Network services across non-contiguous subnets of a label switched network separated by a non-label switched network

Abstract

In a first enclave of a label switching network (LSN), a protocol data unit (PDU) of the LSN is formatted to include a network service field specifying a service to be applied to the PDU. The service field can be positioned between PDU data link layer and network layer fields. The PDU specifies PDU routing/forwarding information for a path in the LSN ending in an LSN second enclave, and routing/forwarding for a destination between path segments in a non-LSN. The PDU is communicated from the first enclave, via the non-LSN, to the second enclave in accordance with the routing/forwarding information for the destination between path segments in the non-LSN. In the second enclave, each network service specified for the PDU is determined and then applied to the PDU. The second enclave transmits the network serviced PDU from the second enclave in accordance with the routing/forwarding information of the PDU in the label switching network.

1 .- 20 . (canceled) 
     
     
         21 . A computer-implemented method, comprising:
 by one or more first enclave computing devices:
 formatting a protocol data unit (PDU) of a label switching network to include a network service field specifying at least one network service to be applied to the PDU and to include a label of the label switching network as a context header in the network service field, wherein the PDU specifies routing and forwarding information of the PDU for a path in the label switching network ending in an enclave of the label switching network other than the first enclave, and routing and forwarding information between enclaves in a non-label switching network; and 
 communicating the formatted PDU from the first enclave, via the non-label switching network, to a second enclave of the label switching network in accordance with the routing and forwarding information between enclaves in the non-label switching network. 
   
     
     
         22 . The computer-implemented method of  claim 21 , comprising:
 by one or more second enclave computing devices:
 determining from the network service field of the communicated PDU, each network service specified to be applied to the PDU in the second enclave; 
 applying each of the determined network services to the PDU; and 
 transmitting the network-serviced PDU in accordance with the routing and forwarding information of the PDU in the label switching network. 
   
     
     
         23 . The computer-implemented method of  claim 21 , wherein the non-label switching network is an Internet Protocol (IP) network, and wherein the network service field describes network service chaining. 
     
     
         24 . The computer-implemented method of  claim 23 , wherein the label switching network is a MultiProtocol Label Switching (MPLS) network, and wherein the network service field is formatted as a network service header (NSH). 
     
     
         25 . The computer-implemented method of  claim 24 , wherein the label switching network is a MultiProtocol Label Switching (MPLS) network, and wherein the network service field is formatted as a network service header (NSH). 
     
     
         26 . The computer-implemented method of  claim 24 , wherein formatting comprises formatting a generic routing encapsulation (GRE) field of the non-label switching network, including an MPLS label of the MPLS network, ahead of the NSH field. 
     
     
         27 . The computer-implemented method of  claim 21 , wherein the at least one network service comprises at least one of a firewall, a load balancer, an intrusion prevention system, and a traffic analyzer. 
     
     
         28 . The computer-implemented method of  claim 21 , wherein the network service field is positioned between a PDU data link layer and network layer of the non-label switching network. 
     
     
         29 . A computer program product, comprising:
 a non-transitory computer-readable storage device having computer-executable program instructions embodied thereon that when executed by a computer cause the computer to apply packet-level network services across enclaves of a label switched network separated by a non-label switched network, the computer-executable program instructions comprising computer-executable instructions to:
 format, in a first enclave of a label switching network, a protocol data unit (PDU) of the label switching network to include a network service field specifying at least one network service to be applied to the PDU and to include a label of the label switching network as a context header in the network service field, wherein the PDU specifies routing and forwarding information of the PDU for a path in the label switching network ending in an enclave of the label switching network other than the first enclave, and routing and forwarding information between enclaves in a non-label switching network; and 
 communicate the formatted PDU from the first enclave, via the non-label switching network, to a second enclave of the label switching network in accordance with the routing and forwarding information between enclaves in the non-label switching network. 
   
     
     
         30 . The computer program product of  claim 29 , further comprising computer-executable instructions to:
 determine, in the second enclave of the label switching network, from the network service field of the communicated PDU, each network service specified to be applied to the PDU;   apply each of the determined network services to the PDU; and   transmit the network serviced PDU in accordance with the routing and forwarding information of the PDU in the label switching network.   
     
     
         31 . The computer program product of  claim 29 , wherein the non-label switching network is an Internet Protocol (IP) datagram network, and the network service field describes network service chaining. 
     
     
         32 . The computer program product of  claim 31 , wherein the label switching network is a MultiProtocol Label Switching (MPLS) network, and the network service field is formatted as a network service header (NSH). 
     
     
         33 . The computer program product of  claim 32 , wherein formatting comprises formatting a generic routing encapsulation (GRE) field of the non-label switching network ahead of the NSH field; and formatting an MPLS label of the MPLS network as a context header in the NSH field. 
     
     
         34 . The computer program product of  claim 32 , wherein formatting comprises formatting a generic routing encapsulation (GRE) field of the non-label switching network. 
     
     
         35 . The computer program product of  claim 29 , wherein the network service field is positioned between a PDU data link layer and network layer of the non-label switching network. 
     
     
         36 . A system, comprising:
 one or more network devices of a first enclave of a label switching network, the one or more network devices of the first enclave comprising memory and one or more processors communicatively coupled to the memory, wherein the one or more processors execute instructions that are stored in the memory to cause the one or more network devices of the first enclave to:
 format a protocol data unit (PDU) of the label switching network to include a network service field specifying at least one network service to be applied to the PDU and to include a label of the label switching network as a context header in the network service field, wherein the PDU specifies routing and forwarding information of the PDU for a path in the label switching network ending in an enclave of the label switching network other than the first enclave, and routing and forwarding information between enclaves in a non-label switching network; and 
 communicate the formatted PDU from the first enclave, via the non-label switching network, to a second enclave of the label switching network in accordance with the routing and forwarding information between enclaves in the non-label switching network. 
   
     
     
         37 . The system of  claim 36 , further comprising:
 one or more network devices of the second enclave of the label switching network, the one or more network devices of the second enclave comprising memory and one or more processors communicatively coupled to the memory, wherein the one or more processors execute instructions that are stored in the memory to cause the one or more network devices of the second enclave to:
 determine from the network service field of the communicated PDU, each network service specified to be applied to the PDU; 
 apply each of the determined network services to the PDU; and 
 transmit the network serviced PDU in accordance with the routing and forwarding information of the PDU in the label switching network. 
   
     
     
         38 . The system of  claim 36 , wherein the non-label switching network is an Internet Protocol (IP) datagram network, and the network service field describes network service chaining. 
     
     
         39 . The system of  claim 38 , wherein the label switching network is a MultiProtocol Label Switching (MPLS) network, and the network service field is formatted as a network service header (NSH). 
     
     
         40 . The system of  claim 39 , wherein formatting comprises formatting a generic routing encapsulation (GRE) field of the non-label switching network ahead of the NSH field.