PACKET HEADER FIELD EXTRACTION
    3.
    发明申请

    公开(公告)号:US20220345405A1

    公开(公告)日:2022-10-27

    申请号:US17859722

    申请日:2022-07-07

    发明人: Patrick Bosshart

    摘要: Some embodiments provide a method for processing a packet for a pipeline of a hardware switch. The pipeline, in some embodiments, includes several different stages that match against packet header fields and modify packet header fields. The method receives a packet that includes a set of packet headers. The method then populates, for each packet header in the set of packet headers, (i) a first set of registers with packet header field values of the packet header that are used in the pipeline, and (ii) a second set of registers with packet header field values of the packet header that are not used in the pipeline.

    Programmable virtual network interface controller (VNIC)

    公开(公告)号:US11736413B2

    公开(公告)日:2023-08-22

    申请号:US17149760

    申请日:2021-01-15

    申请人: VMware, Inc.

    摘要: Example methods and systems for a programmable virtual network interface controller (VNIC) to perform packet processing are described. In one example, the programmable VNIC may modify a packet processing pipeline based on the instruction. The modification may include injecting a second packet processing stage among the multiple first packet processing stages of the packet processing pipeline. In response to detecting an ingress packet that requires processing by the programmable VNIC, the ingress packet may be steered towards the modified packet processing pipeline. The ingress packet may then be processed using the modified packet processing pipeline by performing the second packet processing stage (a) to bypass at least one of the multiple first processing stages, or (b) in addition to the multiple first processing stages.

    Packet header field extraction
    6.
    发明授权

    公开(公告)号:US11425038B2

    公开(公告)日:2022-08-23

    申请号:US16695044

    申请日:2019-11-25

    发明人: Patrick Bosshart

    摘要: Some embodiments provide a method for processing a packet for a pipeline of a hardware switch. The pipeline, in some embodiments, includes several different stages that match against packet header fields and modify packet header fields. The method receives a packet that includes a set of packet headers. The method then populates, for each packet header in the set of packet headers, (i) a first set of registers with packet header field values of the packet header that are used in the pipeline, and (ii) a second set of registers with packet header field values of the packet header that are not used in the pipeline.

    Packet header field extraction
    7.
    发明授权

    公开(公告)号:US11411870B2

    公开(公告)日:2022-08-09

    申请号:US16573847

    申请日:2019-09-17

    发明人: Patrick Bosshart

    摘要: Some embodiments provide a method for processing a packet for a pipeline of a hardware switch. The pipeline, in some embodiments, includes several different stages that match against packet header fields and modify packet header fields. The method receives a packet that includes a set of packet headers. The method then populates, for each packet header in the set of packet headers, (i) a first set of registers with packet header field values of the packet header that are used in the pipeline, and (ii) a second set of registers with packet header field values of the packet header that are not used in the pipeline.

    HIGH PERFORMANCE ARCHITECTURE FOR CONVERGED SECURITY SYSTEMS AND APPLIANCES

    公开(公告)号:US20230247054A1

    公开(公告)日:2023-08-03

    申请号:US17587739

    申请日:2022-01-28

    IPC分类号: H04L9/40 H04L49/1546

    CPC分类号: H04L63/20 H04L49/1546

    摘要: In some aspects, the disclosure is directed to methods and systems for providing an architecture for building high performance silicon components that support a rich set of networking and security features. In many implementations, the architecture splits network and security functions into two functional and logical blocks (which may physically be on the same die or integrated circuit in some implementations, or may be split on separate integrated circuits). The network functions may be executed via an integrated network interface card and accelerator subsystem with a high throughput execution pipeline. Security functions may be executed asynchronously from the network processing functions, in many implementations.