus as in claim 9 , wherein the apparatus determines the one or more policy constraints by receiving the one or more policy constraints from a user interface.

11. The apparatus as in claim 8 , wherein the VSP policy is operable to cause the router to route traffic through the particular VSP based on at least one of: a time of day, a geographic location associated with the traffic, in response to detecting an anomaly in the traffic, a source or destination of the traffic, or a type associated with the traffic.

12. The apparatus as in claim 8 , wherein the apparatus causes a router to implement the VSP usage policy by providing the VSP policy to the router.

13. The apparatus as in claim 8 , wherein the one or more network metrics comprise at least one of: a bandwidth, a variation in the bandwidth, a traffic volume, or a data usage cost.

14. The apparatus as in claim 8 , wherein the particular VSP is operable to perform a service for the traffic comprising at least one of: content caching, traffic analytics, or a security operation on the traffic.

15. A tangible, non-transitory, computer-readable media having software encoded thereon, the software when executed by a processor on a device in a computer network operable to:

determine one or more network metrics regarding operation of the network;

determine one or more policy constraints regarding the routing of network traffic from a first routing domain through a virtual service platform (VSP) to a second routing domain;

dynamically generate a VSP usage policy based on the one or more network metrics and on the one or more policy constraints, wherein the VSP usage policy is operable to cause traffic in the network to be routed through a particular VSP that is selected based on the VSP usage policy, wherein the VSP is in between the first routing domain and the second routing domain;

control a router to route traffic through the particular VSP that is selected by the device based on the VSP usage policy by establishing a virtual private network (VPN) tunnel to the VSP;

detect a change in the network;

adjust the VSP usage policy based on the detected change;

cause the adjusted VSP usage policy to be implemented in the network, wherein the adjusted VSP usage policy is operable to cause the traffic to be routed through a different VSP than the particular VSP; and

provide a wireless service provider policy to a router, wherein the wireless service provider policy is operable to cause the router to use a particular wireless service provider to send the traffic.

16. The computer-readable media as in claim 15 , wherein the VSP policy is operable to cause the router to route traffic through the particular VSP based on at least one of: a time of day, a geographic location associated with the traffic, in response to detecting an anomaly in the traffic, a source or destination of the traffic, or a type associated with the traffic.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 5, 2015
From: BLAIR, DANA L.; OSWAL, ANAND
To: CISCO TECHNOLOGY, INC.
Reel/Frame 035833/0813 →
Continuity (1)
Related Publication 20160359672A1 · Dec 8, 2016