WO2007128405A1 - Out-of-box services cascading - Google Patents

Out-of-box services cascading Download PDF

Info

Publication number
WO2007128405A1
WO2007128405A1 PCT/EP2007/003587 EP2007003587W WO2007128405A1 WO 2007128405 A1 WO2007128405 A1 WO 2007128405A1 EP 2007003587 W EP2007003587 W EP 2007003587W WO 2007128405 A1 WO2007128405 A1 WO 2007128405A1
Authority
WO
WIPO (PCT)
Prior art keywords
box
services
packets
vlan
servers
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/EP2007/003587
Other languages
French (fr)
Inventor
Stephan Henri Cauwels
Sebastianus Maria Samsom
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Koninklijke KPN NV
Original Assignee
Koninklijke KPN NV
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Koninklijke KPN NV filed Critical Koninklijke KPN NV
Priority to HK09107331.4A priority Critical patent/HK1129177B/en
Priority to JP2009506965A priority patent/JP4875746B2/en
Priority to CN2007800152303A priority patent/CN101433057B/en
Priority to US12/226,400 priority patent/US8428058B2/en
Publication of WO2007128405A1 publication Critical patent/WO2007128405A1/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/66Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/56Routing software
    • H04L45/563Software download or update
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/56Provisioning of proxy services
    • H04L67/563Data redirection of data network streams
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/56Provisioning of proxy services
    • H04L67/561Adding application-functional data or data for application control, e.g. adding metadata
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/56Provisioning of proxy services
    • H04L67/564Enhancement of application control based on intercepted application data
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/56Provisioning of proxy services
    • H04L67/565Conversion or adaptation of application format or content
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/56Provisioning of proxy services
    • H04L67/565Conversion or adaptation of application format or content
    • H04L67/5651Reducing the amount or size of exchanged application data

Definitions

  • the invention relates to the cascading of out-of-box services.
  • routers can offer the opportunity to intermediately route packets to an out-of-box service, in order for the out-of- box service to perform some higher layer or advanced service like e.g. data compression, before routing the packets to their intended destination.
  • this type of out-of-box routing is provided in two directions, from A to B and back from B to A.
  • an opposite flow through out-of-box interfaces X and Y is configured.
  • an inverse service can be applied to each direction, such as compression in the direction from A to B and decompression in the direction from B to A.
  • the prior art is not able to process packets in an efficient manner, when the packets need to be subjected to more than one out-of-box services via more then one out-of- box servers .
  • the aim of the invention is to discloses a more efficient approach to intermediately re-route packets, when the packets need to be subjected to more than one out-of- box services via more then one out-of-box servers.
  • the invention provides a system in which a packet router is connected to more then one out-of-box servers through one or more out-of-box interfaces.
  • the communication between the out-of-box servers is based on one or more VLANs .
  • each VLAN is assigned a specific VLAN ID and a specific by- directional packet flow through the out-of-box servers.
  • packets are subjected to a specific number and order of out-of-box services by sending the packets to a specific VLAN ID via the out-of-box-interface .
  • a single intermediate re-routing action by the router results in more then one out-of-box services performed on the packets by more then one out-of-box servers. This is most beneficial compared to the prior art and alternative approach as disclosed in WO 2006/000629, because more than one out-of-box services can be applied to intermediately routed packets, while resource consumption with respect to out-of-box interfaces, observation points and action points is largely decreased.
  • Fig. 1 shows a schematic view of a router supporting an out-of-box service according to the prior art.
  • Fig. 2 shows a schematic view of a packet flow being subjected to multiple out-of-box services according to WO 2006/000629.
  • Fig. 3 shows a schematic view of an exemplary embodiment according to the invention.
  • the invention provides a system in which a packet router is connected to more then one out-of-box servers through one or more out-of-box interfaces.
  • An exemplary embodiment in figure 3 illustrates a Router, connected to out-of-box server 1 through out-of-box interface X and to out-of-box server 3 through out-of-box interface Y.
  • the communication between the out-of-box servers is based on one or more Virtual LANs (VLANs) .
  • VLANs Virtual LANs
  • VLANs enable a group of servers on different physical LAN segments to communicate with each other as if they were all on the same physical LAN segment, by broadcasting information at layer 2.
  • Different broadcast domains can be configured to define server groups and improve communication efficiency. Each broadcast domain can be given a specific VLAN ID.
  • Each VLAN comprises a number of specific out-of-box servers, performing one or more specific out-of-box services on a packet flow.
  • Each out-of-box server comprises a forwarding table, which specifies to which out-of box server or out-of-box interface the packets are to be forwarded after performing the one or more out-of-box services on the packet flow.
  • VLAN X e.g. comprises out-of-box servers 1, 2 and 3, the out-of-box services being performed by said out-of-box servers being e.g. spam blocking, virus checking and data compression.
  • the packets processed by out-of-box server 1 are forwarded to out-of-box server 2, as specified in the forwarding table of out-of-box server 1.
  • the packets processed by out- of-box server 2 are forwarded to out-of-box server 3, as specified in the forwarding table of out-of-box server 2.
  • the packets processed by out-of-box server 3 are forwarded to out-of-box interface Y, as specified in the forwarding table of out-of-box server 3.
  • Out- of-box servers 2 and out-of-box server 1 perform the inverse operations of virus checking and spam blocking respectively and send the processed packets to the destination specified in their respective forwarding tables. This results in the packets from B being send back to the router via out-of-box interface X and from the router to A.
  • a number of VLANs can be configured, each VLAN comprising a specific number of out- of-box servers.
  • Each out-of-box server receives packets with a specific VLAN ID, performs its one or more out-of- box services and sends the packets to the destination specified in the forwarding tables of the specific VLAN.
  • a specific customer group can be recognized by the router on e.g. basic IP information, such as the 5-tupple in the IP packet header (Destination address, Source address, Protocol, Destination port, Source port) .
  • the router is able to send the packets of a recognized customer group to the appropriate VLAN, thereby triggering the out-of-box services matching the services defined for a specific customer group.
  • routing can mean routing at layer 3, but also switching at layer 2 or 4.
  • a packet can be a packet such as an IP packet, but also a frame such as a Frame Relay frame or a cell such as an ATM cell.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Supports Or Holders For Household Use (AREA)
  • Transition And Organic Metals Composition Catalysts For Addition Polymerization (AREA)
  • Solid-Sorbent Or Filter-Aiding Compositions (AREA)
  • Oscillators With Electromechanical Resonators (AREA)
  • Medicines Containing Plant Substances (AREA)

Abstract

The invention discloses an efficient approach to the cascading of out-of-box services. System comprising a packet router with out-of-box interfaces and more then one out-of-box servers performing out-of-box services, characterized in that the packet flow comprises an identifier that defines the order of out-of-box services.

Description

Title
Out-of-box services cascading
Field of the invention The invention relates to the cascading of out-of-box services.
Background of the invention
It is known that routers, commonly used for layer 3 routing, can offer the opportunity to intermediately route packets to an out-of-box service, in order for the out-of- box service to perform some higher layer or advanced service like e.g. data compression, before routing the packets to their intended destination. As illustrated in figure 1, this type of out-of-box routing is provided in two directions, from A to B and back from B to A. For each direction, an opposite flow through out-of-box interfaces X and Y is configured. In this way an inverse service can be applied to each direction, such as compression in the direction from A to B and decompression in the direction from B to A.
From WO 2006/000629 it is known that packets can be subjected to more then one out-of-box services on more than one out-of-box servers by intermediately re-routing packets through an observation point and a number of action points, thereby passing an out-of-box interface more then one time. Thus a number of intermediate re-routing actions are performed, out and into the router, which number is equal to the number of out-of-box services to be performed.
Problem definition
The prior art is not able to process packets in an efficient manner, when the packets need to be subjected to more than one out-of-box services via more then one out-of- box servers .
The system known from WO 2006/000629 is very resource consuming in terms of processor load, memory usage and interface load.
Aim of the invention
The aim of the invention is to discloses a more efficient approach to intermediately re-route packets, when the packets need to be subjected to more than one out-of- box services via more then one out-of-box servers.
Summary of the invention
The invention provides a system in which a packet router is connected to more then one out-of-box servers through one or more out-of-box interfaces.
According to an aspect of the invention, the communication between the out-of-box servers is based on one or more VLANs . According to another aspect of the invention each VLAN is assigned a specific VLAN ID and a specific by- directional packet flow through the out-of-box servers. According to yet a further aspect of the invention, packets are subjected to a specific number and order of out-of-box services by sending the packets to a specific VLAN ID via the out-of-box-interface .
According to another aspect of the invention, a single intermediate re-routing action by the router results in more then one out-of-box services performed on the packets by more then one out-of-box servers. This is most beneficial compared to the prior art and alternative approach as disclosed in WO 2006/000629, because more than one out-of-box services can be applied to intermediately routed packets, while resource consumption with respect to out-of-box interfaces, observation points and action points is largely decreased.
Brief description of the drawings
The invention will be explained in greater detail by reference to exemplary embodiments shown in the drawings, in which:
Fig. 1 shows a schematic view of a router supporting an out-of-box service according to the prior art.
Fig. 2 shows a schematic view of a packet flow being subjected to multiple out-of-box services according to WO 2006/000629.
Fig. 3 shows a schematic view of an exemplary embodiment according to the invention.
Detailed description of the invention
For the purpose of teaching of the invention, preferred embodiments of the method and system of the invention are described in the sequel. It will be apparent to the person skilled in the art that other alternative and equivalent embodiments of the invention can be conceived and reduced to practice without departing from the true spirit of the invention, the scope of the invention being only limited by the claims as finally granted.
The invention provides a system in which a packet router is connected to more then one out-of-box servers through one or more out-of-box interfaces. An exemplary embodiment in figure 3 illustrates a Router, connected to out-of-box server 1 through out-of-box interface X and to out-of-box server 3 through out-of-box interface Y. The communication between the out-of-box servers is based on one or more Virtual LANs (VLANs) . In general, VLANs enable a group of servers on different physical LAN segments to communicate with each other as if they were all on the same physical LAN segment, by broadcasting information at layer 2. Different broadcast domains (VLANs) can be configured to define server groups and improve communication efficiency. Each broadcast domain can be given a specific VLAN ID.
According to the invention, a number of VLANs with a specific VLAN ID are configured. Each VLAN comprises a number of specific out-of-box servers, performing one or more specific out-of-box services on a packet flow. Each out-of-box server comprises a forwarding table, which specifies to which out-of box server or out-of-box interface the packets are to be forwarded after performing the one or more out-of-box services on the packet flow. In the exemplary embodiment shown in figure 3, VLAN X e.g. comprises out-of-box servers 1, 2 and 3, the out-of-box services being performed by said out-of-box servers being e.g. spam blocking, virus checking and data compression. The packets processed by out-of-box server 1 are forwarded to out-of-box server 2, as specified in the forwarding table of out-of-box server 1. The packets processed by out- of-box server 2 are forwarded to out-of-box server 3, as specified in the forwarding table of out-of-box server 2. The packets processed by out-of-box server 3 are forwarded to out-of-box interface Y, as specified in the forwarding table of out-of-box server 3. In this way a number of out- of-box services on a number of out-of-box servers can be performed in a very efficient way. In contrast to the prior art solution illustrated in figure 2, only one observation/action point needs to be invoked according to the present invention and in each direction (in and out of the router) only one out-of-box interface is passed. It will be clear to a person skilled in the art that the same applies to the inverse communication path from B to A. In this case the packets are sent through out-of-box interface Y to out-of-box server 3. Out-of-box server 3 performs the inverse operation of data compression, i.e. data decompression and sends the processed packets to out- of-box server 2, as specified in the forwarding table. Out- of-box servers 2 and out-of-box server 1 perform the inverse operations of virus checking and spam blocking respectively and send the processed packets to the destination specified in their respective forwarding tables. This results in the packets from B being send back to the router via out-of-box interface X and from the router to A. According to the invention, a number of VLANs can be configured, each VLAN comprising a specific number of out- of-box servers. Each out-of-box server receives packets with a specific VLAN ID, performs its one or more out-of- box services and sends the packets to the destination specified in the forwarding tables of the specific VLAN. In this way for each VLAN ID, a specific number and order of out-of-box services can be invoked by the router, by addressing the appropriate VLAN with its corresponding VLAN ID. In terms of services, the invention will be most beneficial to implement different bundles of value-added services to different customer groups. A specific customer group can be recognized by the router on e.g. basic IP information, such as the 5-tupple in the IP packet header (Destination address, Source address, Protocol, Destination port, Source port) . According to the invention the router is able to send the packets of a recognized customer group to the appropriate VLAN, thereby triggering the out-of-box services matching the services defined for a specific customer group.
It will be clear to a person skilled in the art that the application of the invention is most beneficial compared to the prior art and alternative approach as disclosed in WO 2006/000629, because more than one out-of- box services can be applied to intermediately routed packets by a single re-routing action in the router and thus resource consumption with respect to out-of-box interfaces, observation points and action points is largely decreased.
Furthermore, it will be clear that routing can mean routing at layer 3, but also switching at layer 2 or 4. A packet can be a packet such as an IP packet, but also a frame such as a Frame Relay frame or a cell such as an ATM cell.

Claims

Claims
1. System comprising a packet router with out-of-box interfaces connected to more then one out-of-box servers performing out-of-box services on a packet flow, characterized in that said packet flow comprises an identifier that defines the order of out-of-box services.
2. System according to claim 1, in which the communication between the out-of-box servers is based on one or more
VLANs and each VLAN is assigned a specific VLAN ID.
3. System according to claim 2 in which the identifier defining the order of out-of-box servers is a VLAN ID.
4. Method comprising the intermediately re-routing of packets by a router to out-of-box services on more than one out-of-box servers via out-of-box interfaces, characterized in that the order in which the out-of-box services are performed is based on an identifier comprised in said packets.
5. Method according to claim 4 comprising
- a communication method between the out-of-box servers, said communication method being based on VLAN;
- one or more VLANs being used for the communication between the out-of-box servers;
- each VLAN being assigned a specific VLAN ID.
6. Method according to claim 5 comprising the subjection to a specific order of out-of-box services by means of the sending of the packets to a specific VLAN ID via the out- of-box interface.
PCT/EP2007/003587 2006-04-28 2007-04-24 Out-of-box services cascading Ceased WO2007128405A1 (en)

Priority Applications (4)

Application Number Priority Date Filing Date Title
HK09107331.4A HK1129177B (en) 2006-04-28 2007-04-24 Out-of-box services cascading
JP2009506965A JP4875746B2 (en) 2006-04-28 2007-04-24 Cascading out-of-box services
CN2007800152303A CN101433057B (en) 2006-04-28 2007-04-24 Cascading of out-of-box services
US12/226,400 US8428058B2 (en) 2006-04-28 2007-04-24 Out-of box services cascading

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
EP06008893.7 2006-04-28
EP06008893A EP1850555B1 (en) 2006-04-28 2006-04-28 Out-of-box services cascading

Publications (1)

Publication Number Publication Date
WO2007128405A1 true WO2007128405A1 (en) 2007-11-15

Family

ID=36992586

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2007/003587 Ceased WO2007128405A1 (en) 2006-04-28 2007-04-24 Out-of-box services cascading

Country Status (8)

Country Link
US (1) US8428058B2 (en)
EP (1) EP1850555B1 (en)
JP (1) JP4875746B2 (en)
CN (1) CN101433057B (en)
AT (1) ATE473586T1 (en)
DE (1) DE602006015286D1 (en)
ES (1) ES2348043T3 (en)
WO (1) WO2007128405A1 (en)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040093434A1 (en) * 2001-03-08 2004-05-13 Peter Hovell Address translator
US20050286512A1 (en) * 2004-06-28 2005-12-29 Atul Mahamuni Flow processing

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5963556A (en) * 1993-06-23 1999-10-05 Digital Equipment Corporation Device for partitioning ports of a bridge into groups of different virtual local area networks
US7032031B2 (en) * 2000-06-23 2006-04-18 Cloudshield Technologies, Inc. Edge adapter apparatus and method
JP4183379B2 (en) * 2000-11-27 2008-11-19 富士通株式会社 Network and edge router
EP1318628B1 (en) * 2001-12-10 2005-01-12 Alcatel Method and apparatus of directing multicast traffic in an Ethernet MAN
US7062566B2 (en) * 2002-10-24 2006-06-13 3Com Corporation System and method for using virtual local area network tags with a virtual private network
JP2004288025A (en) * 2003-03-24 2004-10-14 Fuji Xerox Co Ltd Service processor, service processing system, original data storing method of service processing system, and service processing program
WO2004114599A1 (en) * 2003-06-20 2004-12-29 Fujitsu Limited Method for connecting devices in a network and network system using the same
JP2005109694A (en) * 2003-09-29 2005-04-21 Oki Electric Ind Co Ltd Relay processor, communication apparatus and communication system
US20050080930A1 (en) * 2003-10-14 2005-04-14 International Business Machines Corporation Method and apparatus for processing service requests in a service-oriented architecture
JP2006262141A (en) * 2005-03-17 2006-09-28 Fujitsu Ltd IP address application method, VLAN changing device, VLAN changing system, and quarantine processing system

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040093434A1 (en) * 2001-03-08 2004-05-13 Peter Hovell Address translator
US20050286512A1 (en) * 2004-06-28 2005-12-29 Atul Mahamuni Flow processing

Also Published As

Publication number Publication date
DE602006015286D1 (en) 2010-08-19
US8428058B2 (en) 2013-04-23
JP2009535871A (en) 2009-10-01
JP4875746B2 (en) 2012-02-15
ATE473586T1 (en) 2010-07-15
CN101433057B (en) 2013-11-20
EP1850555B1 (en) 2010-07-07
ES2348043T3 (en) 2010-11-29
US20090097482A1 (en) 2009-04-16
CN101433057A (en) 2009-05-13
HK1129177A1 (en) 2009-11-20
EP1850555A1 (en) 2007-10-31

Similar Documents

Publication Publication Date Title
US7643424B2 (en) Ethernet architecture with data packet encapsulation
US7486674B2 (en) Data mirroring in a service
US7570648B2 (en) Enhanced H-VPLS service architecture using control word
CN102187625B (en) Transport multiplexer - mechanisms to force Ethernet traffic from one domain to be switched in a different (external) domain
CN104488234B (en) The system and method that IPv6 is scaled on the three-layer network framework at large-scale data center
US8081611B2 (en) Mobility label-based networks
CN102318291B (en) Business flow processing method, device and system
CN200990619Y (en) Routing device
EP3188422B1 (en) Traffic black holing avoidance and fast convergence for active-active pbb-evpn redundancy
US9088498B2 (en) Communication networks that provide a common transport domain for use by multiple service domains and methods and computer program products for using the same
EP2548346B1 (en) Packet node for applying service path routing at the mac layer
US20080317038A1 (en) Multiprotocol label switching (mpls) interface with virtual private network (vpn) application
US8718092B2 (en) Communication network system, network switch and bandwidth control, for site-to-site communications
US20070036161A1 (en) System and method of routing Ethernet MAC frames using Layer-2 MAC addresses
US20030210696A1 (en) System and method for routing across segments of a network switch
US20110222541A1 (en) Network System, Edge Node, and Relay Node
CN100373892C (en) Routable virtual exchange method
EP1850555B1 (en) Out-of-box services cascading
US7533183B1 (en) Central control of multiple address domains within a router
HK1129177B (en) Out-of-box services cascading
CN102763383A (en) Source based queue selection mechanism in the routing environment
EP3104562A1 (en) Method of aggregation of flows in ict networks
Sumithra et al. Creation of Virtual Private Network Over MPLS Network for Voice over Ip
KR20030031032A (en) Method for generating label value for virtual private network service provider in multi protocol label switching network

Legal Events

Date Code Title Description
DPE2 Request for preliminary examination filed before expiration of 19th month from priority date (pct application filed from 20040101)
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 07724517

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 12226400

Country of ref document: US

WWE Wipo information: entry into national phase

Ref document number: 200780015230.3

Country of ref document: CN

WWE Wipo information: entry into national phase

Ref document number: 2009506965

Country of ref document: JP

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 07724517

Country of ref document: EP

Kind code of ref document: A1