Allocation of shared reserve memory to queues in a network device

    公开(公告)号:US11973696B2

    公开(公告)日:2024-04-30

    申请号:US17588385

    申请日:2022-01-31

    Abstract: A network device includes one or more ports, a packet processor, and a memory management circuit. The one or more ports are to communicate packets over a network. The packet processor is to process the packets using a plurality of queues. The memory management circuit is to maintain a shared buffer in a memory and adaptively allocate memory resources from the shared buffer to the queues, to maintain in the memory, in addition to the shared buffer, a shared-reserve memory pool for use by a defined subset of the queues, to identify in the subset a queue that (i) requires additional memory resources, (ii) is not eligible for additional allocation from the shared buffer, and (iii) meets an eligibility condition for the shared-reserve memory pool, and to allocate memory resources to the identified queue from the shared-reserve memory pool.

    BI-DIRECTIONAL ENCRYPTION/DECRYPTION DEVICE FOR UNDERLAY AND OVERLAY OPERATIONS

    公开(公告)号:US20230216837A1

    公开(公告)日:2023-07-06

    申请号:US17568582

    申请日:2022-01-04

    CPC classification number: H04L63/0485 H04L63/164 H04L63/162

    Abstract: Technologies for bi-directional encryption and decryption for underlay and overlay operations are described. One network device includes multiple ports, a network processing element, a programmable path-selection circuit, and a security IC. The programmable path-selection circuit is configured to operate in a first mode in which first outgoing packets are routed to the security integrated circuit to be encrypted before sending on one of the ports, and first incoming packets, received on one of the ports, are routed to the security integrated circuit to be decrypted. The programmable path-selection circuit is configured to operate in a second mode in which second incoming packets are routed to the security integrated circuit to be encrypted before processing by the network processing element and route second outgoing packets to the security integrated circuit to be decrypted after processing by the network processing element.

    Efficient implementation of MPLS tables for multi-level and multi-path scenarios

    公开(公告)号:US09853890B2

    公开(公告)日:2017-12-26

    申请号:US14665005

    申请日:2015-03-23

    CPC classification number: H04L45/507 H04L45/50 H04L45/745

    Abstract: A method for communication includes configuring a router to forward data packets over a network in accordance with Multiprotocol Label Switching (MPLS) labels appended to the data packets. At least first and second entries, corresponding to respective first and second labels, are stored in a Next Hop Label Forwarding Entry (NHLFE) table in the router, such that each of the first entries contains a respective pointer to at least one of the second entries. Upon receiving in the router a data packet from the network, a first entry is selected from among the first entries in the NHLFE table and, responsively to the pointer in the first entry, a second entry is selected. The respective first and second labels from the selected first and second entries are pushed onto an MPLS label stack of the data packet.

    ROUTING VIA MULTIPLE PATHS WITH EFFICIENT TRAFFIC DISTRIBUTION
    34.
    发明申请
    ROUTING VIA MULTIPLE PATHS WITH EFFICIENT TRAFFIC DISTRIBUTION 有权
    通过多功能路由进行有效的交通分配

    公开(公告)号:US20150372916A1

    公开(公告)日:2015-12-24

    申请号:US14732853

    申请日:2015-06-08

    CPC classification number: H04L45/24

    Abstract: A network element includes circuitry and one or more interfaces. The interfaces are configured to connect to a communication network. The circuitry is configured to assign multiple egress interfaces corresponding to respective different paths via the communication network for routing packets to a given destination-address group, to hold, for the given destination-address group, respective state information for each of multiple sets of hash results, to receive via an ingress interface a packet destined to the given destination-address group, to calculate a given hash result for the packet and identify a given set of hash results in which the given hash result falls, and to forward the packet via one of the multiple egress interfaces in accordance with the state information corresponding to the given destination-address group and the given set of hash results.

    Abstract translation: 网络元件包括电路和一个或多个接口。 这些接口被配置为连接到通信网络。 电路被配置为经由通信网络分配对应于各个不同路径的多个出口接口,用于将分组路由到给定的目的地地址组,以便为​​给定的目的地地址组保持多组散列中的每一个的各自的状态信息 结果,要通过入口接口接收去往给定目的地地址组的分组,以计算分组的给定哈希结果并且识别给定哈希结果下降的给定的哈希结果集合,并且经由 根据对应于给定目的地地址组的状态信息和给定的散列结果集合,多个出口接口之一。

    DETECTION OF ROOT AND VICTIM NETWORK CONGESTION
    35.
    发明申请
    DETECTION OF ROOT AND VICTIM NETWORK CONGESTION 审中-公开
    检测根和受阻网络约束

    公开(公告)号:US20150103667A1

    公开(公告)日:2015-04-16

    申请号:US14052743

    申请日:2013-10-13

    CPC classification number: H04L47/30 H04L47/11 H04L47/12

    Abstract: A method in a communication network includes defining a root congestion condition for a network switch if the switch creates congestion in the network while switches downstream are congestion free, and a victim congestion condition if the switch creates the congestion as a result of one or more other congested switches downstream. A buffer fill level in a first switch, created by network traffic, is monitored. A binary notification is received from a second switch, which is connected to the first switch. A decision whether the first switch or the second switch is in a root or a victim congestion condition is made, based on both the buffer fill level and the binary notification. A network congestion control procedure is applied based on the decided congestion condition.

    Abstract translation: 通信网络中的一种方法包括:如果交换机在网络中产生拥塞,而下游的交换机拥塞不足则定义网络交换机的根拥塞状况;以及如果交换机由于一个或多个其他 下游拥塞交换机。 监视由网络流量创建的第一交换机中的缓冲区填充级别。 从连接到第一开关的第二开关接收二进制通知。 基于缓冲器填充级别和二进制通知,进行第一交换机或第二交换机是否处于根或者拥塞状态的判定。 基于确定的拥塞状况应用网络拥塞控制过程。

    Early and efficient packet truncation

    公开(公告)号:US12126541B2

    公开(公告)日:2024-10-22

    申请号:US17850537

    申请日:2022-06-27

    CPC classification number: H04L47/365

    Abstract: Networking devices, systems, and methods are provided. In one example, a method includes receiving a packet at a networking device; evaluating the packet; based on the evaluation of the packet, truncating the packet from a first size to a second size that is smaller than the first size; and storing the truncated packet in a buffer prior to transmitting the truncated packet with the networking device.

    Bi-directional encryption/decryption device for underlay and overlay operations

    公开(公告)号:US11991159B2

    公开(公告)日:2024-05-21

    申请号:US17568582

    申请日:2022-01-04

    Abstract: Technologies for bi-directional encryption and decryption for underlay and overlay operations are described. One network device includes multiple ports, a network processing element, a programmable path-selection circuit, and a security IC. The programmable path-selection circuit is configured to operate in a first mode in which first outgoing packets are routed to the security integrated circuit to be encrypted before sending on one of the ports, and first incoming packets, received on one of the ports, are routed to the security integrated circuit to be decrypted. The programmable path-selection circuit is configured to operate in a second mode in which second incoming packets are routed to the security integrated circuit to be encrypted before processing by the network processing element and route second outgoing packets to the security integrated circuit to be decrypted after processing by the network processing element.

    EARLY AND EFFICIENT PACKET TRUNCATION
    40.
    发明公开

    公开(公告)号:US20230421508A1

    公开(公告)日:2023-12-28

    申请号:US17850537

    申请日:2022-06-27

    CPC classification number: H04L47/365

    Abstract: Networking devices, systems, and methods are provided. In one example, a method includes receiving a packet at a networking device; evaluating the packet; based on the evaluation of the packet, truncating the packet from a first size to a second size that is smaller than the first size; and storing the truncated packet in a buffer prior to transmitting the truncated packet with the networking device.

Patent Agency Ranking