Optimal Control of Network Traffic Visibility Resources and Distributed Traffic Processing Resource Control System

Abstract

A method of optimizing network traffic visibility resources comprises receiving, by a controller associated with a network traffic visibility system, information indicative of operation of the network traffic visibility system. The method further comprises facilitating, by the controller, control of resources in the network traffic visibility system, according to a configured resource control policy. The facilitating can include providing, by the controller, control signaling to cause maximization of network traffic monitoring fidelity for a plurality of Quality of Service (QoS) classes of network traffic, based on a specified fixed amount of one or more network resources associated with the network traffic visibility system. Alternatively or additionally, the facilitating can include providing, by the controller, control signaling to cause minimization of use of the one or more network resources, based on a specified fixed level of traffic monitoring fidelity associated with the plurality of QoS classes.

Description

Claims

1-29. (canceled)

30. A controller for use with a network traffic visibility system, the controller comprising: a network interface through which to receive information indicative of operation of the network traffic visibility system;a memory; andat least one processor coupled to the memory and the network interface and configured to facilitate control of resources in the network traffic visibility system, according to a configured resource control policy, by providing, during a first time period, control signaling to cause maximization of network traffic monitoring fidelity for a plurality of quality of service (QoS) classes of network traffic, for a specified fixed amount of utilization of one or more network resources, andproviding, during a second time period, control signaling to cause minimization of use of the one or more network resources, for a specified fixed level of traffic monitoring fidelity associated with the plurality of QoS classes.

31. The controller of claim 30, wherein the network traffic monitoring fidelity for the plurality of QoS classes comprises an aggregated measure of sampling ratios for the plurality of QoS classes.

32. The controller of claim 30, wherein the at least one processor is configured to facilitate control of resources in the network traffic visibility system by: providing control signaling to cause maximization of network traffic monitoring fidelity for the plurality of QoS classes of network traffic, for the specified fixed amount of the one or more network resources, while an amount of utilization of the one or more network resources is outside a specified range; andproviding control signaling to cause minimization of use of the one or more network resources, for the specified fixed level of traffic monitoring fidelity, while the amount of utilization of the one or more network resources is within the specified range.

33. The controller of claim 32, wherein the specified range comprises an upper threshold and a lower threshold.

34. The controller of claim 30, wherein maximization of network traffic monitoring fidelity for the plurality of QoS classes comprises maximization of an aggregated measure of sampling ratios for the plurality of QoS classes.

35. The controller of claim 30, wherein the at least one processor is further configured to coordinate execution of sampling and load-balancing dispatch activities by respective virtual taps and virtual aggregators of traffic sources.

36. The controller of claim 30, wherein the at least one processor is further configured to perform: collecting network traffic statistics and resource utilization statistics associated with the network traffic visibility system;generating, based on the collected statistics, estimates of relationships between traffic rate changes and corresponding resource utilization changes for the network traffic visibility system; andusing the estimates to adjust sampling ratios of the plurality of QoS classes as part of said facilitating control.

37. A method of optimizing network traffic visibility resources, the method comprising: receiving, by a controller associated with a network traffic visibility system, information indicative of operation of the network traffic visibility system;facilitating, by the controller, control of resources in the network traffic visibility system, according to a configured resource control policy, by performing at least one of: providing, by the controller, control signaling to cause maximization of network traffic monitoring fidelity for a plurality of Quality of Service (QoS) classes of network traffic, based on a specified fixed amount of one or more network resources associated with the network traffic visibility system, orproviding, by the controller, control signaling to cause minimization of use of the one or more network resources, based on a specified fixed level of traffic monitoring fidelity associated with the plurality of QoS classes.

38. The method of claim 37, wherein maximization of the network traffic monitoring fidelity for the plurality of QoS classes comprises maximization of an aggregated measure of sampling ratios for the plurality of QoS classes.

39. The method of claim 37, wherein said facilitating comprises: providing, by the controller, control signaling to cause maximization of network traffic monitoring fidelity for the plurality of QoS classes of network traffic, based on a specified fixed amount of the one or more network resources, andproviding, by the controller, control signaling to cause minimization of use of the one or more network resources, based on a specified fixed level of traffic monitoring fidelity associated with the plurality of QoS classes.

40. The method of claim 39, wherein said facilitating comprises: providing, by the controller, control signaling to cause maximization of network traffic monitoring fidelity for the plurality of QoS classes of network traffic, for the specified fixed amount of the one or more network resources, while an amount of the one or more network resources is outside a specified range; andproviding, by the controller, control signaling to cause minimization of use of the one or more network resources, for the specified fixed level of traffic monitoring fidelity, while the amount of the one or more network resources is within the specified range.

41. The method of claim 40, wherein the specified range comprises an upper threshold and a lower threshold.

42. The method of claim 37, further comprising: coordinating execution of sampling and load-balancing dispatch activities by respective virtual taps and virtual aggregators of traffic sources.

43. The method of claim 37, further comprising: collecting network traffic statistics and resource utilization statistics associated with the network traffic visibility system;generating, based on the collected statistics, estimates of relationships between traffic rate changes and corresponding resource utilization changes for the network traffic visibility system; andusing the estimates to adjust sampling ratios of the plurality of QoS classes as part of said facilitating control.

44. At least one non-transitory machine-readable medium storing instructions, execution of which by a controller associated with a network traffic visibility system causes the controller to perform operations comprising: providing control signaling to cause maximization of network traffic monitoring fidelity for a plurality of quality of service (QoS) classes of network traffic, for a specified fixed amount of utilization of one or more network resources associated with the network traffic visibility system, andproviding control signaling to cause minimization of use of the one or more network resources, for a specified fixed level of traffic monitoring fidelity associated with the plurality of QoS classes.

45. The at least one non-transitory machine-readable medium of claim 44, wherein maximization of network traffic monitoring fidelity for the plurality of QoS classes comprises maximization of an aggregated measure of sampling ratios for the plurality of QoS classes.

46. The at least one non-transitory machine-readable medium of claim 44, said operations further comprising: providing control signaling to cause maximization of network traffic monitoring fidelity for the plurality of QoS classes of network traffic, for the specified fixed amount of the one or more network resources, while an amount of utilization of the one or more network resources is outside a specified range; andproviding control signaling to cause minimization of use of the one or more network resources, for the specified fixed level of traffic monitoring fidelity, while the amount of utilization of the one or more network resources is within the specified range.

47. The at least one non-transitory machine-readable medium of claim 46, wherein the specified range comprises an upper threshold and a lower threshold.

48. The at least one non-transitory machine-readable medium of claim 44, said operations further comprising: coordinating execution of sampling and load-balancing dispatch activities by the respective virtual taps and virtual aggregators of traffic sources.

49. The at least one non-transitory machine-readable medium of claim 44, said operations further comprising: collecting network traffic statistics and resource utilization statistics associated with the network traffic visibility system;generating, based on the collected statistics, estimates of relationships between traffic rate changes and corresponding resource utilization changes for the network traffic visibility system; andusing the estimates to adjust sampling ratios of the plurality of QoS classes.