公开(公告)号：US10462059B2

公开(公告)日：2019-10-29

申请号：US15473413

申请日：2017-03-29

Applicant: Intel Corporation

Inventor： Byron Marohn ,  Christian Maciocco ,  Sameh Gobriel ,  Ren Wang ,  Tsung-Yuan C. Tai

IPC: H04L12/819 ,  H04L12/743 ,  H04L12/721 ,  H04L12/741

Abstract: The present disclosure describes a process and apparatus for improving insertions of entries into a hash table. A large number of smaller virtual buckets may be combined together and associated with buckets used for hash table entry lookups and/or entry insertion. On insertion of an entry, hash table entries associated with a hashed-to virtual bucket may be moved between groups of buckets associated with the virtual bucket, to better distribute entries across the available buckets to reduce the number of entries in the largest buckets and the standard deviation of the bucket sizes across the entire hash table.

公开(公告)号：US20190104150A1

公开(公告)日：2019-04-04

申请号：US15720821

申请日：2017-09-29

Applicant: Intel Corporation

Inventor： Sameh Gobriel ,  Christian Maciocco ,  Byron Marohn ,  Ren Wang ,  Tsung-Yuan C. Tai

IPC: H04L29/06 ,  G06F17/30

Abstract: A computing apparatus for providing a node within a distributed network function, including: a hardware platform; a network interface to communicatively couple to at least one other peer node of the distributed network function; a distributor function including logic to operate on the hardware platform, including a hashing module configured to receive an incoming network packet via the network interface and perform on the incoming network packet a first-level hash of a two-level hash, the first level hash being a lightweight hash with respect to a second-level hash, the first level hash to deterministically direct a packet to one of the nodes of the distributed network function as a directed packet; and a denial of service (DoS) mitigation engine to receive notification of a DoS attack, identify a DoS packet via the first-level hash, and prevent the DoS packet from reaching the second-level hash.

公开(公告)号：US11005884B2

公开(公告)日：2021-05-11

申请号：US15720821

申请日：2017-09-29

Applicant: Intel Corporation

Inventor： Sameh Gobriel ,  Christian Maciocco ,  Byron Marohn ,  Ren Wang ,  Tsung-Yuan C. Tai

IPC: H04L29/06 ,  H04L9/32 ,  G06F21/55 ,  G06F16/22

Abstract: A computing apparatus for providing a node within a distributed network function, including: a hardware platform; a network interface to communicatively couple to at least one other peer node of the distributed network function; a distributor function including logic to operate on the hardware platform, including a hashing module configured to receive an incoming network packet via the network interface and perform on the incoming network packet a first-level hash of a two-level hash, the first level hash being a lightweight hash with respect to a second-level hash, the first level hash to deterministically direct a packet to one of the nodes of the distributed network function as a directed packet; and a denial of service (DoS) mitigation engine to receive notification of a DoS attack, identify a DoS packet via the first-level hash, and prevent the DoS packet from reaching the second-level hash.

公开(公告)号：US10394784B2

公开(公告)日：2019-08-27

申请号：US15389218

申请日：2016-12-22

Applicant: INTEL CORPORATION

Inventor： Byron Marohn ,  Christian Maciocco ,  Sameh Gobriel ,  Ren Wang ,  Wei Shen ,  Tsung-Yuan Charlie Tai ,  Saikrishna Edupuganti

IPC: G06F16/22 ,  G06F3/06 ,  G06F16/00 ,  H04L12/701

Abstract: Technologies for managing lookup tables are described. The lookup tables may be used for a two-level lookup scheme for packet processing. When the tables need to be updated with a new key for packet processing, information about the new key may be added to a first-level lookup table and a second-level lookup table. The first-level lookup table may be used to identify a handling node for an obtained packet, and the handling node may perform a second-level table lookup to obtain information for further packet processing. The first lookup table may be replicated on all the nodes in a cluster, and the second-level lookup table may be unique to each node in the cluster. Other embodiments are described herein and claimed.