VMware, Inc.
AUTONOMOUS DISTRIBUTED FORWARDING PLANE TRACEABILITY BASED ANOMALY DETECTION IN APPLICATION TRAFFIC FOR HYPER-SCALE SD-WAN

Abstract:

Some embodiments of the invention provide a method for detecting and remediating anomalies in an SD-WAN that includes a controller, at least one enterprise datacenter, and multiple branch sites each having at least one edge node that includes a set of packet processing stages. At a particular node in the SD-WAN, the method receives, from the controller, trace monitoring rules specified for a particular packet flow. The method determines that a first packet received at the particular node belongs to the particular packet flow and matches at least one of the trace monitoring rules. Based on the determination, the method specifies the first packet as a packet that should be trace monitored by each packet processing stage of the particular node. As the first packet is processed by the set of packet processing stages, the method generates trace monitoring results to be provided to the controller for analysis.