公开(公告)号：US20210105230A1

公开(公告)日：2021-04-08

申请号：US17092136

申请日：2020-11-06

Applicant: Barefoot Networks, Inc.

Inventor： Xiaozhou LI ,  Jeongkeun LEE ,  Changhoon KIM ,  John Nathan FOSTER

IPC: H04L12/935 ,  H04L12/741 ,  H04L12/747 ,  G06F3/06

Abstract: Some embodiments of the invention provide a forwarding element (e.g., a switch, a router, etc.) that has one or more data plane, message-processing pipelines with key-value processing circuits. The forwarding element's data plane key-value circuits allow the forwarding element to perform key-value services that would otherwise have to be performed by data compute nodes connected by the network fabric that includes the forwarding element. In some embodiments, the key-value (KV) services of the forwarding element and other similar forwarding elements supplement the key-value services of a distributed set of key-value servers by caching a subset of the most commonly used key-value pairs in the forwarding elements that connect the set of key-value servers with their client applications. In some embodiments, the key-value circuits of the forwarding element perform the key-value service operations at message-processing line rates at which the forwarding element forwards messages to the data compute nodes and/or to other network forwarding elements in the network fabric.

公开(公告)号：US20230027453A1

公开(公告)日：2023-01-26

申请号：US17877512

申请日：2022-07-29

Applicant: Barefoot Networks, Inc.

Inventor： Xiaozhou LI ,  Jeongkeun LEE ,  Changhoon KIM ,  John Nathan FOSTER

IPC: H04L49/00 ,  H04L45/00 ,  H04L45/745 ,  H04L45/74 ,  G06F3/06

Abstract: Some embodiments of the invention provide a forwarding element (e.g., a switch, a router, etc.) that has one or more data plane, message-processing pipelines with key-value processing circuits. The forwarding element's data plane key-value circuits allow the forwarding element to perform key-value services that would otherwise have to be performed by data compute nodes connected by the network fabric that includes the forwarding element. In some embodiments, the key-value (KV) services of the forwarding element and other similar forwarding elements supplement the key-value services of a distributed set of key-value servers by caching a subset of the most commonly used key-value pairs in the forwarding elements that connect the set of key-value servers with their client applications. In some embodiments, the key-value circuits of the forwarding element perform the key-value service operations at message-processing line rates at which the forwarding element forwards messages to the data compute nodes and/or to other network forwarding elements in the network fabric.

公开(公告)号：US20200007473A1

公开(公告)日：2020-01-02

申请号：US16569554

申请日：2019-09-12

Applicant: Barefoot Networks, Inc.

Inventor： Changhoon KIM ,  Xiaozhou LI ,  Anurag AGRAWAL ,  Julianne ZHU

IPC: H04L12/861 ,  H03M13/09 ,  H04L12/743 ,  H04L12/24

Abstract: Some embodiments of the invention provide a forwarding element that can be configured through in-band data-plane messages from a remote controller that is a physically separate machine from the forwarding element. The forwarding element of some embodiments has data plane circuits that include several configurable message-processing stages, several storage queues, and a data-plane configurator. A set of one or more message-processing stages of the data plane are configured (1) to process configuration messages received by the data plane from the remote controller and (2) to store the configuration messages in a set of one or more storage queues. The data-plane configurator receives the configuration messages stored in the set of storage queues and configures one or more of the configurable message-processing stages based on configuration data in the configuration messages.

公开(公告)号：US20210399998A1

公开(公告)日：2021-12-23

申请号：US17466715

申请日：2021-09-03

Applicant: Barefoot Networks, Inc.

Inventor： Antonin Mathieu BAS ,  Anurag AGRAWAL ,  Changhoon KIM

IPC: H04L12/879

Abstract: Some embodiments use one or more FPGAs and external memories associated with the FPGAs to implement large, hash-addressable tables for a data plane circuit. These embodiments configure at least one message processing stage of the DP circuit to store (1) a first plurality of records for matching with a set of data messages received by the DP circuit, and (2) a redirection record redirecting data messages that do not match the first plurality of records to a DP egress port associated with the memory circuit. These embodiments configure an external memory circuit to store a larger, second set of records for matching with redirected data messages received through the DP egress port associated with the memory circuit. This external memory circuit is a hash-addressable memory in some embodiments. To determine whether a redirected data message matches a record in the second set of record, the method of some embodiments configures an FPGA associated with the hash-addressable external memory to use a collision free hash process to generate a collision-free, hash address value from a set of attributes of the data message. This hash address value specifies an address in the external memory for the record in the second set of records to compare with the redirected data message.

公开(公告)号：US20220094711A1

公开(公告)日：2022-03-24

申请号：US17463346

申请日：2021-08-31

Applicant: Barefoot Networks, Inc.

Inventor： Shruthi Krishnan ,  Junggun LEE ,  Changhoon KIM

IPC: H04L29/06 ,  H04L1/16 ,  H04L12/715

Abstract: Some embodiments of the invention provide a data-plane forwarding circuit (data plane) that can be configured to provide protection from a SYN-flood denial of service attack by validating a source of a SYN data messages before allowing future messages to be forwarded to a protected server. To perform its forwarding operations, the data plane includes several data message processing stages that are configured to process the data tuples associated with the data messages received by the data plane. In some embodiments, parts of the data plane message-processing stages are also configured to operate as a connection-validation circuit that includes (1) a SYN-processing circuit to process SYN data messages received by the data plane, and (2) an ACK-processing circuit to process ACK data messages received by the data plane.

公开(公告)号：US20210399997A1

公开(公告)日：2021-12-23

申请号：US17221538

申请日：2021-04-02

Applicant: Barefoot Networks, Inc.

Inventor： Masoud Moshref JAVADI ,  Changhoon KIM ,  Patrick W. Bosshart ,  Anurag AGRAWAL

IPC: H04L12/935 ,  G06F9/455 ,  G06N3/08

Abstract: Some embodiments provide a network forwarding element with a data-plane forwarding circuit that has a parameter collecting circuit to store and distribute parameter values computed by several machines in a network. In some embodiments, the machines perform distributed computing operations, and the parameter values that compute are parameter values associated with the distributed computing operations. The parameter collecting circuit of the data-plane forwarding circuit (data plane) in some embodiments (1) stores a set of parameter values computed and sent by a first set of machines, and (2) distributes the collected parameter values to a second set of machines once it has collected the set of parameter values from all the machines in the first set. The first and second sets of machines are the same set of machines in some embodiments, while they are different sets of machines (e.g., one set has at least one machine that is not in the other set) in other embodiments. In some embodiments, the parameter collecting circuit performs computations on the parameter values that it collects and distributes the result of the computations once it has processed all the parameter values distributed by the first set of machines. The computations are aggregating operations (e.g., adding, averaging, etc.) that combine corresponding subset of parameter values distributed by the first set of machines.

公开(公告)号：US20200274806A1

公开(公告)日：2020-08-27

申请号：US16810727

申请日：2020-03-05

Applicant: Barefoot Networks, Inc.

Inventor： Changhoon KIM ,  Jeongkeun LEE ,  Xiaozhou LI ,  Masoud Moshref JAVADI ,  Georgios NIKOLAIDIS ,  Ethan M. SPIEGEL

IPC: H04L12/801 ,  H04L12/933 ,  H04L12/26 ,  H04L12/863

Abstract: Some embodiments of the invention provide a method for reporting congestion in a network that includes several forwarding elements. In a data plane circuit of one of the forwarding elements, the method detects that a queue in the switching circuit of the data plane circuit is congested, while a particular data message is stored in the queue as it is being processed through the data plane circuit. In the data plane circuit, the method then generates a report regarding the detected queue congestion, and sends this report to a data collector external to the forwarding element. To send the report, the data plane circuit in some embodiments duplicates the particular data message, stores it in the duplicate data message information regarding the detected queue congestion, and sends the duplicate data message to the external data collector.

公开(公告)号：US20210176194A1

公开(公告)日：2021-06-10

申请号：US17255984

申请日：2019-03-08

Applicant: Barefoot Networks, Inc.

Inventor： Masoud Moshref JAVADI ,  Changhoon KIM ,  Patrick BOSSHART ,  Anurag AGRAWAL

IPC: H04L12/935 ,  G06N3/08 ,  G06F9/455

Abstract: Some embodiments provide a network forwarding element with a data-plane forwarding circuit that has a parameter collecting circuit to store and distribute parameter values computed by several machines in a network. In some embodiments, the machines perform distributed computing operations, and the parameter values that compute are parameter values associated with the distributed computing operations. The parameter collecting circuit of the data-plane forwarding circuit (data plane) in some embodiments (1) stores a set of parameter values computed and sent by a first set of machines, and (2) distributes the collected parameter values to a second set of machines once it has collected the set of parameter values from all the machines in the first set. The first and second sets of machines are the same set of machines in some embodiments, while they are different sets of machines (e.g., one set has at least one machine that is not in the other set) in other embodiments. In some embodiments, the parameter collecting circuit performs computations on the parameter values that it collects and distributes the result of the computations once it has processed all the parameter values distributed by the first set of machines. The computations are aggregating operations (e.g., adding, averaging, etc.) that combine corresponding subset of parameter values distributed by the first set of machines.

公开(公告)号：US20210119939A1

公开(公告)日：2021-04-22

申请号：US17134110

申请日：2020-12-24

Applicant: Barefoot Networks, Inc.

Inventor： Yi LI ,  Michael FENG ,  Anurag AGRAWAL ,  Jeongkeun LEE ,  Changhoon KIM ,  Remy CHANG

IPC: H04L12/935 ,  H04L12/933 ,  H04L12/709 ,  H04L12/863 ,  H04L12/823

Abstract: Some embodiments provide a method for an ingress packet processing pipeline of a network forwarding integrated circuit (IC). The ingress packet processing pipeline is for receiving packets from a port of the network forwarding IC and processing the packets to assign different packets to different queues of a traffic management unit of the network forwarding IC. The method receives state data from the traffic management unit. The method stores the state data in a stateful table. The method assigns a particular packet to a particular queue based on the state data received from the traffic management unit and stored in the stateful table.

公开(公告)号：US20210099366A1

公开(公告)日：2021-04-01

申请号：US17042058

申请日：2019-03-08

Applicant: Barefoot Networks, Inc.

Inventor： Georgios NIKOLAIDIS ,  Jeongkeun LEE ,  Changhoon KIM

IPC: H04L12/26 ,  H04L12/823 ,  H04L12/24 ,  H04L12/761 ,  H04L12/721 ,  H04L12/715 ,  H04L12/743 ,  H04L12/801 ,  H04L12/851 ,  H04L12/935 ,  H04L12/861

Abstract: Some embodiments of the invention provide a data-plane forwarding circuit (data plane) that can be configured to identify large data message flows that it processes for forwarding in a network. In this document, large data message flows are referred to as heavy hitter flows. To perform its forwarding operations, the data plane includes several data message processing stages that are configured to process the data tuples associated with the data messages received by the data plane. In some embodiments, parts of the data plane message-processing stages are also configured to implement a heavy hitter detection (HHD) circuit. The operations of the data plane's message processing stages are configured by a control plane of the data plane's forwarding element in some embodiments.