Abstract:
In general, techniques are described for selectively applying and reusing filters stored in a router. In one example, a method includes receiving a network access request from a first user. The method also includes selecting a candidate rule group associated with the packet flow, wherein the candidate rule group comprises one or more currently deployed rules of an existing rule group on the computing device that are currently installed within a forwarding plane and are being applied by the forwarding plane to network traffic associated with a second user. The method also includes installing a new rule group comprising the one or more currently deployed rules of the existing rule group and one or more new rules associated with the first user and not currently installed within a forwarding plane. The method also includes applying each rule of the new rule group to network traffic associated with the first user.
Abstract:
In general, techniques are described for encoding port ranges. In one example, a method includes generating an encoded value that represents a specified port range including a first element storing an identifier that identifies a frequently occurring port range stored in an associative data structure of most frequently occurring port ranges, a second element storing an index that represents a dynamically-learned port range specifying at least a part of the specified port range, the dynamically-learned port range represented in a tree-structure of dynamically-learned port ranges and identified by the index, and applying, by a forwarding plane of the computing device, one or more filters associated with the encoded value to a packet that specifies a port included in the specified port range.
Abstract:
A network device component receives traffic, determines whether the traffic is host bound traffic or non-host bound traffic, and classifies, based on a user-defined classification scheme, the traffic when the traffic is host bound traffic. The network device component also assigns, based on the classification, the classified host bound traffic to a queue associated with network device component for forwarding the classified host bound traffic to a host component of the network device.
Abstract:
An embodiment of the invention provides a method for glare resolution in a network. The method first designates a master node and a slave node. The method prevents the slave node from initially allocating a first line and a first timeslot for a first sub network connection (SNC) (SNC2 or SNCs2. The master node allocates the first line and the first timeslot for the first SNC, and a second line and a second timeslot for a second SNC (SNC1 or SNCs1).
Abstract:
Techniques for handling multicast over link aggregated (LAG) interfaces and integrated routing and bridging (IRB) interfaces in a network device are described in which interfaces, at which a data unit is to be transmitted, may be represented hierarchically in which the LAG interfaces and IRB interfaces are represented as pointers. In one implementation, a device may determine routes for data units, where a route for a multicast data unit is represented as a set of interfaces of the device at which the data unit is to be output. Entries in the set of interfaces may include physical interfaces of the device and pointers to LAG interfaces or pointers to the IRB interfaces. The device may generate tokens to represent routes for data units and resolve the pointers to the LAG interfaces or the IRB interfaces to obtain physical interfaces of the router corresponding to a LAG or an IRB.
Abstract:
In general, techniques are described for selectively applying and reusing filters stored in a router. In one example, a method includes receiving a network access request from a first user. The method also includes selecting a candidate rule group associated with the packet flow, wherein the candidate rule group comprises one or more currently deployed rules of an existing rule group on the computing device that are currently installed within a forwarding plane and are being applied by the forwarding plane to network traffic associated with a second user. The method also includes installing a new rule group comprising the one or more currently deployed rules of the existing rule group and one or more new rules associated with the first user and not currently installed within a forwarding plane. The method also includes applying each rule of the new rule group to network traffic associated with the first user.
Abstract:
In general, this disclosure describes techniques for applying, with a network device, subscriber-specific packet processing using an internal processing path that includes service objects that are commonly applied to multiple packet flows associated with multiple subscribers. In one example, a network device control plane creates subscriber records that include, for respective subscribers, one or more variable values that specify service objects as well as an identifier for a packet processing template. A forwarding plane of the network device receives and maps subscriber packets to an associated subscriber record and then processes the packet by executing the packet processing template specified by the subscriber record. When the forwarding plane reaches a variable while executing the specified packet processing template, the forwarding plane reads the associated variable value from the subscriber record to identify and then apply the subscriber-specific service object specified by the variable.
Abstract:
Consistent with a feature of the present invention, protection and working routes are determined by assigning administrative weight values to each route in a network. The administrative weight value of a route can correspond to the physical distance associated with that route. Once the administrative weight values are assigned, that route having the lowest administrative weight value is designated the working route. The protect route is next identified by reassigning administrative weight values to the remaining routes in the network. Those routes that share resources, such as a fiber bundle or conduit, with the working route are assigned high administrative weight values, while those routes independent of the working route are assigned administrative weight values corresponding to the physical distance of each route. That route having the lowest administrative weight value after working route selection is designated the protect route.
Abstract:
In general, techniques are described for encoding port ranges. In one example, a method includes generating an encoded value that represents a specified port range including a first element storing an identifier that identifies a frequently occurring port range stored in an associative data structure of most frequently occurring port ranges, a second element storing an index that represents a dynamically-learned port range specifying at least a part of the specified port range, the dynamically-learned port range represented in a tree-structure of dynamically-learned port ranges and identified by the index, and applying, by a forwarding plane of the computing device, one or more filters associated with the encoded value to a packet that specifies a port included in the specified port range.
Abstract:
Techniques for handling multicast over link aggregated (LAG) interfaces and integrated routing and bridging (IRB) interfaces in a network device are described in which interfaces, at which a data unit is to be transmitted, may be represented hierarchically in which the LAG interfaces and IRB interfaces are represented as pointers. In one implementation, a device may determine routes for data units, where a route for a multicast data unit is represented as a set of interfaces of the device at which the data unit is to be output. Entries in the set of interfaces may include physical interfaces of the device and pointers to LAG interfaces or pointers to the IRB interfaces. The device may generate tokens to represent routes for data units and resolve the pointers to the LAG interfaces or the IRB interfaces to obtain physical interfaces of the router corresponding to a LAG or an IRB.