Methods and systems for a distributed provider edge

Abstract

Methods and systems for a distributed provider edge are provided. According to one embodiment, a one-to-one association is formed between a Virtual Routing and Forwarding device (VRF) of a provider edge device (PE) of a service provider and a customer site. The VRF includes a routing information base (RIB) and a forwarding information base (FIB). A network interface module is instantiated within the VRF for each network interface employed, such as an intranet, extranet, Virtual Private Network (VPN) and/or Internet interface. A first packet is received at the PE via a first network interface. A first network interface module associated with the first network interface accesses the RIB to acquire routing information for the first packet. A second packet is received via a second network interface. A second network interface module associated with the second network interface accesses the RIB to acquire routing information for the second packet.

1 . A method comprising:
 forming a one-to-one association between a single Virtual Routing and Forwarding device (VRF) of a physical provider edge device (PE) of a service provider and a single site of a customer of the service provider, the VRF having a single routing information base (RIB) and a single forwarding information base (FIB);   instantiating, within the VRF, a network interface module for each of a plurality of network interfaces employed by the single customer site, the plurality of network interfaces including two or more network interfaces selected from an intranet interface, an extranet interface, a Virtual Private Network (VPN) interface and an Internet interface;   receiving, at the PE via a first network interface of the plurality of network interfaces, a first data packet;   accessing, by a first network interface module of the plurality of network interface modules that is associated with the first network interface, the single RIB to acquire routing information for the first data packet;   receiving, at the PE via a second network interface of the plurality of network interfaces, a second data packet; and   accessing, by a second network interface module of the plurality of network interface modules that is associated with the second network interface, the single RIB to acquire routing information for the second data packet.   
     
     
         2 . The method of  claim 1 , wherein the plurality of network interface modules comprise a plurality of VPN Protocol Instance Modules (VRPs). 
     
     
         3 . The method of  claim 2 , wherein the plurality of VRPs communicate directly with the single RIB and indirectly with the single FIB. 
     
     
         4 . The method of  claim 2 , wherein the plurality of VRPs communicate with the single RIB by importing and exporting routes from the single RIB. 
     
     
         5 . The method of  claim 2 , wherein a plurality of data planes communicatively couple the VRF and a backbone interface device of the PE, which is operable to transmit outbound data packets onto a network backbone, and the method further comprises the plurality of VRPs selectively using one of a plurality of data planes to communicate the outbound data packets to the backbone interface device based on a type of traffic represented by the outbound data packets. 
     
     
         6 . The method of  claim 5 , wherein the single FIB is used to forward traffic received by the VRF to the backbone interface device as labeled packets. 
     
     
         7 . The method of  claim 5 , further comprising enabling different services for the outbound data packets based on the selected data plane. 
     
     
         8 . The method of  claim 7 , wherein the different services include policy-based services, Network Address Translation (NAT) services, firewall services or proxy services. 
     
     
         9 . The method of  claim 1 , wherein a first VPN interface of the plurality of network interfaces provides access to an Intranet associated with the single customer site and a second VPN interface of the plurality of network interfaces provides access to an Extranet associated with the single customer site. 
     
     
         10 . A physical distributed provider edge (PE) system embodying modules to perform a method for processing network traffic of a service provider, the method comprising:
 forming a one-to-one association between a single Virtual Routing and Forwarding device (VRF) of the PE and a single site of a customer of the service provider, the VRF having a single routing information base (RIB) and a single forwarding information base (FIB);   instantiating, within the VRF, a network interface module for each of a plurality of network interfaces employed by the single customer site, the plurality of network interfaces including two or more network interfaces selected from an intranet interface, an extranet interface, a Virtual Private Network (VPN) interface and an Internet interface;   receiving, at the PE via a first network interface of the plurality of network interfaces, a first data packet;   accessing, by a first network interface module of the plurality of network interface modules that is associated with the first network interface, the single RIB to acquire routing information for the first data packet;   receiving, at the PE via a second network interface of the plurality of network interfaces, a second data packet; and   accessing, by a second network interface module of the plurality of network interface modules that is associated with the second network interface, the single RIB to acquire routing information for the second data packet.   
     
     
         11 . The system of  claim 10 , wherein the plurality of network interface modules comprise a plurality of VPN Protocol Instance Modules (VRPs). 
     
     
         12 . The system of  claim 11 , wherein the plurality of VRPs communicate directly with the single RIB and indirectly with the single FIB. 
     
     
         13 . The system of  claim 11 , wherein the plurality of VRPs communicate with the single RIB by importing and exporting routes from the single RIB. 
     
     
         14 . The system of  claim 11 , further comprising a backbone interface device operable to transmit outbound data packets onto a network backbone and a plurality of data planes communicatively coupling the VRF and the backbone interface device, and wherein the method further comprises the plurality of VRPs selectively using one of a plurality of data planes to communicate the outbound data packets to the backbone interface device based on a type of traffic represented by the outbound data packets. 
     
     
         15 . The system of  claim 14 , wherein the single FIB is used to forward traffic received by the VRF to the backbone interface device as labeled packets. 
     
     
         16 . The system of  claim 14 , wherein the method further comprises enabling different services for the outbound data packets based on the selected data plane. 
     
     
         17 . The method of  claim 16 , wherein the different services include policy-based services, Network Address Translation (NAT) services, firewall services or proxy services. 
     
     
         18 . The system of  claim 11 , wherein a first VPN interface of the plurality of network interfaces provides access to an Intranet associated with the single customer site and a second VPN interface of the plurality of network interfaces provides access to an Extranet associated with the single customer site.