Algorithm to bypass L4 processing in an internet protocol forwarding processor
    1.
    发明授权
    Algorithm to bypass L4 processing in an internet protocol forwarding processor 有权
    在互联网协议转发处理器中绕过L4处理的算法

    公开(公告)号:US06700883B1

    公开(公告)日:2004-03-02

    申请号:US09543145

    申请日:2000-04-05

    IPC分类号: H04L1256

    CPC分类号: H04L29/06 H04L69/32

    摘要: A controllable mechanism for by-passing Layer 4 (L4) classification is based on the insertion into a set of Layer 3 (L3) rules in an L3 lookup tree set of Layer 4 (L4) Classification Required Flags. The state of the L4 classification flag is set by comparing the L4 classification rule to an IP (Internet Protocol) lookup rule. Routing is accomplished by selecting which rule to apply to the data packet and reading the state of the corresponding L4 Classification Required Flag. In response to a first state of the corresponding L4 Classification Required Flag, an L4 classification is performed followed by a routing of the data packet. In response to a second state of the corresponding L4 Classification Required Flag performing a routing of said data packet. In a second embodiment, the method inserts into a set of L3 rules in L3 lookup means a set L4 Classification Required Flags and Global Flags. A first state of the L4 Classification Required Flag is set when a new rule is added to L4 classification means, the new rule being correlatable to a single entry in L3 lookup means. Routing is accomplished by selecting which rule to apply to the data packet and reading the state of the corresponding L4 classification required flag. In response to a first state of the corresponding L4 classification flag, a L4 classification is performed followed by a routing of the data packet. In response to a second state of the corresponding L4 classification flag, the state of the Global Flag is read, and in response to a first state of the Global flag, a L4 classification is performed followed by a routing of the data packet. In response to a second state of the Global Flag, the data packet is routed.

    摘要翻译: 用于旁路第4层(L4)分类的可控机制是基于在第4层(L4)分类要求标志的L3查找树集中插入到一组第3层(L3)规则中。 通过将L4分类规则与IP(因特网协议)查找规则进行比较来设定L4分类标志的状态。 通过选择应用于数据包的规则并读取相应的L4分类要求标志的状态来完成路由。 响应于对应的L4分类要求标志的第一状态,执行L4分类,然后进行数据分组的路由。 响应于相应的L4分类要求标志的第二状态来执行所述数据分组的路由。 在第二实施例中,该方法在L3查找中插入一组L3规则,即集合L4分类要求标志和全局标志。 当将新规则添加到L4分类装置时,设置L4分类要求标志的第一状态,新规则可与L3查找装置中的单个条目相关。 通过选择应用于数据包的规则并读取相应的L4分类所需标志的状态来完成路由。 响应对应的L4分类标志的第一状态,执行L4分类,然后进行数据分组的路由。 响应对应的L4分类标志的第二状态,读取全局标志的状态,并且响应于全局标志的第一状态,执行L4分类,然后进行数据分组的路由。 响应全局标志的第二状态,数据包被路由。

    Algorithm to bypass L4 processing in an internet protocol forwarding processor
    2.
    发明授权
    Algorithm to bypass L4 processing in an internet protocol forwarding processor 失效
    在互联网协议转发处理器中绕过L4处理的算法

    公开(公告)号:US06654372B1

    公开(公告)日:2003-11-25

    申请号:US09543144

    申请日:2000-04-05

    IPC分类号: H04L1256

    CPC分类号: H04L45/00 H04L45/302

    摘要: A controllable mechanism for by-passing Layer 4 (L4) classification is based on the insertion into a set of MAC rules in SA MAC lookup means a set of Layer 4 (L4) Skip Classification Flags. Routing is accomplished by selecting which rule to apply to the packet and reading the state of the corresponding L4 Skip Classification Flag. In response to a first state of said corresponding L4 Skip Classification Flag, performing an L4 classification followed by a routing of the data packet. In response to a second state of said corresponding L4 Skip Classification Flag, reading the state of a Global Classification Flag. In response to a first state of said Global Classification Flag, performing an L4 classification followed by a routing of said data packet. In response to a second state of said Global Classification Flag performing a routing of the data packet. The L4 Skip option change does not use the option change of reading the L4 Skip Classification Flag from the port table, whereas the second embodiment uses this option. The third and fourth embodiments are similar to the first and second embodiments but with the. addition of inserting into a set of Layer 3 (L3) rules in L3 lookup means a set of Layer 4 (L4) Classification Required Flags. The third embodiment does not use the option of reading the L4 Skip Classification Flag from the port table, whereas the fourth embodiment uses this option.

    摘要翻译: 用于旁路第4层(L4)分类的可控机制是基于在SA MAC查找中插入一组MAC规则的方法,即一组第4层(L4)跳过分类标志。 通过选择哪个规则应用于分组并读取相应的L4跳过分类标志的状态来完成路由。 响应于所述对应的L4跳过分类标志的第一状态,执行L4分类,然后进行数据分组的路由。 响应于所述对应的L4跳过分类标志的第二状态,读取全局分类标志的状态。 响应于所述全局分类标志的第一状态,执行L4分类,然后进行所述数据分组的路由。 响应于所述全局分类标志的第二状态执行数据分组的路由。 L4跳过选项更改不使用从端口表读取L4跳过分类标志的选项更改,而第二个实施例使用此选项。 第三和第四实施例类似于第一和第二实施例,但是与。 在L3查找中插入到一组第3层(L3)规则中的添加意味着一组第4层(L4)分类要求标志。 第三实施例不使用从端口表读取L4跳过分类标志的选项,而第四实施例使用该选项。

    Hybrid longest prefix match and fixed match searches
    4.
    发明授权
    Hybrid longest prefix match and fixed match searches 失效
    混合最长前缀匹配和固定匹配搜索

    公开(公告)号:US06792423B1

    公开(公告)日:2004-09-14

    申请号:US09723717

    申请日:2000-11-28

    IPC分类号: G06T1730

    摘要: A method and system for finding a longest matching prefix for an input keyword from among multiple prefixes. The prefixes are data strings of varying lengths wherein prefixes of length n or greater are probabilistically a longest prefix match. The method of the present invention begins by mapping the prefixes of length greater than or equal to n1, that is, in the interval [n1, L], into a first lookup system. Remaining prefixes of length less than n1 but greater than or equal to n2, that is, in the interval [n2, n1−1], are mapped into a second index utilizing a second hash function, wherein n2 is less than n1. Further lookup systems on prefixes having lengths in the intervals [n3, n2−1], [n4, n3−1], and so on, may also be utilized, as determined by optimization studies and the statistics of routing tables.

    摘要翻译: 一种用于从多个前缀中为输入关键字找到最长匹配前缀的方法和系统。 前缀是具有不同长度的数据串,其长度为n或更大的前缀概率地是最长前缀匹配。 本发明的方法首先将长度大于或等于n1的前缀,即间隔[n1,L]映射到第一查找系统中。 长度小于n1但大于或等于n2的剩余前缀,即在间隔[n2,n1-1]中,使用第二散列函数映射到第二索引,其中n2小于n1。 还可以利用在间隔[n3,n2-1],[n4,n3-1]等中具有长度的前缀上的进一步查找系统,如通过优化研究和路由表的统计确定的。

    Classification support system and method for fragmented IP packets
    5.
    发明授权
    Classification support system and method for fragmented IP packets 失效
    分片支持系统和分片IP分组的方法

    公开(公告)号:US07870278B2

    公开(公告)日:2011-01-11

    申请号:US12118090

    申请日:2008-05-09

    IPC分类号: G06F15/16 G06F7/00 H04L12/50

    摘要: A wire-speed forwarding platform and method for supporting multifield classification of a packet fragmented into a plurality of fragments in the wire-speed forwarding platform, comprising: receiving a fragment of the fragmented packet at the forwarding platform and deriving a key from one or more fields of the received fragment; and performing multifield classification of the received fragment by matching the key to a rule out of a plurality of rules, the rule comprising a plurality of fields including at least one field for specifying whether the received fragment's fragmentation characteristics are to be applied when performing the multifield classification.

    摘要翻译: 一种线速转发平台和方法,用于支持分片到线速转发平台中的多个片段的分组的多帧分类,包括:在转发平台处接收分片分组的片段,并从一个或多个 收到的片段的字段; 以及通过将所述密钥与多个规则中的规则进行匹配来对所接收的片段进行多字段分类,所述规则包括多个字段,所述多个字段包括至少一个字段,用于指定在执行所述多字段时是否应用所接收的片段的分片特征 分类。

    Classification support system and method for fragmented IP packets
    6.
    发明授权
    Classification support system and method for fragmented IP packets 失效
    分片支持系统和分片IP分组的方法

    公开(公告)号:US07403999B2

    公开(公告)日:2008-07-22

    申请号:US10034470

    申请日:2001-12-28

    IPC分类号: G06F15/16 G06F7/00 H04L12/50

    摘要: A wire-speed forwarding platform and method for supporting multifield classification of a packet fragmented into a plurality of fragments in the wire-speed forwarding platform, comprising: receiving a fragment of the fragmented packet at the forwarding platform and deriving a key from one or more fields of the received fragment; and performing multifield classification of the received fragment by matching the key to a rule out of a plurality of rules, the rule comprising a plurality of fields including at least one field for specifying whether the received fragment's fragmentation characteristics are to be applied when performing the multifield classification.

    摘要翻译: 一种线速转发平台和方法,用于支持分片到线速转发平台中的多个片段的分组的多帧分类,包括:在转发平台处接收分片分组的片段,并从一个或多个 收到的片段的字段; 以及通过将所述密钥与多个规则中的规则进行匹配来对所接收的片段进行多字段分类,所述规则包括多个字段,所述多个字段包括至少一个字段,用于指定在执行所述多字段时是否应用所接收的片段的分片特征 分类。

    CLASSIFICATION SUPPORT SYSTEM AND METHOD FOR FRAGMENTED IP PACKETS
    7.
    发明申请
    CLASSIFICATION SUPPORT SYSTEM AND METHOD FOR FRAGMENTED IP PACKETS 失效
    分类IP分组的分类支持系统和方法

    公开(公告)号:US20080205405A1

    公开(公告)日:2008-08-28

    申请号:US12118090

    申请日:2008-05-09

    IPC分类号: H04L12/56

    摘要: A wire-speed forwarding platform and method for supporting multifield classification of a packet fragmented into a plurality of fragments in the wire-speed forwarding platform, comprising: receiving a fragment of the fragmented packet at the forwarding platform and deriving a key from one or more fields of the received fragment; and performing multifield classification of the received fragment by matching the key to a rule out of a plurality of rules, the rule comprising a plurality of fields including at least one field for specifying whether the received fragment's fragmentation characteristics are to be applied when performing the multifield classification.

    摘要翻译: 一种线速转发平台和方法,用于支持分片到线速转发平台中的多个片段的分组的多帧分类,包括:在转发平台处接收分片分组的片段,并从一个或多个 收到的片段的字段; 以及通过将所述密钥与多个规则中的规则进行匹配来对所接收的片段进行多字段分类,所述规则包括多个字段,所述多个字段包括至少一个字段,用于指定在执行所述多字段时是否应用所接收的片段的分片特征 分类。

    Minimizing memory accesses for a network implementing differential services over multi-protocol label switching
    8.
    发明授权
    Minimizing memory accesses for a network implementing differential services over multi-protocol label switching 失效
    最小化通过多协议标签交换实现差分服务的网络的存储器访问

    公开(公告)号:US07304991B2

    公开(公告)日:2007-12-04

    申请号:US10174390

    申请日:2002-06-18

    IPC分类号: H04L12/28

    摘要: A method, system and computer program product for translating a type of service field of one protocol into multiple protocols. An ingress router in a DIFFerentiated SERVices network (Diffserv over MPLS network) may determine a type of quality of service, e.g., forward IP packet using best effort. A value referred to as a Per Hope Behavior (PHB) value may be generated based on the identified type of quality of service. The PHB value may be used to index into a table comprising a row of entries with different quality of service values, e.g., DSCP value, EXP value, corresponding to a particular PHB value. Consequently, the PHB value may be used to perform a single memory access to determine the quality of service values for a plurality of protocols where the quality of service values corresponds to the identified type of quality of service.

    摘要翻译: 一种方法,系统和计算机程序产品,用于将一种协议的服务领域的类型转换为多种协议。 DIFFerentiated SERVices网络中的入侵路由器(MPLS网络上的Diffserv)可以使用最大的努力来确定服务质量的类型,例如转发IP分组。 可以基于所识别的服务质量类型来生成被称为希望行为(PHB)值的值。 PHB值可以用于索引到包括具有不同服务质量值的条目行的表,例如对应于特定PHB值的DSCP值,EXP值。 因此,PHB值可用于执行单个存储器访问以确定多个协议的服务质量值,其中服务质量值对应于所识别的服务质量类型。

    Network processor/software control architecture
    9.
    发明授权
    Network processor/software control architecture 失效
    网络处理器/软件控制架构

    公开(公告)号:US06898179B1

    公开(公告)日:2005-05-24

    申请号:US09544896

    申请日:2000-04-07

    CPC分类号: G06F15/17

    摘要: The transport protocol for communicating between general purpose processors acting as contact points and network processors in a packet processing environment such as Ethernet is provided. In such an environment, there is at least one single control point processor (CP) and a plurality of network processors (NP), sometimes referred to as blades. A typical system could contain two to sixteen network processors, and each network processor connects to a plurality of devices which communicate with each other over a network transport, such as Ethernet. The CP typically controls the functionality and the functioning of the network processors to function in a way that connects one end user with another, whether or not the end user is on the same network processor or a different network processor. There are three types of communication provided; first, there is communication generally referred to as control services and normally there will be only one pico processor which operates as a GCH (guided cell handler) and only one that operates as a guided tree handler (GTH). A path is provided for the controls to the GCH and the GTH commands, and a separate path is provided for the data frames between the GDH's (general data handler) and the CP.

    摘要翻译: 提供了用于在诸如以太网的分组处理环境中用作接触点的通用处理器和网络处理器之间进行通信的传输协议。 在这样的环境中,存在至少一个单个控制点处理器(CP)和多个网络处理器(NP),有时称为刀片。 典型的系统可以包含两到十六个网络处理器,并且每个网络处理器连接到通过诸如以太网的网络传输彼此通信的多个设备。 CP通常控制网络处理器的功能和功能,以使终端用户与另一终端用户相连的方式起作用,无论终端用户是否在同一个网络处理器或不同的网络处理器上。 提供三种通讯方式; 首先,通常被称为控制服务的通信,并且通常将只有一个微微处理器作为GCH(引导的单元处理器)操作,并且只有一个作为引导树处理器(GTH)操作。 为GCH和GTH命令的控制提供路径,并为GDH(通用数据处理程序)和CP之间的数据帧提供单独的路径。

    Method and system for downloading software managed trees in a network processing system
    10.
    发明授权
    Method and system for downloading software managed trees in a network processing system 失效
    在网络处理系统中下载软件管理树的方法和系统

    公开(公告)号:US06799207B1

    公开(公告)日:2004-09-28

    申请号:US09546343

    申请日:2000-04-10

    IPC分类号: G06F15173

    摘要: A method and system for downloading software managed trees (SMTs) in a network processing system provides dynamic update of frame classifiers while maintaining proper network protocol processing. The network processing system includes a general purpose processor acting as control point processor and a plurality of network processors. The new SMT is built by an application on the control point processor and downloaded to one or more of the network processors. The new SMT is placed in a separate memory location accessible to the network processors, rather then overwriting the existing SMT. The active tree pointers are then changed to transfer control to the new SMT.

    摘要翻译: 在网络处理系统中下载软件管理树(SMT)的方法和系统提供帧分类器的动态更新,同时保持适当的网络协议处理。 网络处理系统包括充当控制点处理器的通用处理器和多个网络处理器。 新的SMT由控制点处理器上的应用程序构建并下载到一个或多个网络处理器。 新的SMT放置在网络处理器可访问的单独内存位置,而不是覆盖现有的SMT。 然后更改活动树指针,将控件转移到新的SMT。