Abstract:
Embodiments of the present invention include systems and methods for providing data flow information of a communication end node. The communication end node includes: at least one container including one or more applications; an operating-system-container engine for hosting the container; a host operating system (OS) for hosting the operating-system-container engine; and a socket query engine that is hosted by the operating-system-container engine. The socket query engine causes steps to be performed comprising: monitoring one or more open sockets that allow the one or more applications to communicate data through a network; compiling a list of the one or more open sockets; generating information of data flow that passes through the one or more open sockets using a set of socket parameters of the one or more open sockets; and sending the information of data flow to a controller through the network.

Description:
TECHNICAL FIELD 
       [0001]    The present invention relates to improving data traffic in a network, more particularly, to systems and methods for controlling data communication of applications using containers in a software-defined-networking (SDN) infrastructure. 
       DESCRIPTION OF THE RELATED ART 
       [0002]    As the value and use of information continues to increase, individuals and businesses seek additional ways to process and store information. One option available to users is information handling systems. An information handling system generally processes, compiles, stores, and/or communicates information or data for business, personal, or other purposes thereby allowing users to take advantage of the value of the information. Because technology and information handling needs and requirements vary between different users or applications, information handling systems may also vary regarding what information is handled, how the information is handled, how much information is processed, stored, or communicated, and how quickly and efficiently the information may be processed, stored, or communicated. The variations in information handling systems allow for information handling systems to be general or configured for a specific user or specific use such as financial transaction processing, airline reservations, enterprise data storage, or global communications. In addition, information handling systems may include a variety of hardware and software components that may be configured to process, store, and communicate information and may include one or more computer systems, data storage systems, and networking systems. 
         [0003]    As an approach to control dynamic allocation of resources, virtualized environments has been introduced.  FIG. 1  shows a schematic diagram of a conventional device  100  that enables multiple virtual machines (VMs)  108  to share physical resources. As depicted, the device  100  includes a server  102  that provides a physical computing platform for the host operation system (OS)  104 . The VM host server, known as hypervisor  106 , hosts one or more VMs  108  so that the VMs can share physical resources, such as CPU and memory, for the virtualized environments and prioritizes their use among all the VMs  108  in the virtualized environments. Each VM  108  includes a guest OS  110 , binaries/libraries  112 , and an application  114 , where the guest OS hosts the application  114  residing in the corresponding VM. 
         [0004]    Typically, a new network socket is established when one application communicates data to another application through a network. Thus, as the number of applications  114  increases, the amount of data traffic in a network increases significantly and a proper mechanism to control the data traffic in the network is required. In general, each socket is associated with a file descriptor and the file descriptor includes parameters that may define data flow information of the application. However, in the conventional SDN infrastructures, it is impractical to create an SDN-interface in every Guest OS  110  since it requires significant amount of resources for the applications  114  communicate their data flow information to the central SDN controller. Thus, in a conventional network system, it is still a challenging task to operate an SDN-enabling host OS that allows the central controller to have the global view of data flow information for all of the applications  114 . 
         [0005]    In the conventional systems, the data flow information is only known to the application itself at the time when the data flow is first described in the file descriptor and remains unknown to the other network devices in the SDN infrastructure until the data is actually communicated through the network. Thus, there is a need for a mechanism that can provide granular flow information for all applications to a SDN controller so that the SDN controller can control the data traffic of the applications in the network early in the life-cycle of the data flow. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0006]    References will be made to embodiments of the invention, examples of which may be illustrated in the accompanying figures. These figures are intended to be illustrative, not limiting. Although the invention is generally described in the context of these embodiments, it should be understood that it is not intended to limit the scope of the invention to these particular embodiments. 
           [0007]      FIG. 1  (“FIG.”) shows a schematic diagram of a conventional device having multiple virtual machines. 
           [0008]      FIG. 2A  shows a schematic diagram of a communication system having a software-defined-networking (SDN) infrastructure according to embodiments of the present invention. 
           [0009]      FIG. 2B  shows a schematic diagram of the network/cloud in  FIG. 2A  according to embodiments of the present invention. 
           [0010]      FIG. 3  shows a schematic diagram of an end node in  FIG. 2  according to embodiments of the present invention. 
           [0011]      FIG. 4  shows a schematic operational block diagram of an operating-system-container engine according to embodiments of the present invention. 
           [0012]      FIG. 5  shows a flowchart of an illustrative process for improving data traffic in a network according to embodiments of the present invention. 
           [0013]      FIG. 6  shows an information handling system according to embodiments of the present invention. 
       
    
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
       [0014]    In the following description, for purposes of explanation, specific details are set forth in order to provide an understanding of the invention. It will be apparent, however, to one skilled in the art that the invention can be practiced without these details. Furthermore, one skilled in the art will recognize that embodiments of the present invention, described below, may be implemented in a variety of ways, such as a process, an apparatus, a system, a device, or a method on a tangible computer-readable medium. 
         [0015]    Components shown in diagrams are illustrative of exemplary embodiments of the invention and are meant to avoid obscuring the invention. It shall also be understood that throughout this discussion that components may be described as separate functional units, which may comprise sub-units, but those skilled in the art will recognize that various components, or portions thereof, may be divided into separate components or may be integrated together, including integrated within a single system or component. It should be noted that functions or operations discussed herein may be implemented as components or nodes. Components may be implemented in software, hardware, or a combination thereof. 
         [0016]    Furthermore, connections between components, nodes, or switches within the figures are not intended to be limited to direct connections. Rather, data between these elements may be modified, re-formatted, or otherwise changed by intermediary components. Also, additional or fewer connections may be used. It shall also be noted that the terms “coupled” “connected” or “communicatively coupled” shall be understood to include direct connections, indirect connections through one or more intermediary devices, and wireless connections. 
         [0017]    Furthermore, one skilled in the art shall recognize: (1) that certain steps may optionally be performed; (2) that steps may not be limited to the specific order set forth herein; ( 3 ) that certain steps may be performed in different orders; and (4) certain steps may be done concurrently. 
         [0018]    Reference in the specification to “one embodiment,” “preferred embodiment,” “an embodiment,” or “embodiments” means that a particular feature, structure, characteristic, or function described in connection with the embodiment is included in at least one embodiment of the invention and may be in more than one embodiment. The appearances of the phrases “in one embodiment,” “in an embodiment,” or “in embodiments” in various places in the specification are not necessarily all referring to the same embodiment or embodiments. 
         [0019]    The use of certain terms in various places in the specification is for illustration and should not be construed as limiting. A service, function, or resource is not limited to a single service, function, or resource; usage of these terms may refer to a grouping of related services, functions, or resources, which may be distributed or aggregated. 
         [0020]      FIG. 2A  shows a schematic diagram of a system for communication  200  having a software-defined-networking (SDN) infrastructure according to embodiments of the present invention.  FIG. 2B  shows a schematic diagram of the network/cloud  201  in  FIG. 2A  according to embodiments of the present invention. As depicted, one or more communication end points (or, shortly nodes hereinafter)  220   a - 220   n  may be coupled to each other and a SDN controller  260  for communication through a network/cloud  201 . The network/cloud  201  may have a three-layer leaf-spine structure, i.e., the switches  202 ,  204 , and  206  are arranged in three layers. In  FIG. 2B , only six leaf switches  202 , four spine switches  204 , and two core switches  206  are shown. However, it should be apparent to those of ordinary skill in the art that other suitable number of layers may be included in the network/cloud  201  and that other suitable number of switches may be included in each layer. Also, it should be apparent to those of ordinary skill in the art that the network/cloud  201  may have other types of network topologies. It is further noted that any other suitable communication devices may be used in place of the switches in the network/cloud  201 . 
         [0021]    For the purpose of illustration, the controller  260  is assumed to be a software-define-networking (SDN) controller. However, it should be apparent to those of ordinary skill in the art that the controller  260  may be any type of controller that can perform the functions described in conjunction with  FIGS. 3A-5 . 
         [0022]    Each node  220  may be any suitable device, such as server, a computer, a data center, or any other computing device that can communicate data to other node.  FIG. 3  shows a schematic diagram  300  of a node in  FIG. 2A  according to embodiments of the present invention. As depicted, the node  300  may include a server  302  that provides a physical computing platform for the host operation system (OS)  304 . The host OS  304  may host an operating-system-container engine, such as docker engine  326 , where the operating-system-container engine  326  may host one or more operating-system-containers, such as docker containers (shortly, containers)  330 . In embodiments, each container (e.g.,  330   a ) includes one or more applications  314  (e.g.,  314   a   1  and  314   a   2 ) that share the same binaries/libraries  312  (e.g.,  312   a ). The containers  330  may share physical resources, such as CPU and memory, of the server, where the host OS  304  may prioritize their use among all the containers  330  in the node  300 . 
         [0023]    In embodiments, the operating-system-container engine  326  may provide a platform for users to build, ship, and run the applications  314 . In embodiments, unlike the VMs  108  that each have a guest OS  110  (which may weigh tens of GB), each container  330  includes one or more applications  314  and its dependencies  312  only. In embodiments, the operating-system-container engine  326  may run as an isolated process on the host OS  304 . 
         [0024]    An application  314  in one node (e.g.,  220   a ), may open a new socket for communication with another application(s) installed in the other node, (e.g.,  220   b ). In embodiments, when a network socket is opened, the host OS  304  may assign parameters to a file descriptor for the socket. For instance, the socket may use TCP/UDP as the communication protocol and the parameters in the file descriptor may include source IP (SRC_IP) address, destination IP (DEST_IP) address, SCR_TCP/UDP_PORT, DEST_TCP/UDP_PORT, and Ethernet type (Ether_TYPE). Hereinafter, the term socket parameter refers to a parameter included in a file descriptor and/or in the corresponding socket. In embodiments, certain parameters, such as media-access-control address of the source (SRC-MAC), associated with a new socket may not be assigned by the host OS  304 , even though, they may be known to the host OS  304 . It is noted that the file descriptor may include other suitable parameters. 
         [0025]    In embodiments, the operating-system-container engine  326  may include a socket query engine (SQE)  328 , where the SQE  328  may listen to or query socket calls in the host OS  304  and maintain a list of file descriptors along with the parameters assigned to the file descriptors.  FIG. 4  shows a schematic operational block diagram  400  of the operating-system-container engine  326  according to embodiments of the present invention. As depicted, in embodiments, the SQE  328  may monitor new sockets that are open by the applications  314 . In embodiments, the SQE  328  may query the list of open sockets (or socket calls) in the host OS  304 . In embodiments, the SQE  328  may monitor/query the list periodically. In another embodiment, when the SQE  328  may receive a new socket information from the host OS  304 , it may update the list of sockets. 
         [0026]    In response to the query, the host OS  304  may provide the information of open sockets to the SQE  328 . Then, the SQE  326  may compile/maintain the list of the open sockets and the file descriptors along with the parameters assigned to the file descriptors. Then, based on the parameters of the file descriptors, the SQE  326  may generate data flow information of the node  300  in a format that the SDN controller  260  may accept, and send the data traffic information to the SDN controller  260 . 
         [0027]    In embodiments, as depicted in  FIG. 4 , the SQE  328  may be included in the operating-system-container engine  326 . In embodiments, as depicted in  FIG. 3 , the SQE  328  may be hosted by the operating-system-container engine  326 . Thus, the terms operating-system-container engine and SQE are used interchangeably hereinafter. 
         [0028]      FIG. 5  shows a flowchart  500  of an illustrative process for optimizing data traffic in a network according to embodiments of the present invention. As depicted, the steps  502 ,  504  and  506  may be performed by the SQE  328  of an end device  220 , while the steps  508  and  510  may be performed by the SDN controller  260 . The process  500  starts at step  502 . At step  502 , the SQE  328  (or operating-system-container engine  326 ), may monitor if a new socket is open or query one or more open sockets for the one or more applications  314  installed in a node  220 . Then, at step  504 , the SQE  328  may obtain, for each open socket, information of a set of socket parameters, such as parameters of the file descriptor. In one embodiment, the SQE  328  may receive and update the socket parameters each time a new socket is open and monitored. In another embodiment, the SQE  328  may periodically query the information of socket parameters to the host OS  304 . At step  506 , the SQE  328  may send the obtained information of socket parameters to the SDN controller  260 . In embodiment, the data flow information may be in a format that the SDN controller  260  may accept. At step  508 , the SDN controller  260  may receive the information of socket parameters from one or more nodes  220 . Then, at step  510 , the SND controller  260  may improve the data traffic between the nodes  220  using the received information of socket parameters. 
         [0029]    It is noted that, in embodiments, the operating-system-container engines  326  of the nodes  220  may communicate with the SDN controller  260  and provide the SDN controller  260  with granular flow information in real time so that the SDN controller  260  may have a global view of the open sockets and data traffic through the network. As discussed above, in the conventional systems, the data flow information is only known to the application itself at the time when the data flow is first described in the file descriptor and remains unknown to the other network devices (such as switches/routers) in the SDN infrastructure until the data is actually communicated through the network. In embodiments, unlike in the convention systems, the operating-system-container engine  326  provides a global view of data flow for all applications and sockets so that the SDN controller  260  can control the data traffic in the network early in the life-cycle of the data flow, i.e., the SND controller  260  can improve the data traffic in the network before the applications  314  actually start communicating the data. In embodiments, using the global view of the data flow, the SDN controller  260  is able to predict the data traffic in the network and distribute the data traffic throughout the network to thereby enhance the speed and efficiency of data traffic through the network. 
         [0030]    For purposes of this disclosure, an information handling system may include any instrumentality or aggregate of instrumentalities operable to compute, calculate, determine, classify, process, transmit, receive, retrieve, originate, route, switch, store, display, communicate, manifest, detect, record, reproduce, handle, or utilize any form of information, intelligence, or data for business, scientific, control, or other purposes. For example, an information handling system may be a personal computer (e.g., desktop or laptop), tablet computer, mobile device (e.g., personal digital assistant (PDA) or smart phone), server (e.g., blade server or rack server), a network storage device, or any other suitable device and may vary in size, shape, performance, functionality, and price. The information handling system may include random access memory (RAM), one or more processing resources such as a central processing unit (CPU) or hardware or software control logic, ROM, and/or other types of nonvolatile memory. Additional components of the information handling system may include one or more disk drives, one or more network ports for communicating with external devices as well as various input and output (I/O) devices, such as a keyboard, a mouse, touchscreen and/or a video display. The information handling system may also include one or more buses operable to transmit communications between the various hardware components. 
         [0031]      FIG. 6  depicts a simplified block diagram of an information handling system  600  according to embodiments of the present invention. It will be understood that the functionalities shown for device  605  may operate to support various embodiments of an information handling system (or node)—although it shall be understood that an information handling system may be differently configured and include different components. The device  605  may include a plurality of I/O ports  610 , a network processing unit (NPU)  615 , one or more tables  620 , and a central processing unit (CPU)  625 . The system includes a power supply (not shown) and may also include other components, which are not shown for sake of simplicity. 
         [0032]    In embodiments, the I/O ports  610  may be connected via one or more cables to one or more other network devices or clients. The network processing unit (NPU)  615  may use information included in the network data received at the device  605 , as well as information stored in the tables  620 , to identify a next hop for the network data, among other possible activities. In embodiments, a switching fabric then schedules the network data for propagation through the device to an egress port for transmission to the next hop. 
         [0033]    It shall be noted that aspects of the present invention may be encoded upon one or more non-transitory computer-readable media with instructions for one or more processors or processing units to cause steps to be performed. It shall be noted that the one or more non-transitory computer-readable media shall include volatile and non-volatile memory. It shall be noted that alternative implementations are possible, including a hardware implementation or a software/hardware implementation. Hardware-implemented functions may be realized using ASIC(s), programmable arrays, digital signal processing circuitry, or the like. Accordingly, the “means” terms in any claims are intended to cover both software and hardware implementations. Similarly, the term “computer-readable medium or media” as used herein includes software and/or hardware having a program of instructions embodied thereon, or a combination thereof. With these implementation alternatives in mind, it is to be understood that the figures and accompanying description provide the functional information one skilled in the art would require to write program code (i.e., software) and/or to fabricate circuits (i.e., hardware) to perform the processing required. 
         [0034]    One skilled in the art will recognize no computing system or programming language is critical to the practice of the present invention. One skilled in the art will also recognize that a number of the elements described above may be physically and/or functionally separated into sub-modules or combined together. 
         [0035]    It will be appreciated to those skilled in the art that the preceding examples and embodiment are exemplary and not limiting to the scope of the present invention. It is intended that all permutations, enhancements, equivalents, combinations, and improvements thereto that are apparent to those skilled in the art upon a reading of the specification and a study of the drawings are included within the true spirit and scope of the present invention.