Methods and systems for embedding traffic state information within ethernet trailers

Methods and systems for creating a back channel between two network nodes using a packet trailer. The sending node establishes a communication channel between itself and the destination node. A packet is prepared having a header and a payload. Data associated with the tasks of the back channel from a lower data link layer is written into a trailer on the header. The packet is received at the second node and the data in the trailer is read. The trailer is stripped out prior to sending the packet to a higher layer of the destination node.

FIELD OF THE INVENTION

This invention generally relates to network communications and more particularly, to a method and systems for sending node data through an Ethernet trailer.

BACKGROUND

Commonly known local area networks (LAN) such as an Ethernet based network communicate data via packets having a set format. Control of packet traffic in a network is critical to insure balanced communication flow and efficient transmission. Such packets are sent between a source network node and a destination node over a communication medium such as coaxial cable or twisted pair wire. Each packet typically has a header that contains limited routing information, and a payload. The amount of information in the header is limited to a destination node address and is fixed for the packet. Thus, dynamic information such as the state of various network devices that could be useful for traffic control is not available during the routing of the packet.

The most common method of local area network communication is the Ethernet protocol that is a family of frame-based computer networking technologies for local area networks. The Ethernet protocol is standardized as IEEE 802.3 and defines a number of wiring and signaling standards for the physical layer, through means of network access at the Media Access Control (MAC)/Data Link Layer, and a common addressing format.

The combination of the twisted pair versions of Ethernet for connecting end systems to the network, along with the fiber optic versions for site backbones, is the most widespread wired LAN technology. Ethernet nodes communicate by sending each other data packets that are individually sent and delivered. Each Ethernet node in a network is assigned a 48-bit MAC address. The MAC address is used both to specify the destination and the source of each data packet in the header. Network interface cards (NICs) or chips on each node normally do not accept packets addressed to other Ethernet nodes.

There have been a number of legacy Ethernet features that do not have any present application. For example, a trailer of variable size may be added to the end of an Ethernet packet according to RFC 893, and may contain information such as CRC values. Network resources may strip away the information contained in the trailer (e.g., a CRC value) and payload portions of the packet. This was standardized by RFC893 to allow certain platforms to process packets aligned on page boundaries by moving variable length header fields to the end of the packet. However, the physical layer devices still forward packets that contain an arbitrary amount of data in the trailer after the proper end of the data payload in the packet. Identifying this data requires a conceptual packet length, for example the length filed in the header of the packet. Once the payload length has been determined, any trailing data may be identified and consumed by an appropriate monitoring agent such as a receiving node. Once the packet enters the stack in the node, the node will strip off any trailing data before passing upwards to the next layer. Trailers are strictly a link level packet format and are not visible (when properly implemented) in any higher level protocol processing.

SUMMARY

According to one example, a method for back channel communication using a lower data link layer involving two nodes in a network is described. A communication channel is established between the two nodes. A packet is prepared having a header, a payload and a trailer. Data associated with tasks of the back channel is written into the trailer on the header. The packet is received at the second node and the data in the trailer is read. The trailer is stripped out prior to sending the payload to a higher layer of the node.

According to another example, a machine readable medium having stored thereon instructions for establishing a back channel communication between the data link layers involving two network nodes is disclosed. The stored instructions include machine executable code, which when executed by at least one machine processor, causes the machine to establish a communication channel between the two nodes. The instructions further cause the machine processor to prepare a packet having a header, a payload and a trailer. The instructions further cause the machine processor to write data associated with the tasks of the back channel into the trailer on the header. The instructions further cause the machine processor to receive the packet at the second node and reading the data in the trailer. The instructions further cause the machine processor to strip out the trailer prior to sending the packet to a higher layer of the node.

Another example is a network node on an Ethernet based local area network. The network node includes a network interface for a communication channel to another network node. The network node includes a lower data link layer. The network node includes a controller for preparing a packet having a header and a payload. The controller writes data associated with tasks of a back channel from the data link into a trailer on the header for back channel communication to another network node.

Additional aspects will be apparent to those of ordinary skill in the art in view of the detailed description of various embodiments, which is made with reference to the drawings, a brief description of which is provided below.

DETAILED DESCRIPTION

Currently, the ability to guarantee useful network functions such as diagnostics or intelligent traffic routing is limited by lack of information available to a node from a received packet. The header and payload of a packet which provide direct communication between nodes have inaccessible data that cannot be used for more advantageous network functions at network levels.

FIG. 1shows a network system100that may include a series of one or more application servers102,104and106and at least one optional traffic management device110in a private local area network108. The application servers102,104,106and the traffic management device110may be network nodes of the private local area network108. The private local area network108may also include other nodes such as a storage device112, a printer114and workstations116,118and120. In this example, the traffic management device110is logically interposed between the network nodes such as the application servers102,104and106in the private local area network108, although other arrangements may be used in other network environments. It is to be understood that the servers102,104and106may be hardware or software or may represent a system with multiple servers which may include internal networks. In this example the servers102,104and106may be hardware server devices operating any version of Microsoft® IIS servers and/or Apache® servers, although other types of servers may be used. Further, additional servers and workstations and other devices may be coupled to the system100or the private local area network108and many different types of applications may be available on servers coupled to the system100. As will be explained below, the private local area network108may allow network nodes to exchange packets that include trailers having back channel data, such as traffic management data. Each of the network nodes, such as application servers102,104and106, traffic management device110, storage device112, printer114and workstations116,118and120, include a network interface such as a network interface card for establishing a communication channel to another network node.

In this example, the traffic management device110may be the BIG-IP® traffic manager available from F5 Networks, Inc. of Seattle, Wash. The traffic management device110may provide a connection to a wide area network (WAN)130and manage traffic to and from the wide area network130to the private local area network108. The wide area network120may include any publicly accessible network environment, such as the Internet, which includes network components, such as public servers that are not directly managed or under direct control by the traffic management device110, yet whose operation may still be influenced in unique, novel and unexpected ways in response to TCP/IP protocol directives strategically purposefully determined and sent from the traffic management device110to make the private local area network108, and perhaps the wide area network120, operate more efficiently, as will be described in greater detail herein. It should be noted, however, that the ensuing descriptions of the various functionalities relating to the private servers102,104and106are generally applicable to the network devices coupled to the wide area network130, and thus the remaining description will simply refer to either one as servers102,104and106unless noted otherwise.

In this example, the private local area network108may be a local area network (LAN) environment employing any suitable interface mechanisms and communications technologies including, for example telecommunications in any suitable form (e.g., voice, modem, and the like), Public Switched Telephone Network (PSTNs), Ethernet based Packet Data Networks (PDNs), combinations thereof, and the like. Moreover, private local area network108may be made up of one or more interconnected LANs located in substantially the same geographic location or geographically separated, although the private local area network108may include other types of networks arranged in other configurations. Moreover, the private local area network108may include one or more additional intermediary and/or network infrastructure devices in communication with each other via one or more wired and/or wireless network links, such as switches, routers, modems, or gateways (not shown), and the like, as well as other types of network devices including network storage devices.

The traffic management device110may be interposed between the servers102,104and106and the wide area network120as shown inFIG. 1. From the perspective of the clients of the wide area network120, they have directly established a connection in the usual way to the appropriate servers102,104and106and respective server applications. The existence of a proxy connection may be entirely transparent to a requesting client computer. The implementation of such a proxy may be performed with known address spoofing techniques to assure transparency, although other methods could be used. The traffic management device110may provide high availability of IP applications/services running across multiple servers such as the servers102,104and106.

In this example, the traffic management device110may include a traffic management OS which may have a modular structure with different modules to perform various network traffic management functions. In this example, the modules of the traffic management OS may include a local traffic management module that may be used to analyze traffic data and manage traffic between nodes of the private local area network108inFIG. 1. It is to be understood that the network traffic management modules of the traffic management OS may also be run on other nodes of the private local area network108. The traffic management OS features architectural elements of a proxy approach, high-speed performance, modular functionality. The traffic management OS in this example may be customized to the needs of a particular network.

An example of the traffic management OS may be the TMOS® platform available from F5 Networks, Inc. of Seattle, Wash., although other traffic management applications could be used. The traffic management OS may provide functions such as performance, security, availability and management. The traffic management OS may provide shared application services such as iRules, rate shaping, resource cloaking, transaction assurance, universal persistence, caching, compression, encryption, authentication, application health monitors and application switching that are run by the application modules. The traffic management OS may also provide shared network services including TCP Express™, protocol sanitization, high performance SSL, DoS and DDos protection, VLAN segmentation, line rate switching, IP packet filtering, dynamic routing, secure network address translation, port mapping and common management framework.

Communications between the network nodes on the private local area network108may be conducted via the Ethernet standard in this example. Communications may be made in a data payload in an Ethernet packet sent between a source node and a destination node on the private local area network108. The Ethernet standard may allow a trailer to be added to Ethernet packets according to RFC 893 by a source node. The physical layer of the node device still forwards packets that contain an arbitrary but up to a maximum transmission unit (MTU) amount of data after the proper end of the data payload in the packet. Once the trailer length has been determined, any trailing data of the packet may be identified and consumed by an appropriate monitoring agent such as an algorithm or application on the destination node.

Once the packet enters the destination node, the destination node will strip off any trailer data before passing the payload upwards to the next layer in the destination node. Trailers are strictly a data link level packet format and are not visible (when properly implemented) in any higher level protocol processing at the node. The trailer thus creates a back channel between the data link level layers of the nodes of the private local area network108.

FIG. 2is a block diagram of a packet200, which when assigned a trailer according to RFC893, may be used as a back channel between nodes on the private local area network108inFIG. 1. The packet200may include a header202, a payload204, a CRC field206, and a trailer208. The header202, payload204, and CRC field206may all be a set length according to the Ethernet protocol. The trailer length is a variable having a value up to a limit set by the maximum transmission unit for the private local area network108. The header202in turn includes a source MAC address field210, a destination MAC address field212and an Ether type field214that may be written by the source node. The header202also includes a trailer payload length field216that may include the length of the trailer208.

Since the Ethernet frame allows trailers to be specified over communication links, this provides an opportunity for packet flow state information to be passed directly between the destination and source nodes unknown to the operational components of the nodes. In addition, debugging information may be inserted in the trailer such as per-packet upstream routing and security of priority judgments. Of course other issues that require decisions to be made on a per packet or per flow basis in a separate computation unit then where the result must be applied may use the trailer.

The nodes of the private local area network108may include various diagnostic or traffic information in the trailer of the packets when they send packets to other nodes in the private local area network108. When the packet is received by a destination node, the trailer is stripped away and the information may be read by a diagnostic or traffic management application. In this example, such data may include information about the internal state of the packet from a node such as the servers102,104and106or the traffic management device110. Such information may include the core initiating the packet, the connections of the nodes, flags that may be set, and operational descriptions. Additional information may include connection flags, the type of connection, physical interfaces, the VLAN identification of related connections and addresses, and various security assessments or guarantees. The information may be used by diagnostic tools such as TCP Dump. Other applications may include router topology exchange and content filters of the payload which may aid in network traffic management by the network via the traffic management device110. Still other applications may be using the information for a security or intrusion detection system to scan or cryptographically sign/verify individual packets as they pass within the system100.

Each of the client computers116,118and120, servers102,104and106, and the traffic management device110described above, and shown inFIG. 4, may include a central processing unit (CPU) (also referred to as a controller or processor)400, an input/output system402, a memory404, and an interface system406which are coupled together by a bus408or other link, although other numbers and types of each of the components and other configurations and locations for the components can be used. The processor400in the traffic management device110may execute a diagnosis module410which is a program of stored instructions for one or more aspects of the methods and systems as described herein, including for diagnostics or network traffic management, although the processor could execute other types of programmed instructions. The memory404may store these programmed instructions for one or more aspects of the methods and systems as described herein, including the method for increasing the transmission efficiency, although some or all of the programmed instructions could be stored and/or executed elsewhere. A variety of different types of memory storage devices, such as a random access memory (RAM) or a read only memory (ROM) in the system or a floppy disk, hard disk, CD ROM, DVD ROM, or other computer readable medium which is read from and/or written to by a magnetic, optical, or other reading and/or writing system that is coupled to the processor, may be used for the memory. The user input device of the input/output system402may comprise a computer keyboard and a computer mouse, although other types and numbers of user input devices may be used. The display of the input/output system402may comprise a computer display screen, such as a CRT or LCD screen by way of example only, although other types and numbers of displays could be used.

Although an example of the traffic management device110is described and illustrated herein in connection withFIG. 1, each of the computers of the system100could be implemented on any suitable computer system or computing device. It is to be understood that the example devices and systems of the system100are for exemplary purposes, as many variations of the specific hardware and software used to implement the system100are possible, as will be appreciated by those skilled in the relevant art(s).

Furthermore, each of the systems of the system100may be conveniently implemented using one or more general purpose computer systems, microprocessors, digital signal processors, micro-controllers, application specific integrated circuits (ASIC), programmable logic devices (PLD), field programmable logic devices (FPLD), field programmable gate arrays (FPGA) and the like, programmed according to the teachings as described and illustrated herein, as will be appreciated by those skilled in the computer, software and networking arts.

In addition, two or more computing systems or devices may be substituted for any one of the systems in the system100. Accordingly, principles and advantages of distributed processing, such as redundancy, replication, and the like, also can be implemented, as desired, to increase the robustness and performance of the devices and systems of the system100. The system100may also be implemented on a computer system or systems that extend across any network environment using any suitable interface mechanisms and communications technologies including, for example telecommunications in any suitable form (e.g., voice, modem, and the like), Public Switched Telephone Network (PSTNs), Packet Data Networks (PDNs), the Internet, intranets, a combination thereof, and the like.

The operation of the example packet trailer back channel for a system100, shown inFIG. 1, which may be run on the traffic management device110or any of the other nodes in the private local area network108, will now be described with reference back toFIG. 1in conjunction with the flow diagram shown inFIG. 3. The flow diagram inFIG. 3is representative of exemplary high level steps that one of ordinary skill in the art would be able to use for generating machine readable instructions to implement the data transmission process as set forth herein without undue experimentation. In this example, the machine readable instructions comprise an algorithm for execution by: (a) a processor, (b) a controller, and/or (c) one or more other suitable processing device(s). The algorithm may be embodied in software stored on tangible computer readable media such as, for example, a flash memory, a CD-ROM, a floppy disk, a hard drive, a digital video (versatile) disk (DVD), or other memory devices, but persons of ordinary skill in the art will readily appreciate that the entire algorithm and/or parts thereof could alternatively be executed by a device other than a processor and/or embodied in firmware or dedicated hardware in a well known manner (e.g., it may be implemented by an application specific integrated circuit (ASIC), a programmable logic device (PLD), a field programmable logic device (FPLD), a field programmable gate array (FPGA), discrete logic, etc.). For example, any or all of the components of the traffic management device110could be implemented by software, hardware, and/or firmware. Also, some or all of the machine readable instructions represented by the flowchart ofFIG. 3may be implemented manually. Further, although the example algorithm is described with reference to the flowchart illustrated inFIG. 3, persons of ordinary skill in the art will readily appreciate that many other methods of implementing the example machine readable instructions may alternatively be used. For example, the order of execution of the blocks may be changed, and/or some of the blocks described may be changed, eliminated, or combined.

FIG. 3is a flow diagram of the procedure that may be employed by the network nodes inFIG. 1to establish a back channel at the data link layer through an added trailer to Ethernet packets such as that shown inFIG. 2sent between a source and destination node on the private local area network108inFIG. 1. A source node such as the workstation116inFIG. 1assigns a destination address to the destination MAC address field for a packet such as the packet200shown inFIG. 2(300). The source node then writes its corresponding MAC address to the source MAC address field in the packet (302). The source node then sets the size for the trailer in the trailer payload length field (304). The source node then adds the data in the payload of the packet (306). The sender node will then insert back channel data in the trailer (308). The back channel data may be directed toward various network functions such as diagnostics analysis or network traffic analysis.

The packet is then routed on the private local area network108to the destination node such as the workstation118inFIG. 1(310). The destination node will then strip out the trailer from the packet (312). The data in the trailer is read by the destination node and may be collected for storage (316). The destination node then sends the data in the payload to the application layer of the destination node (314). The data from the trailer may be immediately used or collected for various applications (316). In this example, the data in the trailer may be used for a diagnostics application that may collect data from a number of different network nodes for historic analysis or to continuously gather data in real time (318). The collected data may be then used for diagnostics functions such as to evaluate the performance of the network, nodes and devices that may require repair or maintenance. The data in the trailer may also be directed toward a network traffic application such as a local traffic manager on the traffic management device110inFIG. 1for historic analysis or to continuously gather data in real time (320). Such traffic data may be used by the traffic management device110inFIG. 1to cause more efficient packet traffic on the network108or to and from an external network such as the WAN130inFIG. 1. Another example may be using the data for a security or intrusion detection system to scan or cryptographically sign/verify individual packets as they pass within a system.