System and methods for distributed output packet metering using input lookups

    公开(公告)号:US09210091B2

    公开(公告)日:2015-12-08

    申请号:US12022486

    申请日:2008-01-30

    摘要: System and methods for metering output packet traffic at network devices. Ingress packet lookups are employed in combination with egress packet meters, which can be arranged in parallel fashion, and used to meter traffic across multiple blades of a switch chassis. Also, egress packet traffic metering is accomplished while matching complex ingress rules without additional egress packet processing. The system has a first node for creating requests that contain a number of filter indicies for specifying packet forwarding criteria. The first node also specifies values for the filter and meter indicies based on a packet to be forwarded. The system also has a second node coupled to the first node and to a number of ports. The second node has at least one table for specifying which of the ports are to receive the packet based on the filter values, and at least one table for accounting for egress traffic bandwidth.

    Packet processing indication
    53.
    发明授权
    Packet processing indication 有权
    分组处理指示

    公开(公告)号:US08897139B2

    公开(公告)日:2014-11-25

    申请号:US12328961

    申请日:2008-12-05

    摘要: A network, network devices, and methods are described for packet processing indication. A method includes tunneling a packet from a first network device to a second network device associated with a first checking functionality. The second network device has an address different than an original destination address of the packet. The method also includes return-tunneling the packet from the second network device to the first network device with an indication of whether the packet was processed by the first checking functionality. The method includes tunneling the packet from the first network device to a third network device associated with a second checking functionality in response to the indication being that the packet was not processed by the first checking functionality. The third network device has an address different from the original destination address of the packet.

    摘要翻译: 描述了用于分组处理指示的网络,网络设备和方法。 一种方法包括将分组从第一网络设备隧道化到与第一检查功能相关联的第二网络设备。 第二网络设备具有与分组的原始目的地地址不同的地址。 该方法还包括将分组从第二网络设备返回隧穿到第一网络设备,并指示该分组是否被第一检查功能处理。 所述方法包括:响应于所述指示是所述分组未被所述第一检查功能处理,所述分组将所述分组从所述第一网络设备隧道化到与第二检查功能相关联的第三网络设备。 第三网络设备具有与分组的原始目的地址不同的地址。

    Dynamic hardware address assignment to network devices in a switch mesh
    54.
    发明授权
    Dynamic hardware address assignment to network devices in a switch mesh 有权
    动态硬件地址分配给交换机网格中的网络设备

    公开(公告)号:US08594096B2

    公开(公告)日:2013-11-26

    申请号:US13285498

    申请日:2011-10-31

    IPC分类号: H04L12/28

    摘要: Dynamic hardware address assignment to network devices in a switch mesh is described. In an example, a network device in a switch mesh dynamically assigns a hardware address to a network interface. The network device receives an address request from a client through the switch mesh. The network device calculates an index value for the client based on data in the address request. The network device selects the hardware address of a plurality of hardware addresses assigned to the network interface based on the index value. The switch mesh includes a plurality of traffic paths respectively for the plurality of hardware addresses. The network device sends the hardware address in a reply to the client through the switch mesh.

    摘要翻译: 描述了交换机网关中网络设备的动态硬件地址分配。 在一个示例中,交换机网关中的网络设备动态地将硬件地址分配给网络接口。 网络设备通过交换机网格接收客户端的地址请求。 网络设备根据地址请求中的数据计算客户端的索引值。 网络设备基于索引值来选择分配给网络接口的多个硬件地址的硬件地址。 交换机网关分别包括用于多个硬件地址的多个业务路径。 网络设备通过交换机网格向客户端发送回复中的硬件地址。

    DYNAMIC HARDWARE ADDRESS ASSIGNMENT TO NETWORK DEVICES IN A SWITCH MESH
    55.
    发明申请
    DYNAMIC HARDWARE ADDRESS ASSIGNMENT TO NETWORK DEVICES IN A SWITCH MESH 有权
    动态硬件地址分配到开关网络中的网络设备

    公开(公告)号:US20130107755A1

    公开(公告)日:2013-05-02

    申请号:US13285498

    申请日:2011-10-31

    IPC分类号: H04L12/28

    摘要: Dynamic hardware address assignment to network devices in a switch mesh is described. In an example, a network device in a switch mesh dynamically assigns a hardware address to a network interface. The network device receives an address request from a client through the switch mesh. The network device calculates an index value for the client based on data in the address request. The network device selects the hardware address of a plurality of hardware addresses assigned to the network interface based on the index value. The switch mesh includes a plurality of traffic paths respectively for the plurality of hardware addresses. The network device sends the hardware address in a reply to the client through the switch mesh.

    摘要翻译: 描述了交换机网关中网络设备的动态硬件地址分配。 在一个示例中,交换机网关中的网络设备动态地将硬件地址分配给网络接口。 网络设备通过交换机网格接收客户端的地址请求。 网络设备根据地址请求中的数据计算客户端的索引值。 网络设备基于索引值来选择分配给网络接口的多个硬件地址的硬件地址。 交换机网关分别包括用于多个硬件地址的多个业务路径。 网络设备通过交换机网格向客户端发送回复中的硬件地址。

    Loadbalancing network traffic across multiple remote inspection devices
    56.
    发明授权
    Loadbalancing network traffic across multiple remote inspection devices 有权
    跨多个远程检测设备负载平衡网络流量

    公开(公告)号:US07965636B2

    公开(公告)日:2011-06-21

    申请号:US12315780

    申请日:2008-12-05

    IPC分类号: H04L12/26

    摘要: Methods of balancing network packet traffic among multiple checking functionalities (CFs) are described. A network has at least one client operatively connected to at least one source switch and multiple available CFs operatively connected to at least one destination switch. Each available CF has predetermined, but possibly different inspection capabilities. A source switch receiving packets from a client inspects each packet and can optionally choose an available CF having at least the minimum necessary inspection capabilities to inspect the particular packet, and tunnel the packet to the chosen CF.

    摘要翻译: 描述了在多个检查功能(CF)之间平衡网络数据包流量的方法。 网络具有至少一个可操作地连接到至少一个源交换机的客户端和可操作地连接到至少一个目的地交换机的多个可用CF。 每个可用的CF具有预定但可能不同的检查能力。 从客户端接收分组的源交换机检查每个分组,并且可以可选地选择具有至少最小必需检查能力的可用CF以检查特定分组,并将分组隧道到所选择的CF。

    MARKED PACKET FORWARDING
    57.
    发明申请
    MARKED PACKET FORWARDING 有权
    标记分组前进

    公开(公告)号:US20110134932A1

    公开(公告)日:2011-06-09

    申请号:US13026803

    申请日:2011-02-14

    IPC分类号: H04L12/56

    摘要: A network, network devices, and methods are described for marked packet forwarding. A network device includes a network chip having a number of network ports for receiving and transmitting packets. The network chip includes logic to decapsulate a packet received from a tunnel, mark the packet with a handle associated with an originating network device of the packet using information from an encapsulation header, and forward the marked packet to a checking functionality having a destination address different from an original destination address of the packet.

    摘要翻译: 描述网络,网络设备和方法用于标记的分组转发。 网络设备包括具有用于接收和发送分组的多个网络端口的网络芯片。 网络芯片包括用于对从隧道接收的分组进行解封装的逻辑,使用来自封装头的信息使用与分组的始发网络设备相关联的句柄来标记分组,并将标记的分组转发到具有目的地地址不同的检查功能 从分组的原始目的地址。

    Marked packet forwarding
    58.
    发明授权
    Marked packet forwarding 有权
    标记数据包转发

    公开(公告)号:US07903655B2

    公开(公告)日:2011-03-08

    申请号:US11788179

    申请日:2007-04-19

    摘要: A network, network devices, and methods are described for marked packet forwarding. A network device includes a network chip having a number of network ports for receiving and transmitting packets. The network chip includes logic to decapsulate a packet received from a tunnel, mark the packet with a handle associated with an originating network device of the packet using information from an encapsulation header, and forward the marked packet to a checking functionality having a destination address different from an original destination address of the packet.

    摘要翻译: 描述网络,网络设备和方法用于标记的分组转发。 网络设备包括具有用于接收和发送分组的多个网络端口的网络芯片。 网络芯片包括用于对从隧道接收的分组进行解封装的逻辑,使用来自封装头的信息使用与分组的始发网络设备相关联的句柄来标记分组,并将标记的分组转发到具有目的地地址不同的检查功能 从分组的原始目的地址。

    SYSTEM AND METHOD FOR SELECTIVE DIRECT MEMORY ACCESS
    59.
    发明申请
    SYSTEM AND METHOD FOR SELECTIVE DIRECT MEMORY ACCESS 有权
    用于选择性直接存储器访问的系统和方法

    公开(公告)号:US20100329257A1

    公开(公告)日:2010-12-30

    申请号:US12494993

    申请日:2009-06-30

    IPC分类号: H04L12/56

    摘要: A method of selective direct memory access (DMA) in a computer system having a network interface card (NIC), a processor subsystem, and a memory accessible to the subsystem, including the steps of the NIC receiving a plurality of packets from an external source; the NIC decoding a portion of each packet and determining whether the packet should be accepted by the computer system based on a predefined rule; and if the packet is accepted, selectively truncating the packet based on the predefined rule, and storing the truncated packet in the memory.

    摘要翻译: 一种在具有网络接口卡(NIC),处理器子系统和子系统可访问的存储器的计算机系统中的选择性直接存储器访问(DMA)的方法,包括NIC从外部源接收多个分组的步骤 ; NIC对每个分组的一部分进行解码,并且基于预定义的规则确定分组是否应该被计算机系统接受; 并且如果分组被接受,则基于预定义规则选择性地截断分组,并将截断的分组存储在存储器中。

    Loadbalancing network traffic across multiple remote inspection devices
    60.
    发明申请
    Loadbalancing network traffic across multiple remote inspection devices 有权
    跨多个远程检测设备负载平衡网络流量

    公开(公告)号:US20100142371A1

    公开(公告)日:2010-06-10

    申请号:US12315780

    申请日:2008-12-05

    IPC分类号: H04L12/24 H04L12/56 G06F15/16

    摘要: Methods of balancing network packet traffic among multiple checking functionalities (CFs) are described. A network has at least one client operatively connected to at least one source switch and multiple available CFs operatively connected to at least one destination switch. Each available CF has predetermined, but possibly different inspection capabilities. A source switch receiving packets from a client inspects each packet and can optionally choose an available CF having at least the minimum necessary inspection capabilities to inspect the particular packet, and tunnel the packet to the chosen CF.

    摘要翻译: 描述了在多个检查功能(CF)之间平衡网络数据包流量的方法。 网络具有至少一个可操作地连接到至少一个源交换机的客户端和可操作地连接到至少一个目的地交换机的多个可用CF。 每个可用的CF具有预定但可能不同的检查能力。 从客户端接收分组的源交换机检查每个分组,并且可以可选地选择具有至少最小必需检查能力的可用CF以检查特定分组,并将分组隧道到所选择的CF。