Network switch with truncated trie look-up facility
    1.
    发明授权
    Network switch with truncated trie look-up facility 失效
    网络切换与截断的特里查询设备

    公开(公告)号:US06337862B1

    公开(公告)日:2002-01-08

    申请号:US09573821

    申请日:2000-05-18

    IPC分类号: H04L1228

    CPC分类号: H04L45/00 H04L45/742

    摘要: A network switch including a multiplicity of ports for the reception and forwarding of addressed data packets including network destination data and network source address data, and a forwarding database having a trie search facility organised in blocks of pointers, which are accessed by respective segments of a search key and identify in a last stage of a search forwarding data identifying each port from which a packet should be forwarded and in any stage of the search prior to the last stage a block of pointers, the switch including a device operable before the trie search facility is utilised for a given packet to compare a network destination address of the given packet with at least one stored address and when the network destination address matches the stored address to access the network source address data of the given packet for use as the search key.

    摘要翻译: 包括用于接收和转发包括网络目的地数据和网络源地址数据的寻址数据分组的多个端口的网络交换机,以及具有组织在指针块中的特里搜索设备的转发数据库,​​该转发数据库由 搜索关键字并且在最后阶段识别识别要在其中转发数据包的每个端口的数据的最后阶段,并且在最后阶段之前的任何阶段中的指针块,所述交换机包括在特里搜索之前可操作的设备 用于给定分组的设施用于将给定分组的网络目的地地址与至少一个存储的地址进行比较,并且当网络目的地地址与存储的地址匹配时,访问给定分组的网络源地址数据以用作搜索关键字 。

    Communication device with forwarding database having a trie search facility
    2.
    发明授权
    Communication device with forwarding database having a trie search facility 失效
    具有转发数据库的通信设备具有特里搜索设备

    公开(公告)号:US06804230B1

    公开(公告)日:2004-10-12

    申请号:US09432591

    申请日:1999-11-03

    IPC分类号: G06F1730

    摘要: A communication device which includes a hardware trie search facility. At least part of a memory is divided into memory blocks, each of said blocks consisting of a multiplicity of locations, at least some of said locations each providing when accessed a pointer to another block and an indication of the size of the block. A shift register holds an address key, and a trie block is accessed using an address composed of a number of bits related to said indication of the size of the block. The key is shifted by said number of bits prior to a subsequent stage of the search. Part of the memory comprises an associated data table which includes entries of data enabling a packet to be forwarded and at least some locations in said blocks provide when accessed a pointer to an entry in the associated data table.

    摘要翻译: 一种包括硬件特里搜索设备的通信设备。 存储器的至少一部分被分成存储器块,每个所述块由多个位置组成,当访问指向另一个块的指针时,至少一些所述位置中的每个提供,并且指示块的大小。 移位寄存器保存地址密钥,并且使用由与块的大小的所述指示相关的多个位组成的地址访问特里块。 密钥在搜索的后续阶段之前移位所述比特数。 存储器的一部分包括相关联的数据表,其包括能够转发分组的数据的条目,并且当访问到所述相关联的数据表中的条目的指针时,所述块中的至少一些位置提供。

    System and method for congestion control in packet-based communication networks
    3.
    发明授权
    System and method for congestion control in packet-based communication networks 有权
    基于分组的通信网络拥塞控制的系统和方法

    公开(公告)号:US06570848B1

    公开(公告)日:2003-05-27

    申请号:US09353609

    申请日:1999-07-14

    IPC分类号: H04J314

    摘要: A network switch including a port for the reception and transmission of data packets, and a receive buffer store connected to the port, detecting a predetermined state of fullness of the buffer store, initiating in response to the state of fullness the production of control frames for signaling to a source of packets to pause the sending of packets to the switch, counting said frames to obtain a measure of congestion of the switch, and responsive to a rate of change of measure to enable the discarding of packets received by the buffer when rate is higher than a first predetermined value and to disable the discarding of packets when the rate of change of the measure is below a second predetermined value.

    摘要翻译: 包括用于接收和传输数据分组的端口的网络交换机和连接到该端口的接收缓冲存储器,检测缓冲存储器的预定充满状态,响应于丰满的状态启动控制帧的产生 信令到分组源,以暂停向分组发送分组,对所述帧进行计数以获得交换机的拥塞度量,并且响应于测量的改变速率,以便能够丢弃由缓冲器接收到的分组的速率 高于第一预定值,并且当所述测量的改变速率低于第二预定值时禁用所述分组的丢弃。

    CASCADE SYSTEM FOR NETWORK UNITS
    4.
    发明申请
    CASCADE SYSTEM FOR NETWORK UNITS 有权
    网络单元的CASCADE系统

    公开(公告)号:US20120314564A1

    公开(公告)日:2012-12-13

    申请号:US13526251

    申请日:2012-06-18

    IPC分类号: H04L12/24 H04L12/56

    CPC分类号: H04L12/433

    摘要: In one embodiment, a method is described for detecting an operational failure between the network unit and an adjacent network unit in the stack; controlling the switching engine to redirect packets which would otherwise be sent from a particular port to the adjacent network unit to be forwarded from another port to be sent to a different network unit in the stack; and entering the switching engine into a bypass mode in response to control data indicating an operational failure between at least two other network units in the stack to cause packets to be forwarded without being re-directed by the switching engine.

    摘要翻译: 在一个实施例中,描述了一种用于检测网络单元和堆叠中的相邻网络单元之间的操作故障的方法; 控制交换引擎将否则将从特定端口发送到相邻网络单元的分组,以从要发送到堆栈中的不同网络单元的另一端口转发; 以及响应于指示所述堆叠中的至少两个其他网络单元之间的操作故障的控制数据,将所述交换引擎进入旁路模式,以使转发引擎不重新引导分组。

    CASCADE SYSTEM FOR NETWORK UNITS
    5.
    发明申请
    CASCADE SYSTEM FOR NETWORK UNITS 有权
    网络单元的CASCADE系统

    公开(公告)号:US20080037531A1

    公开(公告)日:2008-02-14

    申请号:US11857512

    申请日:2007-09-19

    IPC分类号: H04L12/50

    CPC分类号: H04L12/433

    摘要: A network stack includes a plurality of network units each of which includes a multiplicity of ports for receiving and forwarding addressed data packets, at least two cascade ports and a switching engine for forwarding received packets to at least one port in accordance with address data in the packets and a cascade connection including, for each of two opposite directions around the stack, at least one unidirectional path for data packets composed of links each between a respective cascade port on a network unit and a corresponding cascade port on the next network unit.

    摘要翻译: 网络堆栈包括多个网络单元,每个网络单元包括用于接收和转发寻址的数据分组的多个端口,至少两个级联端口和用于根据所述数据分组中的地址数据将接收的分组转发到至少一个端口的交换引擎 分组和级联连接包括针对堆叠周围的两个相反方向中的每一个,至少一个用于由网络单元上的相应级联端口和下一个网络单元上的对应级联端口之间的链路组成的数据分组的单向路径。

    Packet diversion in switching fabrics and multiple forwarding instructions for packets
    6.
    发明申请
    Packet diversion in switching fabrics and multiple forwarding instructions for packets 有权
    交换结构中的数据包转移和数据包的多个转发指令

    公开(公告)号:US20060203816A1

    公开(公告)日:2006-09-14

    申请号:US11121192

    申请日:2005-05-03

    IPC分类号: H04L12/56 H04L12/54

    摘要: A cascade system of network units includes forwarding units which have external ports, a communication fabric connecting the units and at least one processing unit which needs no forwarding database. The processing unit may perform a security operation such as intrusion prevention or encryption. Each forwarding unit on receipt of a packet performs a look-up to determine an egress port, to determine whether the packet must be diverted to a processing unit, to provide the packet with a first forwarding instruction identifying the egress port uniquely within the system and a second forwarding instruction identifying a diversion port by which the packet can reach the processing unit and to set an order field which determines which of the forwarding instructions shall be performed first. The processing unit is operative on receipt of the packet by way of the diversion port to change the order field to specify that the packet should now be sent to the egress port.

    摘要翻译: 网络单元的级联系统包括具有外部端口的转发单元,连接单元的通信结构以及不需要转发数据库的至少一个处理单元。 处理单元可以执行诸如入侵防御或加密的安全操作。 每个转发单元在接收到分组时执行查找以确定出口端口,以确定分组是否必须被转移到处理单元,以向分组提供识别系统内唯一的出口端口的第一转发指令,以及 识别分组可以到达处理单元的转移端口的第二转发指令,以及设置首先执行哪个转发指令的顺序字段。 处理单元通过转移端口接收到分组,以改变订单字段以指定该分组现在应该被发送到出口端口。

    Cascade system for network units
    7.
    发明授权
    Cascade system for network units 有权
    级联系统为网络单元

    公开(公告)号:US08213420B2

    公开(公告)日:2012-07-03

    申请号:US11857512

    申请日:2007-09-19

    IPC分类号: H04L12/50

    CPC分类号: H04L12/433

    摘要: A network stack includes a plurality of network units each of which includes a multiplicity of ports for receiving and forwarding addressed data packets, at least two cascade ports and a switching engine for forwarding received packets to at least one port in accordance with address data in the packets and a cascade connection including, for each of two opposite directions around the stack, at least one unidirectional path for data packets composed of links each between a respective cascade port on a network unit and a corresponding cascade port on the next network unit.

    摘要翻译: 网络堆栈包括多个网络单元,每个网络单元包括用于接收和转发寻址的数据分组的多个端口,至少两个级联端口和用于根据所述数据分组中的地址数据将接收的分组转发到至少一个端口的交换引擎 分组和级联连接包括针对堆叠周围的两个相反方向中的每一个,至少一个用于由网络单元上的相应级联端口和下一个网络单元上的对应级联端口之间的链路组成的数据分组的单向路径。

    Content addressable memory organized to share entries between different entities such as ports of a network unit
    8.
    发明授权
    Content addressable memory organized to share entries between different entities such as ports of a network unit 有权
    内容可寻址存储器被组织以在诸如网络单元的端口的不同实体之间共享条目

    公开(公告)号:US07480300B2

    公开(公告)日:2009-01-20

    申请号:US11064258

    申请日:2005-02-22

    IPC分类号: H04L12/28 G06F7/04

    摘要: A content addressable memory stores entries each comprising a rule and as part of the entry a mask identifying all the entities to which the rule is applicable. A search pattern of data and a bit mask identifying the actual entity (or entities) associated with the data is applied as a search word along with a comparison mask that excludes all the other entities from the comparison of the search word with the entry. The CAM can thereby store efficiently in a single entry a rule that may be applicable to some but not all of a multiplicity of entities such as possible ingress ports of a network unit.

    摘要翻译: 内容可寻址存储器存储每个包括规则的条目,并且作为该条目的一部分,掩码标识规则所适用的所有实体。 将与数据相关联的实际实体(或实体)的搜索模式和位掩码应用为搜索词,以及将搜索词与条目的比较排除所有其他实体的比较掩码。 因此,CAM可以在单个条目中有效地存储可适用于多个实体中的一些而不是全部的规则,例如网络单元的可能入口端口。

    High-speed switch architecture
    9.
    发明授权
    High-speed switch architecture 有权
    高速交换架构

    公开(公告)号:US07420968B2

    公开(公告)日:2008-09-02

    申请号:US10456702

    申请日:2003-06-06

    IPC分类号: H04L12/50 H04Q11/00

    CPC分类号: H04L49/1515

    摘要: A system of switch modules contains input demultiplexers connected to ports on each of the modules and output multiplexers connected to each of the modules. Each module has output and input interfaces for mesh links and at least one output interface is looped back to an input interface on the same module. The arrangement reduces module-to-module traffic and corresponding increases the transmit bandwidth of a module.

    摘要翻译: 开关模块的系统包括连接到每个模块上的端口的输入解复用器和连接到每个模块的输出多路复用器。 每个模块都具有用于网格链接的输出和输入接口,并且至少一个输出接口循环回相同模块上的输入接口。 该装置减少了模块到模块的流量,并且相应地增加了模块的传输带宽。

    SIGNATURE CHECKING USING DETERMINISTIC FINITE STATE MACHINES
    10.
    发明申请
    SIGNATURE CHECKING USING DETERMINISTIC FINITE STATE MACHINES 有权
    使用确定性有限状态机器进行签名检查

    公开(公告)号:US20080101371A1

    公开(公告)日:2008-05-01

    申请号:US11923869

    申请日:2007-10-25

    IPC分类号: H04L12/56

    摘要: The occurrence of false positives and the post-processing of digital streams subjected to examination by a deterministic finite state machine for character strings are reduced by combining location-based pattern matching, e.g. on packet headers, and content-based pattern matching, e.g. on payloads of packets. One scheme allows automatic transition from a header match state into an initial state of a content matching machine. Another scheme is based on a rules graph defining strings of match states and the examination of a list of match states (rather than characters) which have been previously determined, for example by means of header matching and content matching. The latter is also capable of comparing offset and depth values associated with the match states with offset and depth criteria.

    摘要翻译: 通过组合基于位置的模式匹配,例如,通过组合基于位置的模式匹配来减少误报的发生和经过用于字符串的确定性有限状态机检查的数字流的后处理。 分组报头和基于内容的模式匹配,例如, 在包的有效载荷上。 一种方案允许从头匹配状态自动转换到内容匹配机器的初始状态。 另一种方案是基于定义匹配状态串的规则图,并且例如通过标题匹配和内容匹配来检查先前确定的匹配状态(而不是字符)的列表。 后者还能够将与匹配状态相关联的偏移和深度值与偏移和深度标准进行比较。