Method and apparatus for allocating and using range identifiers as input values to content-addressable memories
    1.
    发明授权
    Method and apparatus for allocating and using range identifiers as input values to content-addressable memories 有权
    用于分配和使用范围标识符作为内容寻址存储器的输入值的方法和装置

    公开(公告)号:US06775737B1

    公开(公告)日:2004-08-10

    申请号:US09973508

    申请日:2001-10-09

    IPC分类号: G06F1200

    CPC分类号: H04L45/00 H04L45/48 H04L69/22

    摘要: Methods and apparatus are disclosed for allocating and using range identifiers as input values to associative memories, especially binary content-addressable memories (CAMs) and ternary content-addressable memories (TCAMs). In one implementation, each of multiple non-overlapping intervals are identified with one of multiple unique identifiers. An indication of a mapping between the multiple non-overlapping intervals and the multiple unique identifiers is maintained. A particular unique identifier is determined from said multiple unique identifiers based on a value and said multiple non-overlapping intervals. A lookup operation is performed on an associative memory using the particular unique identifier to generate a result. One implementation uses a trie representation of a range tree of the intervals to derive the unique identifiers. Moreover, one implementation evaluates and selects among various possible trie representations, especially to determine identifiers such that a TCAM prefix may match multiple intervals corresponding to a desired range.

    摘要翻译: 公开了分配和使用范围标识符作为关联存储器,特别是二进制可内容寻址存储器(CAM)和三元可内容寻址存储器(TCAM)的输入值的方法和装置。 在一个实现中,多个非重叠间隔中的每一个用多个唯一标识符之一标识。 维持多个非重叠间隔与多个唯一标识符之间的映射的指示。 基于值和所述多个非重叠间隔从所述多个唯一标识符确定特定唯一标识符。 使用特定唯一标识符对关联存储器执行查找操作以生成结果。 一个实现使用间隔的范围树的特里表示来导出唯一标识符。 此外,一个实现在各种可能的特里表示中进行评估和选择,特别是确定标识符,使得TCAM前缀可以匹配对应于期望范围的多个间隔。

    Reverse path forwarding protection of packets using automated population of access control lists based on a forwarding information base
    2.
    发明授权
    Reverse path forwarding protection of packets using automated population of access control lists based on a forwarding information base 有权
    基于转发信息库,使用自动化的访问控制列表群组对数据包进行反向路径转发保护

    公开(公告)号:US07349382B2

    公开(公告)日:2008-03-25

    申请号:US10651179

    申请日:2003-08-28

    IPC分类号: H04L12/56 G06F12/14

    摘要: Reverse path forwarding protection of packets is provided using automated population of access control lists based on a forwarding information base. One implementation identifies a lookup value by extracting one or more values including a source address from a packet. An access control list lookup operation is performed on an access control list based on the lookup value to identify a permit or a deny condition, the access control list including multiple access control list entries. The packet is processed based on the permit or the deny condition identified in by the access control list lookup operation, this processing the packet based on the permit condition includes performing a forwarding lookup operation on a representation of a forwarding information base to identify a location and forwarding the packet to the location. The access control list entries are automatically generated based on a forwarding information base.

    摘要翻译: 使用基于转发信息库的自动化访问控制列表来提供分组的反向路径转发保护。 一个实现通过从包中提取包括源地址的一个或多个值来识别查找值。 基于查找值对访问控制列表执行访问控制列表查找操作以识别许可或拒绝条件,所述访问控制列表包括多个访问控制列表条目。 基于通过访问控制列表查找操作识别的许可证或拒绝条件对数据包进行处理,这种根据许可条件处理数据包括对转发信息库的表示执行转发查找操作以识别位置,以及 将数据包转发到该位置。 访问控制列表条目根据转发信息库自动生成。

    SHAPING VIRTUAL MACHINE COMMUNICATION TRAFFIC

    公开(公告)号:US20130318226A1

    公开(公告)日:2013-11-28

    申请号:US13959790

    申请日:2013-08-06

    IPC分类号: H04L29/08

    摘要: Cloud computing platforms having computer-readable media that perform methods to shape virtual machine communication traffic. The cloud computing platform includes virtual machines and a controller. The controller limits the traffic associated with the virtual machines to enable the virtual machines to achieve desired communication rates, especially when a network servicing the virtual machines is congested. The controller may drop communication messages associated with the virtual machines based on a drop probability evaluated for the virtual machines.

    Direct addressability and direct server return
    4.
    发明授权
    Direct addressability and direct server return 有权
    直接可寻址性和直接的服务器返回

    公开(公告)号:US08510447B2

    公开(公告)日:2013-08-13

    申请号:US13585215

    申请日:2012-08-14

    IPC分类号: G06F15/173

    摘要: Cloud computing platforms having computer-readable media that perform methods for direct addressability and direct server return are provided. The cloud computing platform includes a load balancer and several servers. The servers are configured with public addresses, private addresses, and an address of the load balancer. The loopback interface of the servers is configured with the address of the load balancer. This allows a server to bypass the load balancer when replying to communication messages. Additionally, the public and private addresses of the servers enable direct addressability in the cloud computing platform. Accordingly, an application executing in the cloud computing platform may connect two or more clients on the same server.

    摘要翻译: 提供了具有执行直接寻址能力和直接服务器返回方法的计算机可读介质的云计算平台。 云计算平台包括负载平衡器和多个服务器。 服务器配置有公共地址,私有地址和负载均衡器的地址。 服务器的环回接口配置了负载均衡器的地址。 这允许服务器在回复通信消息时绕过负载均衡器。 另外,这些服务器的公用和私有地址可以在云计算平台上直接寻址。 因此,在云计算平台中执行的应用程序可以连接同一服务器上的两个或多个客户端。

    Shaping virtual machine communication traffic

    公开(公告)号:US08533356B2

    公开(公告)日:2013-09-10

    申请号:US13545407

    申请日:2012-07-10

    IPC分类号: G06F15/16

    摘要: Cloud computing platforms having computer-readable media that perform methods to shape virtual machine communication traffic. The cloud computing platform includes virtual machines and a controller. The controller limits the traffic associated with the virtual machines to enable the virtual machines to achieve desired communication rates, especially when a network servicing the virtual machines is congested. The controller may drop communication messages associated with the virtual machines based on a drop probability evaluated for the virtual machines.

    Performing lookup operations on associative memory entries
    7.
    发明授权
    Performing lookup operations on associative memory entries 有权
    对关联内存条目执行查找操作

    公开(公告)号:US07237059B2

    公开(公告)日:2007-06-26

    申请号:US11321918

    申请日:2005-12-28

    IPC分类号: G06F12/00

    CPC分类号: G06F17/30982

    摘要: Methods and apparatus are disclosed for performing lookup operations using associative memories, including, but not limited to modifying search keys within an associative memory based on modification mappings, forcing a no-hit condition in response to a highest-priority matching entry including a force no-hit indication, selecting among various sets or banks of associative memory entries in determining a lookup result, and detecting and propagating error conditions. In one implementation, each block retrieves a modification mapping from a local memory and modifies a received search key based on the mapping and received modification data. In one implementation, each of the associative memory entries includes a field for indicating that a successful match on the entry should or should not force a no-hit result. In one implementation, an indication of which associative memory blocks or sets of entries to use in a particular lookup operation is retrieved from a memory.

    摘要翻译: 公开了用于使用关联存储器执行查找操作的方法和装置,包括但不限于基于修改映射修改关联存储器内的搜索关键字,响应于最高优先级的匹配条目来响应不受限制的条件,包括力 - 指示,在确定查找结果中选择各种组或存储器中的关联存储器条目,以及检测和传播错误条件。 在一个实现中,每个块从本地存储器检索修改映射,并且基于映射和接收到的修改数据修改接收到的搜索密钥。 在一个实现中,每个关联存储器条目包括用于指示条目上的成功匹配应该或不应该强制无命中结果的字段。 在一个实现中,从存储器检索在特定查找操作中使用的哪些关联存储器块或条目集合的指示。

    Direct addressability and direct server return
    8.
    发明授权
    Direct addressability and direct server return 有权
    直接可寻址性和直接的服务器返回

    公开(公告)号:US08266204B2

    公开(公告)日:2012-09-11

    申请号:US12723994

    申请日:2010-03-15

    IPC分类号: G06F15/16

    摘要: Cloud computing platforms having computer-readable media that perform methods for direct addressability and direct server return are provided. The cloud computing platform includes a load balancer and several servers. The servers are configured with public addresses, private addresses, and an address of the load balancer. The loopback interface of the servers is configured with the address of the load balancer. This allows a server to bypass the load balancer when replying to communication messages. Additionally, the public and private addresses of the servers enable direct addressability in the cloud computing platform. Accordingly, an application executing in the cloud computing platform may connect two or more clients on the same server.

    摘要翻译: 提供了具有执行直接寻址能力和直接服务器返回方法的计算机可读介质的云计算平台。 云计算平台包括负载平衡器和多个服务器。 服务器配置有公共地址,私有地址和负载均衡器的地址。 服务器的环回接口配置了负载均衡器的地址。 这允许服务器在回复通信消息时绕过负载均衡器。 另外,这些服务器的公用和私有地址可以在云计算平台上直接寻址。 因此,在云计算平台中执行的应用程序可以连接同一服务器上的两个或多个客户端。

    Method and apparatus for mapping prefixes and values of a hierarchical space to other representations
    9.
    发明授权
    Method and apparatus for mapping prefixes and values of a hierarchical space to other representations 有权
    将分层空间的前缀和值映射到其他表示的方法和装置

    公开(公告)号:US06970971B1

    公开(公告)日:2005-11-29

    申请号:US10042847

    申请日:2002-01-08

    IPC分类号: G06F12/00 H04L12/56

    摘要: Methods and apparatus are disclosed for mapping prefixes and/or values of a hierarchical space to other representations while maintaining the original hierarchy, which may be especially useful in conjunction with associative memories, such as binary and ternary content-addressable memories. In one implementation, a set of prefixes associated with a hierarchical space is received. A new representation of the set of prefixes is developed, such as by using a trie representation, with the new representation maintaining the original hierarchical relationship. This new representation may be an optimized representation selected to reduce or minimize the depth of the trie or some other cost. A set of new prefixes are generated along with a set of lookup values. During processing, a value, such as that included in a packet, is converted to one of the lookup values, which is used to generate a lookup word for use in matching against the new prefixes.

    摘要翻译: 公开了用于将分层空间的前缀和/或值映射到其他表示的方法和装置,同时维持原始分层结构,这可能与诸如二进制和三进制可内容寻址的存储器之类的关联存储器特别有用。 在一个实现中,接收与分层空间相关联的一组前缀。 开发了一组前缀的新表示,例如通过使用特里表示,新表示维持原始的分层关系。 这种新的表示可以是被选择用于减少或最小化特里的深度或一些其他成本的优化表示。 生成一组新的前缀以及一组查找值。 在处理期间,诸如包括在分组中的值被转换成一个查找值,其被用于生成用于匹配新前缀的查找字。

    DIRECT ADDRESSABILITY AND DIRECT SERVER RETURN
    10.
    发明申请
    DIRECT ADDRESSABILITY AND DIRECT SERVER RETURN 有权
    直接可访问性和直接服务器返回

    公开(公告)号:US20120311159A1

    公开(公告)日:2012-12-06

    申请号:US13585215

    申请日:2012-08-14

    IPC分类号: G06F15/173

    摘要: Cloud computing platforms having computer-readable media that perform methods for direct addressability and direct server return are provided. The cloud computing platform includes a load balancer and several servers. The servers are configured with public addresses, private addresses, and an address of the load balancer. The loopback interface of the servers is configured with the address of the load balancer. This allows a server to bypass the load balancer when replying to communication messages. Additionally, the public and private addresses of the servers enable direct addressability in the cloud computing platform. Accordingly, an application executing in the cloud computing platform may connect two or more clients on the same server.

    摘要翻译: 提供了具有执行直接寻址能力和直接服务器返回方法的计算机可读介质的云计算平台。 云计算平台包括负载平衡器和多个服务器。 服务器配置有公共地址,私有地址和负载均衡器的地址。 服务器的环回接口配置了负载均衡器的地址。 这允许服务器在回复通信消息时绕过负载均衡器。 另外,这些服务器的公用和私有地址可以在云计算平台上直接寻址。 因此,在云计算平台中执行的应用程序可以连接同一服务器上的两个或多个客户端。