Command Message Generation and Execution Using a Machine Code-Instruction
    1.
    发明申请
    Command Message Generation and Execution Using a Machine Code-Instruction 审中-公开
    使用机器代码指令执行命令消息生成和执行

    公开(公告)号:US20160173601A1

    公开(公告)日:2016-06-16

    申请号:US14571115

    申请日:2014-12-15

    IPC分类号: H04L29/08

    摘要: In one embodiment, command message generation and execution using a machine code-instruction is performed. One embodiment includes a particular machine executing a single machine-code instruction including a reference into a command-message-building data structure stored in memory. This executing the single machine-code instruction includes generating a command message and initiating communication of the command message to a hardware accelerator, including copying command information from the command-message-building data structure based on the reference into the command message. The hardware accelerator receives and executes the command message. In one embodiment, the command message is message-switched from a processor to a hardware accelerator, such as, but not limited to, a memory controller, a table lookup unit, or a prefix lookup unit. In one embodiment, a plurality of threads share the command-message-building data structure. In one embodiment, a plurality of processors share the command-message-building data structure.

    摘要翻译: 在一个实施例中,执行使用机器代码指令的命令消息生成和执行。 一个实施例包括执行包括对存储在存储器中的命令消息构建数据结构的引用的单个机器码指令的特定机器。 执行单个机器代码指令的步骤包括:生成命令消息并启动命令消息到硬件加速器的通信,包括基于该命令消息的引用从命令消息构建数据结构复制命令信息。 硬件加速器接收并执行命令消息。 在一个实施例中,命令消息是从处理器到硬件加速器的消息交换,诸如但不限于存储器控制器,表查找单元或前缀查找单元。 在一个实施例中,多个线程共享命令消息建立数据结构。 在一个实施例中,多个处理器共享命令消息建立数据结构。

    Selectively Using Network Address Translated Mapped Addresses Based on their Prior Network Reachability
    2.
    发明申请
    Selectively Using Network Address Translated Mapped Addresses Based on their Prior Network Reachability 有权
    基于其先前的网络可达性,选择性地使用网络地址转换映射的地址

    公开(公告)号:US20150032872A1

    公开(公告)日:2015-01-29

    申请号:US13949433

    申请日:2013-07-24

    申请人: Andrew E. Ossipov

    发明人: Andrew E. Ossipov

    IPC分类号: H04L29/12

    摘要: In one embodiment, network address translated (NAT) mapped addresses are selectively used based on their prior network reachability. One embodiment maintains for each particular mapped address (e.g., NAT public address pool member), a reachability status level based on prior usage of the particular mapped address to communicate with external destinations. By continuously monitoring the reachability “health” of mapped addresses, problem-experiencing mapped addresses can be avoided. One embodiment monitors the success and/or failure rates of connection attempts over a rolling time period to provide an up-to-date current view of the reachability status level of corresponding mapped addresses. In one embodiment, a network address translation device assigns, based on their reachability status level, these mapped addresses. One embodiment provides an administrative notification for particular mapped address or ceases using the particular mapped address in response to its reachability status level falling outside a predetermined or calculated level.

    摘要翻译: 在一个实施例中,基于其先前的网络可达性来选择性地使用网络地址转换(NAT)映射地址。 一个实施例针对每个特定映射地址(例如,NAT公共地址池成员)维护基于特定映射地址的先前使用以与外部目的地通信的可达性状态级别。 通过不断监控映射地址的可靠性“健康”,可以避免遇到问题的映射地址。 一个实施例监视在滚动时间段内的连接尝试的成功和/或失败率,以提供对应映射地址的可达性状态级别的最新当前视图。 在一个实施例中,网络地址转换设备基于它们的可达性状态级别来分配这些映射地址。 一个实施例提供特定映射地址的管理通知,或者响应于其可达性状态级别落在预定或计算的级别之外,使用特定映射地址停止。

    Configuring New Paths in a Wireless Deterministic Network
    3.
    发明申请
    Configuring New Paths in a Wireless Deterministic Network 有权
    在无线确定性网络中配置新路径

    公开(公告)号:US20150023325A1

    公开(公告)日:2015-01-22

    申请号:US13954297

    申请日:2013-07-30

    IPC分类号: H04L5/00

    摘要: In one embodiment, a first node in a wireless deterministic network communicates to a second node configuration information identifying a destination-facing path portion of a particular one-way path traversing from a source node to a destination node within the wireless deterministic network. The destination-facing portion includes a path traversing from the second node over one or more additional nodes to the destination node over which to forward packets received over a first portion of the particular one-way path from the source node to the second node. The configuration information includes a particular time slot for the second node to receive packets being sent over the particular one-way path. In one embodiment, the first node receives from the second node an acknowledgement message in the particular time slot that the destination-facing portion of the particular one-way path was configured and activated.

    摘要翻译: 在一个实施例中,无线确定性网络中的第一节点与第二节点配置信息通信,所述第二节点配置信息标识从无源确定性网络中的源节点到目的地节点的特定单向路径的目的地路径部分。 面向目标的部分包括从一个或多个附加节点上的第二节点穿过到目的地节点的路径,通过该目的节点将从特定单向路径的第一部分接收的分组从源节点转发到第二节点。 配置信息包括用于第二节点接收通过特定单向路径发送的分组的特定时隙。 在一个实施例中,第一节点从特定时隙中从第二节点接收确认消息,特定单向路径的目的地面向部分被配置和激活。

    Optical Transport Network Delay Measurement
    4.
    发明申请
    Optical Transport Network Delay Measurement 有权
    光传输网络延迟测量

    公开(公告)号:US20140064722A1

    公开(公告)日:2014-03-06

    申请号:US13599065

    申请日:2012-08-30

    IPC分类号: H04B17/00

    摘要: In one embodiment, a one-way delay is measured between optical devices in an optical transport network based on roundtrip times of request and corresponding response frames. A first optical device sends a sequence of delay measurement request frames to a second optical device, which varies a local delay before responding to a request frame, thus causing a slippage in the sequence of reply frames received by the first device. The point at which the request frames are received in relation to the stream of frames sent by the optical device can be identified based on the frame slippage. Therefore, the delay measurement can be adjusted by a corresponding offset to the beginning of a frame in order to increase the accuracy of the one-way delay measurement.

    摘要翻译: 在一个实施例中,基于请求的往返时间和对应的响应帧,在光传输网络中的光学设备之间测量单向延迟。 第一光学设备向第二光学设备发送一系列延迟测量请求帧,该第二光学设备在响应于请求帧之前改变本地延迟,从而导致由第一设备接收到的应答帧序列的滑动。 可以基于帧滑动来识别与由光学设备发送的帧相关的请求帧的接收点。 因此,延迟测量可以通过对帧开始的相应偏移进行调整,以提高单向延迟测量的精度。

    Content-addressable Memory Lookup Device Supporting Iterative Lookup Operations
    5.
    发明申请
    Content-addressable Memory Lookup Device Supporting Iterative Lookup Operations 有权
    支持迭代查找操作的内容寻址内存查找设备

    公开(公告)号:US20140059289A1

    公开(公告)日:2014-02-27

    申请号:US13594827

    申请日:2012-08-26

    IPC分类号: G06F12/00

    CPC分类号: G11C15/00

    摘要: In one embodiment, multiple content-addressable memory entries are associated with each other to effectively form a batch content-addressable memory entry that spans multiple physical entries of the content-addressable memory device. To match against this content-addressable memory entry, multiple lookup operations are required—i.e., one lookup operation for each combined physical entry. Further, one embodiment provides that a batch content-addressable memory entry can span one, two, three, or more physical content-addressable memory entries, and batch content-addressable memory entries of varying sizes could be programmed into a single content-addressable memory device. Thus, a lookup operation might take two lookup iterations on the physical entries of the content-addressable memory device, with a next lookup operation taking a different number of lookup iterations (e.g., one, three or more).

    摘要翻译: 在一个实施例中,多个可内容寻址的存储器条目彼此关联以有效地形成跨越可内容寻址的存储器件的多个物理条目的批处理内容可寻址存储器条目。 为了匹配该内容可寻址内存条目,需要多次查找操作,即每个组合物理条目的一个查找操作。 此外,一个实施例提供批量内容寻址存储器条目可以跨越一个,两个,三个或更多个物理内容可寻址存储器条目,并且不同大小的批量可内容寻址的存储器条目可以被编程到单个内容寻址存储器 设备。 因此,查找操作可能对可内容寻址的存储器件的物理条目进行两次查找迭代,下一个查找操作采用不同数量的查找迭代(例如,一个,三个或更多)。

    Reducing Proliferation of Network-to-Link-Layer Address Resolution Messages
    6.
    发明申请
    Reducing Proliferation of Network-to-Link-Layer Address Resolution Messages 有权
    减少网络到链路层地址解析消息的增长

    公开(公告)号:US20140003426A1

    公开(公告)日:2014-01-02

    申请号:US13571794

    申请日:2012-08-10

    IPC分类号: H04L12/56

    CPC分类号: H04L61/103

    摘要: In one embodiment, the processing by a packet switching device of a received network-to-link-layer address resolution request message (e.g., Address Resolution Protocol [ARP] Request message, Neighbor Discovery Protocol [NDP] Neighbor Solicitation message) is dependent upon whether or not its target IP address corresponds to a network gateway packet switching device. When the target IP address of a received ARP Request/NDP Neighbor Solicitation message corresponds to a network gateway, then the packet switching device responds effectively on behalf of the network gateway, rather than forwarding the message to the network gateway. When the target IP address of a received ARP Request/NDP Neighbor Solicitation message does not correspond to a network gateway and the Media Access Control (MAC) address corresponding to the target IP address is known, then the packet switching device transforms then sends the broadcast or multicast frame into a unicast frame.

    摘要翻译: 在一个实施例中,分组交换设备对接收到的网络到链路层地址解析请求消息(例如,地址解析协议[ARP]请求消息,邻居发现协议[NDP]邻居请求消息)的处理)取决于 其目标IP地址是否对应于网络网关分组交换设备。 当接收的ARP请求/ NDP邻居请求消息的目标IP地址对应于网络网关时,分组交换设备代表网关进行有效响应,而不是将消息转发到网络网关。 当接收的ARP请求/ NDP邻居请求消息的目标IP地址与网络网关不对应,并且与目标IP地址对应的媒体访问控制(MAC)地址是已知的时候,分组交换设备转换然后发送广播 或多播帧转换为单播帧。

    Sharing Excess Committed Network Appliance Resources
    7.
    发明申请
    Sharing Excess Committed Network Appliance Resources 有权
    共享过度承诺的网络设备资源

    公开(公告)号:US20130301652A1

    公开(公告)日:2013-11-14

    申请号:US13528956

    申请日:2012-06-21

    IPC分类号: H04L29/00

    摘要: In one embodiment, excess committed network appliance resources are shared for providing services within a network appliance. One approach maintains service resources in a committed service resource pool and one or more other pools of service resources. Service resources are taken from a corresponding pool as needed. Service resources are reallocated to the committed resource pool as needed to ensure that service resources are available to service corresponding packet streams at their corresponding committed rate. Examples of such services provided by a network appliance include, but are not limited to, network address translation (NAT), firewall, Internet Protocol Security (IPsec), virtual private network (VPN), or deep packet inspection (DPI) services.

    摘要翻译: 在一个实施例中,多余的承诺网络设备资源被共享以在网络设备内提供服务。 一种方法在服务资源池和一个或多个服务资源池中维护服务资源。 服务资源根据需要从相应的池中取出。 服务资源根据需要重新分配到承诺资源池,以确保服务资源可用于以相应的承诺速率对相应的数据包进行服务。 由网络设备提供的这种服务的示例包括但不限于网络地址转换(NAT),防火墙,因特网协议安全(IPsec),虚拟专用网(VPN)或深度分组检测(DPI)服务。

    Reliable Transportation a Stream of Packets Using Packet Replication
    8.
    发明申请
    Reliable Transportation a Stream of Packets Using Packet Replication 有权
    使用数据包复制可靠的传输数据包流

    公开(公告)号:US20130114593A1

    公开(公告)日:2013-05-09

    申请号:US13329369

    申请日:2011-12-19

    IPC分类号: H04L12/56

    摘要: In one embodiment, a device receives a first packet stream and a second packet stream over different paths through a network, wherein each of said sent first and the second packet streams includes a same replicated stream of packets. The apparatus processes packets of the first packet stream when the first packet stream is in an active packet stream, and while buffering and subsequently dropping packets of the second packet stream when the second packet stream is in a non-active state. In response to identifying a difference in a number of packets in the same replicated stream of packets received in the second packet stream compared to in the first packet stream equaling or exceeding a predetermined threshold, the second packet stream becomes in the active state and missing packets are forwarded from the buffered second stream packets.

    摘要翻译: 在一个实施例中,设备通过网络在不同路径上接收第一分组流和第二分组流,其中所述发送的第一和第二分组流中的每一个包括相同的复制流分组流。 当第一分组流处于活动分组流中时,该装置处理第一分组流的分组,并且当第二分组流处于非活动状态时,缓冲并随后丢弃第二分组流的分组。 响应于识别与等于或超过预定阈值的第一分组流相比在第二分组流中接收的分组的相同复制流中的分组数量的差异,第二分组流变为活动状态并丢失分组 从缓冲的第二流包转发。

    Installing and Using a Subset of Routes for Forwarding Packets
    10.
    发明申请
    Installing and Using a Subset of Routes for Forwarding Packets 有权
    安装和使用用于转发数据包的路由子集

    公开(公告)号:US20130051392A1

    公开(公告)日:2013-02-28

    申请号:US13221144

    申请日:2011-08-30

    IPC分类号: H04L12/56

    摘要: In one embodiment, an Internet Protocol (IP) routing information base of a packet switching device is filtered to produce a significantly smaller subset of IP routes that are installed in one or more forwarding information bases for forwarding of IP packets. In one embodiment, these smaller forwarding information bases are located in memory local to a network processor to more quickly perform lookup operations thereon. In one embodiment, one or more of these forwarding information bases is used only for exact matching of addresses (not longest prefix matching). In one embodiment, the IP routes in these smaller forwarding information bases substantially correspond to packet switching devices in a network (e.g., core and edge routers), such as in contrast to including all the IP routes for devices external to the network.

    摘要翻译: 在一个实施例中,分组交换设备的因特网协议(IP)路由信息库被过滤以产生安装在用于转发IP分组的一个或多个转发信息库中的明显较小的IP路由子集。 在一个实施例中,这些较小转发信息库位于网络处理器本地的存储器中,以更快速地执行其上的查找操作。 在一个实施例中,这些转发信息库中的一个或多个仅用于地址的精确匹配(不是最长的前缀匹配)。 在一个实施例中,这些较小转发信息库中的IP路由基本上对应于网络中的分组交换设备(例如,核心和边缘路由器),例如与包括网络外部设备的所有IP路由相反。