IP Library › Granted Patent US 11,082,542
Granted Patent B2
US 11,082,542 · App. 16/451,723 · Granted Aug 3, 2021

Transmitting network overlay information in a service function chain

Inventors: Sebastian Jeuk (San Jose, CA); Gonzalo Salgueiro (Raleigh, NC)
Assignee: CISCO TECHNOLOGY, INC.
H04L69/22H04L45/306H04L45/38H04L45/64
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,082,542
App. No.
16/451,723
Granted
Aug 3, 2021
Kind
B2
Abstract

A packet is received at a device configured to provide a service function within a network service chain. A network overlay and/or segmentation identifier is extracted from a header of the packet. The service function is applied to the packet according to policies specific to a network overlay and/or segmentation identified in the network overlay and/or segmentation identifier.

Claims (39)

1. A method comprising:

receiving, from a first network implementing a network overlay or network segmentation, a packet at an entry node of a chain of network nodes providing network services;

extracting, at the entry node of the chain of network nodes providing network services, data identifying the network overlay or network segmentation from network overlay or network segmentation encapsulation of the packet;

stripping, at the entry node of the chain of network nodes providing network services, the network overlay or network segmentation encapsulation from the packet;

generating a header configured to route the packet through the chain of network nodes, the header comprising the data identifying the network overlay or network segmentation for re-creation of the network overlay or network segmentation encapsulation upon exiting from the chain of network nodes;

applying, at the entry node of the chain of network nodes providing network services and after stripping the network overlay or network segmentation encapsulation from the packet, the header to the packet; and

transmitting the packet through the chain of network nodes towards an exit node of the chain of network nodes.

2. The method of claim 1 , wherein the chain of network nodes providing network services comprises a network service chain.

3. The method of claim 1 , wherein the header configured to route the packet through the chain of network nodes comprises a network service header of a network service chain.

4. The method claim 3 , wherein generating the header configured to route the packet through the chain of network nodes comprises generating a metadata field of the network service header that includes the data identifying the network overlay or network segmentation.

5. The method of claim 1 , wherein the data identifying the network overlay or network segmentation comprises a Universal Cloud Classifier.

6. The method of claim 1 , wherein the network overlay or network segmentation comprises one or more of a Virtual Private Network (VPN) overlay, a Virtual Local Area Network (VLAN) overlay, a Virtual Extensible Local Area Network (VxLAN) overlay, a Generic Routing Encapsulation (GRE) overlay, a Network Virtualization using Generic Routing Encapsulation (NVGRE) overlay, a Distributed Overlay Virtual Ethernet (DOVE) overlay, a Multiprotocol Label Switching (MPLS) overlay, or a Generalized MPLS (GMPLS) overlay.

7. The method of claim 1 , wherein receiving the packet at the entry node comprises receiving the packet with an encrypted payload.

8. The method of claim 1 , wherein the network overlay or network segmentation encapsulation of the packet comprises non-network service header encapsulation.

9. A method comprising:

receiving, at an exit node of a chain of network nodes providing network services, a packet comprising a header configured to route the packet through the chain of network nodes, wherein the packet was received at the chain of network nodes from a first network implementing a network overlay or network segmentation;

extracting, at the exit node of the chain of network nodes providing network services, data identifying the network overlay or network segmentation from the header;

stripping the header configured to route the packet through the chain of network nodes;

encapsulating, at the exit node of the chain of network nodes providing network services and after stripping the header configured to route the packet through the chain of network nodes, the packet with encapsulation for the network overlay or network segmentation based upon the data identifying the network overlay or network segmentation; and

transmitting the packet into a second network implementing the network overlay or network segmentation.

10. The method of claim 9 , wherein the chain of network nodes providing network services comprises a network service chain.

11. The method of claim 9 , wherein the header configured to route the packet through the chain of network nodes comprises a network service header of a network service chain.

12. The method claim 11 , wherein extracting the data identifying the network overlay or network segmentation from the header comprises extracting the data identifying the network overlay or network segmentation from a metadata field of the network service header.

13. The method of claim 9 , wherein the data identifying the network overlay or network segmentation comprises a Universal Cloud Classifier.

14. The method of claim 9 , wherein the network overlay or network segmentation comprises one or more of a Virtual Private Network (VPN) overlay, a Virtual Local Area Network (VLAN) overlay, a Virtual Extensible Local Area Network (VxLAN) overlay, a Generic Routing Encapsulation (GRE) overlay, a Network Virtualization using Generic Routing Encapsulation (NVGRE) overlay, a Distributed Overlay Virtual Ethernet (DOVE) overlay, a Multiprotocol Label Switching (MPLS) overlay, or a Generalized MPLS (GMPLS) overlay.

15. An apparatus comprising:

one or more network interfaces configured to receive traffic from a first network implementing a network overlay or network segmentation, the traffic entering a chain of network nodes providing network services, and transmit the traffic through the chain of network nodes providing network services; and

one or more processors, wherein the one or more processors are configured to:

receive a packet via the one or more network interfaces;

extract data identifying the network overlay or network segmentation from network overlay or network segmentation encapsulation of the packet;

strip the network overlay or network segmentation encapsulation from the packet;

generate a header configured to route the packet through the chain of network nodes, the header comprising the data identifying the network overlay or network segmentation for re-creation of the network overlay or network segmentation encapsulation upon exit from the chain of network nodes;

apply, after stripping the network overlay or network segmentation encapsulation from the packet, the header to the packet; and

transmit, via the one or more network interfaces, the packet through the chain of network nodes towards an exit node of the chain of network nodes.

16. The apparatus of claim 15 , wherein the chain of network nodes providing network services comprises a network service chain.

17. The apparatus of claim 15 , wherein the header configured to route the packet through the chain of network nodes comprises a network service header of a network service chain.

18. The apparatus of claim 17 , wherein the one or more processors are configured to generate the header configured to route the packet through the chain of network nodes by generating a metadata field of the network service header that includes the data identifying the network overlay or network segmentation.

19. The apparatus of claim 15 , wherein the data identifying the network overlay or network segmentation comprises a Universal Cloud Classifier.

20. The apparatus of claim 15 , wherein the network overlay or network segmentation comprises one or more of a Virtual Private Network (VPN) overlay, a Virtual Local Area Network (VLAN) overlay, a Virtual Extensible Local Area Network (VxLAN) overlay, a Generic Routing Encapsulation (GRE) overlay, a Network Virtualization using Generic Routing Encapsulation (NVGRE) overlay, a Distributed Overlay Virtual Ethernet (DOVE) overlay, a Multiprotocol Label Switching (MPLS) overlay, or a Generalized MPLS (GMPLS) overlay.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 26, 2021
From: JEUK, SEBASTIAN; SALGUEIRO, GONZALO
To: CISCO TECHNOLOGY, INC.
Reel/Frame 055727/0442 →
Continuity (2)
Continuation 15190641 · Jun 23, 2016
Related Publication 20190320047A1 · Oct 17, 2019