Adaptive edge-implemented traffic policy in a data processing network
In one aspect, a disclosed method of processing a network packet received by an edge device from a client in a data processing network includes determining a priority category of the network packet when the priority category is indicative of a priority associated with the packet. The method further includes determining a value of a traffic state parameter. The traffic state parameter indicates a level of traffic activity in a backbone network to which the edge device is connected. A traffic policy is then determined that is applicable to the level of traffic activity and the priority category of the network packet. The network packet is then blocked from traversing or permitted to traverse the network packet edge device based on the determined traffic policy. Determining the priority category may include determining a transport protocol port number of the network packet.
1. A method, comprising:
determining a category of a network packet received by an edge device from a client;
determining a value of a traffic parameter, wherein the traffic parameter is indicative of a level of traffic activity in a private network to which the edge device is connected;
determining a traffic policy applicable for the level of traffic activity and the category of the network packet; and
determining whether to block the network packet from traversing the edge device based on the traffic policy;
wherein the value of the traffic parameter applies to all categories of network packets; and
wherein determining the category comprises determining a transport protocol port number of the network packet.
2. The method of claim 1 , wherein determining the traffic policy comprises looking up the traffic policy in a traffic policy table based on the category and the value of the traffic parameter.
3. The method of claim 1 , wherein determining the traffic policy comprises selecting the traffic policy based on an environmental factor.
4. The method of claim 3 , wherein the environmental factor is determined at least in part by a time of day value.
5. The method of claim 1 , wherein determining the value of the traffic parameter includes periodically receiving the value of the traffic parameter from a provider server.
6. A non-transitory computer readable medium storing program instructions, executable by a processor, the program instructions comprising instructions enabling the processor to perform operations to:
determine a category of a network packet received by an edge device from a client;
determine a value of a traffic parameter, wherein the traffic parameter is indicative of a level of traffic activity in a private network to which the edge device is connected and wherein the value of the traffic parameter applies to all categories of network packets;
determine a traffic policy applicable for the level of traffic activity and the category of the network packet; and
determine whether to block the network packet from traversing the edge device based on the determined traffic policy;
wherein determining the category comprises determining a transport protocol port number of the network packet.
7. The non-transitory computer readable medium of claim 6 , wherein determining the value of the traffic parameter includes periodically receiving a value of the traffic parameter from a provider server.
8. The non-transitory computer readable medium of claim 6 , wherein determining the traffic policy comprises looking up the traffic policy in a traffic policy table based on the category and the value of the traffic parameter.
9. The non-transitory computer readable medium of claim 6 , wherein determining the traffic policy comprises selecting the determined traffic policy from multiple traffic policies wherein selecting the traffic policy comprises selecting the traffic policy based on an environmental factor.
10. The non-transitory computer readable medium of claim 9 , wherein the environmental factor is determined at least in part by a time of day value.
11. An edge device for use in a data processing network, the edge device comprising:
a private interface to communicate with a provider server via a private network;
an access interface to communicate with a client via an access network; and
a processor in communication with the private interface and the access interface and configured to access a storage resource containing instructions, executable by the processor, wherein the instructions include instructions enabling the processor to:
determine a category of the network packet;
determine a value of a traffic parameter, wherein the traffic parameter is indicative of a level of traffic activity in a private network to which the edge device is connected and wherein the value of the traffic parameter is the same for all categories of network packets;
determine a traffic policy applicable for the level of traffic activity and the category of the network packet; and
determine whether to block the network packet from traversing the edge device based on the determined traffic policy;
wherein determining the category includes determining a transport protocol port number of the network packet.
12. The edge device of claim 11 , wherein determining the value of the traffic parameter includes periodically receiving a value of the traffic parameter from a provider server.
13. The edge device of claim 11 , wherein determining the traffic policy includes selecting the determined traffic policy from multiple traffic policies wherein selecting the traffic policy includes selecting the traffic policy based on an environmental factor.
14. The edge device of claim 13 , wherein the environmental factor is determined at least in part by a time of day value.
15. The edge device of claim 11 , wherein the value of the traffic parameter is selected from a finite set of defined traffic states.
16. The edge device of claim 15 , wherein the finite set of defined traffic states include a low traffic state, a medium traffic state, and a high traffic state.