Application identification and path selection at a wireless access point for local network traffic breakout
A wireless access point comprises a memory; and one or more processors operably coupled to the memory configured to: receive a first packet for an application; configure an initial packet flow for the application including a first forwarding action to send traffic for the application via a tunnel path; learn the application of the first packet; generate, based on a policy of the application, an entry in an application server address cache specifying an address of the application server and a second forwarding action to send traffic for the application via a local breakout path; receive a second packet for the application; and configure, in response to determining that a destination address of the second packet matches the entry in the application server address cache, a subsequent packet flow for the application including the second forwarding action to send traffic for the application via the local breakout path.
1. A method comprising:
receiving, by a wireless access point, a first packet for an application provided by an application server;
configuring, by the wireless access point, an initial packet flow for the application including a first forwarding action to send traffic for the application to the application server via a tunnel path;
learning, by the wireless access point, the application of the first packet;
generating, by the wireless access point and based on a policy of the application, an entry in an application server address cache specifying an address of the application server and a second forwarding action to send traffic for the application to the application server via a local breakout path;
receiving, by the wireless access point, a second packet for the application;
configuring, by the wireless access point and in response to determining that a destination address of the second packet matches the entry in the application server address cache, a subsequent packet flow for the application including the second forwarding action to send traffic for the application to the application server via the local breakout path;
receiving, by the wireless access point, a third packet for the application; and
in response to determining the third packet is associated with the subsequent packet flow, sending, by the wireless access point and based on the second forwarding action, the third packet to the application server via the local breakout path.
2. The method of claim 1 , further comprising:
receiving, by the wireless access point, a fourth packet for the application; and
in response to determining the fourth packet is associated with the initial packet flow, sending, by the wireless access point and based on the first forwarding action, the fourth packet for the application to the application server via the tunnel path.
3. The method of claim 1 , wherein learning the application of the first packet comprises:
sending, by the wireless access point, the first packet to a deep packet inspection engine; and
receiving, by the wireless access point and from the deep packet inspection engine, classification information of the application.
4. The method of claim 1 , wherein generating the entry in the application server address cache specifying the address of the application server comprises:
determining the address of the application server from the destination address of the first packet.
5. The method of claim 1 , wherein the policy comprises:
at least one of the application name and the application identifier; and
the second forwarding action.
6. The method of claim 5 , wherein generating the entry in the application server address cache specifying the second forwarding action comprises:
determining the second forwarding action from the policy.
7. A wireless access point comprising:
a memory;
one or more processors operably coupled to the memory, wherein the one or more processors are configured to:
receive a first packet for an application provided by an application server;
configure an initial packet flow for the application including a first forwarding action to send traffic for the application to the application server via a tunnel path;
learn the application of the first packet;
generate, based on a policy of the application, an entry in an application server address cache specifying an address of the application server and a second forwarding action to send traffic for the application to the application server via a local breakout path;
receive a second packet for the application;
configure, in response to determining that a destination address of the second packet matches the entry in the application server address cache, a subsequent packet flow for the application including the second forwarding action to send traffic for the application to the application server via the local breakout path;
receive a third packet for the application; and
in response to determining the third packet is associated with the subsequent packet flow, send, based on the second forwarding action, the third packet to the application server via the local breakout path.
8. The wireless access point of claim 7 , wherein the one or more processors are further configured to:
receive a fourth packet for the application; and
in response to determining the fourth packet is associated with the initial packet flow, send, based on the first forwarding action, the fourth packet for the application to the application server via the tunnel path.
9. The wireless access point of claim 7 , wherein, to learn the application of the first packet, the one or more processors are further configured to:
send the first packet to a deep packet inspection engine; and
receive, from the deep packet inspection engine, classification information of the application.
10. The wireless access point of claim 7 , wherein, to generate the entry in the application server address cache specifying the address of the application server, the one or more processors are further configured to:
determine the address of the application server from the destination address of the first packet.
11. The wireless access point of claim 7 , wherein the policy comprises:
at least one of the application name and the application identifier; and
the second forwarding action.
12. The wireless access point of claim 11 , wherein, to generate the entry in the application server address cache specifying the second forwarding action, the one or more processors are further configured to:
determine the second forwarding action from the policy.
13. A non-transitory computer-readable storage medium storing instructions that when executed, cause one or more programmable processors of a wireless access point to:
receive a first packet for an application provided by an application server;
configure an initial packet flow for the application including a first forwarding action to send traffic for the application to the application server via a tunnel path;
learn the application of the first packet;
generate, based on a policy of the application, an entry in an application server address cache specifying an address of the application server and a second forwarding action to send traffic for the application to the application server via a local breakout path;
receive a second packet for the application;
configure, in response to determining that a destination address of the second packet matches the entry in the application server address cache, a subsequent packet flow for the application including the second forwarding action to send traffic for the application to the application server via the local breakout path;
receive a third packet for the application; and
in response to determining the third packet is associated with the subsequent packet flow, send, based on the second forwarding action, the third packet to the application server via the local breakout path.
14. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions further cause one or more programmable processors of the wireless access point to:
receive a fourth packet for the application; and
in response to determining the fourth packet is associated with the initial packet flow, send, based on the first forwarding action, the fourth packet for the application to the application server via the tunnel path.
15. The non-transitory computer-readable storage medium of claim 13 , wherein, to learn the application of the first packet, the instructions further cause one or more programmable processors of the wireless access point to:
send the first packet to a deep packet inspection engine; and
receive, from the deep packet inspection engine, classification information of the application.
16. The non-transitory computer-readable storage medium of claim 13 , wherein, to generate the entry in the application server address cache specifying the address of the application server, the instructions further cause one or more programmable processors of the wireless access point to:
determine the address of the application server from the destination address of the first packet.
17. The non-transitory computer-readable storage medium of claim 13 , wherein the policy comprises:
at least one of the application name and the application identifier; and
the second forwarding action, and
wherein, to generate the entry in the application server address cache specifying the second forwarding action, the instructions further cause one or more programmable processors of the wireless access point to:
determine the second forwarding action from the policy.