Access control list constructed as a tree of matching tables
    1.
    发明授权
    Access control list constructed as a tree of matching tables 有权
    访问控制列表构造为匹配表的树

    公开(公告)号:US08181258B2

    公开(公告)日:2012-05-15

    申请号:US10723150

    申请日:2003-11-26

    IPC分类号: G06F21/00

    CPC分类号: H04L63/0227 H04L63/0245

    摘要: Techniques are disclosed for generating a representation of an access control list, the representation being utilizable in a network processor or other type of processor to perform packet filtering or other type of access control list based function. A plurality of rules of the access control list are determined, each of at least a subset of the rules having a plurality of fields and a corresponding action, and the rules are processed to generate a multi-level tree representation of the access control list, in which each of one or more of the levels of the tree representation is associated with a corresponding one of the fields. At least one level of the tree representation other than a root level of the tree representation comprises a plurality of nodes, with at least two of the nodes at that level each having a separate matching table associated therewith.

    摘要翻译: 公开了用于生成访问控制列表的表示的技术,所述表示可在网络处理器或其他类型的处理器中使用以执行分组过滤或基于其他类型的基于访问控制列表的功能。 确定访问控制列表的多个规则,规则的至少一个子集中的每一个具有多个字段和对应的动作,并且处理规则以生成访问控制列表的多级树表示, 其中树形表示的一个或多个级别中的每一个与相应的一个字段相关联。 除了树表示的根级别之外的树形表示的至少一个级别包括多个节点,其中该级别的至少两个节点具有与之相关联的单独的匹配表。

    Network Communications Processor Architecture
    3.
    发明申请
    Network Communications Processor Architecture 有权
    网络通信处理器架构

    公开(公告)号:US20100293312A1

    公开(公告)日:2010-11-18

    申请号:US12782379

    申请日:2010-05-18

    摘要: Described embodiments provide a system having a plurality of processor cores and common memory in direct communication with the cores. A source processing core communicates with a task destination core by generating a task message for the task destination core. The task source core transmits the task message directly to a receiving processing core adjacent to the task source core. If the receiving processing core is not the task destination core, the receiving processing core passes the task message unchanged to a processing core adjacent the receiving processing core. If the receiving processing core is the task destination core, the task destination core processes the message.

    摘要翻译: 描述的实施例提供一种具有多个处理器核心和与核心直接通信的公共存储器的系统。 源处理核心通过为任务目标核心生成任务消息与任务目标核心通信。 任务源核心将任务消息直接发送到与任务源核心相邻的接收处理核心。 如果接收处理核心不是任务目标核心,则接收处理核心将任务消息不改变地传递到与接收处理核心相邻的处理核心。 如果接收处理核心是任务目标核心,则任务目标核心处理消息。

    Directed graph approach for constructing a tree representation of an access control list
    4.
    发明授权
    Directed graph approach for constructing a tree representation of an access control list 失效
    用于构建访问控制列表的树表示的定向图方法

    公开(公告)号:US07644085B2

    公开(公告)日:2010-01-05

    申请号:US10723160

    申请日:2003-11-26

    IPC分类号: G07F17/30

    CPC分类号: H04L63/0263 G06F2221/2141

    摘要: Techniques are disclosed for generating a representation of an access control list, the representation being utilizable in a network processor or other type of processor to perform packet filtering or other type of access control list based function. A plurality of rules of the access control list are determined, each of at least a subset of the rules having a plurality of fields and a corresponding action. The rules are processed to generate a multi-level tree representation of the access control list, in which each of one or more of the levels of the tree representation is associated with a corresponding one of the fields. At least one level of the tree representation comprises a plurality of nodes, with two or more of the nodes of that level having a common subtree, and the tree representation including only a single copy of that subtree. The tree representation is characterizable as a directed graph in which each of the two nodes having the common subtree points to the single copy of the common subtree.

    摘要翻译: 公开了用于生成访问控制列表的表示的技术,所述表示可在网络处理器或其他类型的处理器中使用以执行分组过滤或基于其他类型的基于访问控制列表的功能。 确定访问控制列表的多个规则,规则的至少一个子集中的每一个具有多个字段和相应的动作。 处理规则以生成访问控制列表的多级树表示,其中树表示的一个或多个级别中的每一个与相应的一个字段相关联。 树表示的至少一个级别包括多个节点,该级别的两个或多个节点具有公共子树,并且树表示仅包含该子树的单个副本。 树表示是可定性的,其中具有共同子树的两个节点中的每一个都指向公共子树的单个副本。

    Network communications processor architecture
    5.
    发明授权
    Network communications processor architecture 有权
    网络通讯处理器架构

    公开(公告)号:US09081742B2

    公开(公告)日:2015-07-14

    申请号:US12782379

    申请日:2010-05-18

    摘要: Described embodiments provide a system having a plurality of processor cores and common memory in direct communication with the cores. A source processing core communicates with a task destination core by generating a task message for the task destination core. The task source core transmits the task message directly to a receiving processing core adjacent to the task source core. If the receiving processing core is not the task destination core, the receiving processing core passes the task message unchanged to a processing core adjacent the receiving processing core. If the receiving processing core is the task destination core, the task destination core processes the message.

    摘要翻译: 描述的实施例提供一种具有多个处理器核心和与核心直接通信的公共存储器的系统。 源处理核心通过为任务目标核心生成任务消息与任务目标核心通信。 任务源核心将任务消息直接发送到与任务源核心相邻的接收处理核心。 如果接收处理核心不是任务目标核心,则接收处理核心将任务消息不改变地传递到与接收处理核心相邻的处理核心。 如果接收处理核心是任务目标核心,则任务目标核心处理消息。

    Single descriptor scatter gather data transfer to or from a host processor
    6.
    发明授权
    Single descriptor scatter gather data transfer to or from a host processor 失效
    单个描述符散点收集或从主机处理器传输数据

    公开(公告)号:US06754735B2

    公开(公告)日:2004-06-22

    申请号:US10032029

    申请日:2001-12-21

    IPC分类号: G06F300

    CPC分类号: G06F13/28

    摘要: A processing system includes a processing device and a host processor operatively coupled to the processing device via a system bus, and implements a scatter gather data transfer technique. The host processor is configurable to control the transfer of information to or from scattered or non-contiguous memory locations in a memory associated with the processing device, utilizing a data structure comprising a single descriptor. An information transfer bandwidth of the system bus is thereby more efficiently utilized than if a separate descriptor were used for transfer of information involving each of the non-contiguous memory locations.

    摘要翻译: 处理系统包括经由系统总线可操作地耦合到处理装置的处理装置和主机处理器,并且实现散射采集数据传输技术。 主处理器可配置为利用包括单个描述符的数据结构来控制向与处理设备相关联的存储器中的分散或非连续存储器位置传送信息。 因此,如果使用单独的描述符来传送涉及每个非连续存储器位置的信息,则系统总线的信息传送带宽被更有效地利用。