Preserving packet flow information across bump-in-the-wire firewalls

US11929987B1 · kind B1 · utility

Assignee

• Juniper Networks, Inc. · US

Inventors

• Pranavadatta D N · Kanchinakote, IN
• Aniket G. Daptari · San Jose, US
• Carlo Contavalli · Millbrae, US
• Prasad Miriyala · San Jose, US
• Kiran K N · Kanchinakote, IN
• Prasannaa Vengatesan T S · Kanchinakote, IN
• Venkatesh Velpula · Kanchinakote, IN

Key dates

• Filing date: Feb 25, 2020
• Grant date: Mar 12, 2024
• Expiry date: May 21, 2041

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2101/622
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

Techniques are disclosed for a network device to preserve packet flow information across bump-in-the-wire (BITW) firewalls. For example, a method comprises receiving, by a network device, a packet. The method also comprises determining, by the network device, that the packet matches a packet flow that is associated with an action to redirect the packet to a firewall configured as a bump-in-the-wire. The method further comprises, in response to the determination: modifying, by the network device, a Media Access Control (MAC) address field of a layer 2 (L2) packet header with a flow identifier of the packet flow; sending, by the network device, the packet to the firewall; receiving, by the network device, the packet from the firewall; and recovering, by the network device, the packet flow by modifying the packet according to the flow identifier in the packet to restore the L2 packet header of the packet.