LOCKLESS STATEFUL NETWORK ADDRESS TRANSLATION

    公开(公告)号:EP3731500A1

    公开(公告)日:2020-10-28

    申请号:EP20161586.1

    申请日:2020-03-06

    申请人: INTEL Corporation

    IPC分类号: H04L29/12

    摘要: Examples include a computing system having a plurality of processing cores and a memory coupled to the plurality of processing cores. The memory has instructions stored thereon that, in response to execution by a selected one of the plurality of processing cores, cause the following actions. The selected processing core to receive a packet and get an original tuple from the packet. When no state information for a packet flow of the packet exists in a state table, select a new network address as a new source address for the packet, get a reverse tuple for a reverse direction, select a port for the packet from an entry in a mapping table based on a hash procedure using the reverse tuple, and save the new network address and selected port. Translate the packet's network address and port and transmit the packet.

    TECHNOLOGIES FOR FILTERING NETWORK TRAFFIC ON INGRESS

    公开(公告)号:EP3624416A1

    公开(公告)日:2020-03-18

    申请号:EP19191514.9

    申请日:2019-08-13

    申请人: INTEL Corporation

    摘要: Technologies for filtering network traffic on ingress include a network interface controller (NIC) configured to parse a header of a network packet received by the NIC to extract data from a plurality of header fields of the header. The NIC is additionally configured to determine an input set based on the field vector, retrieve a matching list from a plurality of matching lists, and compare the input set to each of the plurality of rules to identify a matching rule of the plurality of rules that matches a corresponding portion of the input set. The NIC is further configured to perform an action on the network packet based on an actionable instruction associated with the one of the plurality of rules that matches the corresponding portion of the input set. Other embodiments are described herein.