Caching lookups based upon TCP traffic flow characteristics
    92.
    发明授权
    Caching lookups based upon TCP traffic flow characteristics 失效
    基于TCP流量特性的缓存查找

    公开(公告)号:US08005989B2

    公开(公告)日:2011-08-23

    申请号:US12188333

    申请日:2008-08-08

    IPC分类号: G06F15/173

    CPC分类号: H04L45/00 H04L69/22

    摘要: The classification system of a network device includes a cache in which a mapping between predefined characteristics of TCP/IP packets and associated actions are stored in response to the first “Frequent Flyer” packet in of a session. Selected characteristics from subsequent received packets of that session are correlated with the predefined characteristics and the stored actions are applied to the received packets if the selected characteristics and the predefined characteristics match, thus reducing the processing required for subsequent packets. The packets selected for caching may be data packets. For mismatched characteristics, the full packet search of the classification system is used to determine the action to apply to the received packet.

    摘要翻译: 网络设备的分类系统包括缓存,其中响应于会话中的第一“频繁传单”分组而存储TCP / IP分组的预定义特性与相关动作之间的映射。 如果所选择的特征和预定义的特征匹配,则从该会话的后续接收到的分组中选出的特征与预定义的特征相关联,并且将存储的动作应用于所接收的分组,从而减少后续分组所需的处理。 选择用于缓存的数据包可能是数据包。 对于不匹配的特征,分类系统的全分组搜索用于确定应用于接收到的分组的动作。

    Algorithm to bypass L4 processing in an internet protocol forwarding processor
    93.
    发明授权
    Algorithm to bypass L4 processing in an internet protocol forwarding processor 有权
    在互联网协议转发处理器中绕过L4处理的算法

    公开(公告)号:US06700883B1

    公开(公告)日:2004-03-02

    申请号:US09543145

    申请日:2000-04-05

    IPC分类号: H04L1256

    CPC分类号: H04L29/06 H04L69/32

    摘要: A controllable mechanism for by-passing Layer 4 (L4) classification is based on the insertion into a set of Layer 3 (L3) rules in an L3 lookup tree set of Layer 4 (L4) Classification Required Flags. The state of the L4 classification flag is set by comparing the L4 classification rule to an IP (Internet Protocol) lookup rule. Routing is accomplished by selecting which rule to apply to the data packet and reading the state of the corresponding L4 Classification Required Flag. In response to a first state of the corresponding L4 Classification Required Flag, an L4 classification is performed followed by a routing of the data packet. In response to a second state of the corresponding L4 Classification Required Flag performing a routing of said data packet. In a second embodiment, the method inserts into a set of L3 rules in L3 lookup means a set L4 Classification Required Flags and Global Flags. A first state of the L4 Classification Required Flag is set when a new rule is added to L4 classification means, the new rule being correlatable to a single entry in L3 lookup means. Routing is accomplished by selecting which rule to apply to the data packet and reading the state of the corresponding L4 classification required flag. In response to a first state of the corresponding L4 classification flag, a L4 classification is performed followed by a routing of the data packet. In response to a second state of the corresponding L4 classification flag, the state of the Global Flag is read, and in response to a first state of the Global flag, a L4 classification is performed followed by a routing of the data packet. In response to a second state of the Global Flag, the data packet is routed.

    摘要翻译: 用于旁路第4层(L4)分类的可控机制是基于在第4层(L4)分类要求标志的L3查找树集中插入到一组第3层(L3)规则中。 通过将L4分类规则与IP(因特网协议)查找规则进行比较来设定L4分类标志的状态。 通过选择应用于数据包的规则并读取相应的L4分类要求标志的状态来完成路由。 响应于对应的L4分类要求标志的第一状态,执行L4分类,然后进行数据分组的路由。 响应于相应的L4分类要求标志的第二状态来执行所述数据分组的路由。 在第二实施例中,该方法在L3查找中插入一组L3规则,即集合L4分类要求标志和全局标志。 当将新规则添加到L4分类装置时,设置L4分类要求标志的第一状态,新规则可与L3查找装置中的单个条目相关。 通过选择应用于数据包的规则并读取相应的L4分类所需标志的状态来完成路由。 响应对应的L4分类标志的第一状态,执行L4分类,然后进行数据分组的路由。 响应对应的L4分类标志的第二状态,读取全局标志的状态,并且响应于全局标志的第一状态,执行L4分类,然后进行数据分组的路由。 响应全局标志的第二状态,数据包被路由。

    APPARATUS AND METHOD FOR CACHING LOOKUPS BASED UPON TCP TRAFFIC FLOW CHARACTERISTICS
    94.
    发明申请
    APPARATUS AND METHOD FOR CACHING LOOKUPS BASED UPON TCP TRAFFIC FLOW CHARACTERISTICS 失效
    基于TCP流量特性的查询语言的设备和方法

    公开(公告)号:US20080298244A1

    公开(公告)日:2008-12-04

    申请号:US12188333

    申请日:2008-08-08

    IPC分类号: H04L12/56

    CPC分类号: H04L45/00 H04L69/22

    摘要: The classification system of a network device includes a cache in which a mapping between predefined characteristics of TCP/IP packets and associated actions are stored in response to the first “Frequent Flyer” packet in of a session. Selected characteristics from subsequent received packets of that session are correlated with the predefined characteristics and the stored actions are applied to the received packets if the selected characteristics and the predefined characteristics match, thus reducing the processing required for subsequent packets. The packets selected for caching may be data packets. For mismatched characteristics, the full packet search of the classification system is used to determine the action to apply to the received packet.

    摘要翻译: 网络设备的分类系统包括缓存,其中响应于会话中的第一“频繁传单”分组而存储TCP / IP分组的预定义特性与相关动作之间的映射。 如果所选择的特征和预定义的特征匹配,则从该会话的后续接收到的分组中选出的特征与预定义的特征相关联,并且将存储的动作应用于所接收的分组,从而减少后续分组所需的处理。 选择用于缓存的数据包可能是数据包。 对于不匹配的特征,分类系统的全分组搜索用于确定应用于接收到的分组的动作。

    Method for forwarding broadcast packets in a bridged IP network
    96.
    发明授权
    Method for forwarding broadcast packets in a bridged IP network 失效
    在桥接IP网络中转发广播数据包的方法

    公开(公告)号:US06954459B1

    公开(公告)日:2005-10-11

    申请号:US09596244

    申请日:2000-06-16

    IPC分类号: H04L12/24 H04L12/28 H04L29/12

    摘要: A method for automatically generating a network subnet configuration, monitors IP Address Resolution Protocol (ARP) frames on the network and builds and maintains a table which includes a list of learned subnets, the ports or forwarding domain associated with each of the learned subnets and a mask associated with each learned subnet for identifying hosts belonging to the subnet. The from and to IP addresses from intercepted IP ARP frames are examined to determine if the IP addresses belong in any of the learned subnets. If neither IP address belongs to an existing learned subnet a new learned subnet is established. The subnet includes the common prefix bits of both IP addresses, a mask identifying those bits and the port over which the ARP frame was received. If only one IP address belong to a learned subnet, the mask associated with that subnet is modified to include the common prefix bits of both IP addresses and the forwarding domain is adjusted. If the two IP addresses belong to different learned subnets, the two subnets are combined.

    摘要翻译: 一种用于自动生成网络子网配置的方法,监视网络上的IP地址解析协议(ARP)帧,并建立并维护一个表,其中包含学习子网的列表,与每个学习子网相关联的端口或转发域,以及 与每个学习的子网相关联的掩码,用于标识属于该子网的主机。 检查来自拦截的IP ARP帧的从IP地址到IP地址,以确定IP地址是否属于任何已学习的子网。 如果IP地址都不属于现有学习子网,则建立一个新的学习子网。 子网包括两个IP地址的公共前缀位,标识这些位的掩码和接收到ARP帧的端口。 如果只有一个IP地址属于学习的子网,则修改与该子网相关联的掩码,以包括两个IP地址的公共前缀位,并调整转发域。 如果两个IP地址属于不同的学习子网,则两个子网组合。

    Hybrid longest prefix match and fixed match searches
    97.
    发明授权
    Hybrid longest prefix match and fixed match searches 失效
    混合最长前缀匹配和固定匹配搜索

    公开(公告)号:US06792423B1

    公开(公告)日:2004-09-14

    申请号:US09723717

    申请日:2000-11-28

    IPC分类号: G06T1730

    摘要: A method and system for finding a longest matching prefix for an input keyword from among multiple prefixes. The prefixes are data strings of varying lengths wherein prefixes of length n or greater are probabilistically a longest prefix match. The method of the present invention begins by mapping the prefixes of length greater than or equal to n1, that is, in the interval [n1, L], into a first lookup system. Remaining prefixes of length less than n1 but greater than or equal to n2, that is, in the interval [n2, n1−1], are mapped into a second index utilizing a second hash function, wherein n2 is less than n1. Further lookup systems on prefixes having lengths in the intervals [n3, n2−1], [n4, n3−1], and so on, may also be utilized, as determined by optimization studies and the statistics of routing tables.

    摘要翻译: 一种用于从多个前缀中为输入关键字找到最长匹配前缀的方法和系统。 前缀是具有不同长度的数据串,其长度为n或更大的前缀概率地是最长前缀匹配。 本发明的方法首先将长度大于或等于n1的前缀,即间隔[n1,L]映射到第一查找系统中。 长度小于n1但大于或等于n2的剩余前缀,即在间隔[n2,n1-1]中,使用第二散列函数映射到第二索引,其中n2小于n1。 还可以利用在间隔[n3,n2-1],[n4,n3-1]等中具有长度的前缀上的进一步查找系统,如通过优化研究和路由表的统计确定的。

    Algorithm to bypass L4 processing in an internet protocol forwarding processor
    98.
    发明授权
    Algorithm to bypass L4 processing in an internet protocol forwarding processor 失效
    在互联网协议转发处理器中绕过L4处理的算法

    公开(公告)号:US06654372B1

    公开(公告)日:2003-11-25

    申请号:US09543144

    申请日:2000-04-05

    IPC分类号: H04L1256

    CPC分类号: H04L45/00 H04L45/302

    摘要: A controllable mechanism for by-passing Layer 4 (L4) classification is based on the insertion into a set of MAC rules in SA MAC lookup means a set of Layer 4 (L4) Skip Classification Flags. Routing is accomplished by selecting which rule to apply to the packet and reading the state of the corresponding L4 Skip Classification Flag. In response to a first state of said corresponding L4 Skip Classification Flag, performing an L4 classification followed by a routing of the data packet. In response to a second state of said corresponding L4 Skip Classification Flag, reading the state of a Global Classification Flag. In response to a first state of said Global Classification Flag, performing an L4 classification followed by a routing of said data packet. In response to a second state of said Global Classification Flag performing a routing of the data packet. The L4 Skip option change does not use the option change of reading the L4 Skip Classification Flag from the port table, whereas the second embodiment uses this option. The third and fourth embodiments are similar to the first and second embodiments but with the. addition of inserting into a set of Layer 3 (L3) rules in L3 lookup means a set of Layer 4 (L4) Classification Required Flags. The third embodiment does not use the option of reading the L4 Skip Classification Flag from the port table, whereas the fourth embodiment uses this option.

    摘要翻译: 用于旁路第4层(L4)分类的可控机制是基于在SA MAC查找中插入一组MAC规则的方法,即一组第4层(L4)跳过分类标志。 通过选择哪个规则应用于分组并读取相应的L4跳过分类标志的状态来完成路由。 响应于所述对应的L4跳过分类标志的第一状态,执行L4分类,然后进行数据分组的路由。 响应于所述对应的L4跳过分类标志的第二状态,读取全局分类标志的状态。 响应于所述全局分类标志的第一状态,执行L4分类,然后进行所述数据分组的路由。 响应于所述全局分类标志的第二状态执行数据分组的路由。 L4跳过选项更改不使用从端口表读取L4跳过分类标志的选项更改,而第二个实施例使用此选项。 第三和第四实施例类似于第一和第二实施例,但是与。 在L3查找中插入到一组第3层(L3)规则中的添加意味着一组第4层(L4)分类要求标志。 第三实施例不使用从端口表读取L4跳过分类标志的选项,而第四实施例使用该选项。