Abstract:
An external processor for a network access system having a programmable access device includes a service controller that provides at least one service for network traffic, a message processor that processes network messages for service processing by the service controller, and a programmable access device controller that programs the programmable access device in response to service controller processing. It is advantageous for the external processor to include primary and secondary service controllers for a particular service so that, if the primary service controller fails, the secondary service controller can provide the particular service for message received from the programmable access device. In preferred embodiments, the service controller further includes a reporting processor that provides an interface through which reporting messages received from the programmable access device can be communicated to the service controller and a signaling controller that transmits signals to configure network hardware to establish requested network connections. The external processor preferably further supports a service policy interface through which the service controller can request policy decisions from a possibly remote policy server.
Abstract:
A programmable access device for use in a network access system includes first and second network interfaces (32, 58 Access network) through which packets are communicated with a network, a forwarding table (86) utilized to route packets communication between the first and second network interfaces, and a packet header filter (80, 90). The packet header filter (80, 90) identifies messages received at one of the first and second network interface on which policy-based services are to be implemented and passes identified messages via a message interface (100) to an external processor (42) for processing. In preferred embodiments, the packet header filter (80, 90) is capable of filetering packets for service processing based upon protocol information pertaining to protocol layers higher than layer 3. In preferred embodiments, the programmable access device may also include a usage monitor that reports events, such as session activity levels, to the external processor (42), a policer (82) that polices packets by reference to programmed traffic parameters, and a scheduler that schedules (96) the transmission of outgoing packets to support multiple quality of service classes.
Abstract:
A distributed network access system (30) in accordance with the present invention includes at least an external processor (42) and a programmable access device (40). The programmable access device has a message interface coupled to the external processor and first and second network interfaces through which packets are communicated with a network. The programmable access device includes a packet header filter and a forwarding table (50) that is utilized to route packets communicated between the first and second network interfaces. In response to receipt of a series of packets, the packet header filter in the programmable access device identifies messages in the series of messages upon which policy-based services are to be implemented and passes identified messages via the message interface to the external processor for processing. In response to receipt of a message, the external processor invokes service control on the message and may also invoke policy control (48) on the message.
Abstract:
A programmable access device for use in a network access system includes first and second network interfaces (32, 58 Access network) through which packets are communicated with a network, a forwarding table (86) utilized to route packets communication between the first and second network interfaces, and a packet header filter (80, 90). The packet header filter (80, 90) identifies messages received at one of the first and second network interface on which policy-based services are to be implemented and passes identified messages via a message interface (100) to an external processor (42) for processing. In preferred embodiments, the packet header filter (80, 90) is capable of filetering packets for service processing based upon protocol information pertaining to protocol layers higher than layer 3. In preferred embodiments, the programmable access device may also include a usage monitor that reports events, such as session activity levels, to the external processor (42), a policer (82) that polices packets by reference to programmed traffic parameters, and a scheduler that schedules (96) the transmission of outgoing packets to support multiple quality of service classes.
Abstract:
A distributed network access system in accordance with the present invention includes at least an external processor and a programmable access device. The programmable access device has a message interface coupled to the external processor and first and second network interfaces through which packets are communicated with a network. The programmable access device includes a packet header filter and a forwarding table that is utilized to route packets communicated between the first and second network interfaces. In response to receipt of a series of packets, the packet header filter in the programmable access device identifies messages in the series of messages upon which policy-based services are to be implemented and passes identified messages via the message interface to the external processor for processing. In response to receipt of a message, the external processor invokes service control on the message and may also invoke policy control on the message.
Abstract:
An external processor for a network access system having a programmable access device includes a service controller that provides at least one service for network traffic, a message processor that processes network messages for service processing by the service controller, and a programmable access device controller that programs the programmable access device in response to service controller processing. It is advantageous for the external processor to include primary and secondary service controllers for a particular service so that, if the primary service controller fails, the secondary service controller can provide the particular service for message received from the programmable access device. In preferred embodiments, the service controller further includes a reporting processor that provides an interface through which reporting messages received from the programmable access device can be communicated to the service controller and a signaling controller that transmits signals to configure network hardware to establish requested network connections. The external processor preferably further supports a service policy interface through which the service controller can request policy decisions from a possibly remote policy server.
Abstract:
In a network access system including an external processor and a programmable access device, the external processor transmits a control message to the programmable access device to establish a configuration of the programmable access device. The programmable access device then communicates messages to the external processor for service processing in accordance with the configuration. For example, the control message may be a filter control message that establishes a configuration of a packet header filter in the programmable access device. The packet header filter then communicates network messages filtered from a packet flow in accordance with the configuration established by the control message. To limit the communication of network messages from the programmable access device to the external processor, the external processor can send a message setting message interface flags in the programmable access device. The external processor may also transmit a monitor control message to the programmable access device to establish a configuration of a monitor in the programmable access device. The programmable access device then communicates reporting messages to the external processor in response to the configuration of the monitor.
Abstract:
A distributed network access system in accordance with the present invention includes at least an external processor and a programmable access device. The programmable access device has a message interface coupled to the external processor and first and second network interfaces through which packets are communicated with a network. The programmable access device includes a packet header filter and a forwarding table that is utilized to route packets communicated between the first and second network interfaces. In response to receipt of a series of packets, the packet header filter in the programmable access device identifies messages in the series of messages upon which policy-based services are to be implemented and passes identified messages via the message interface to the external processor for processing. In response to receipt of a message, the external processor invokes service control on the message and may also invoke policy control on the message.
Abstract:
An external processor (42) for a network access system having a programmable access device (40a, 40b) includes a service controller (120a, 120b) that provides at least one service for network traffic, a message processor (122) that processes network messages for service processing by the service controller (120a, 120b), and a programmable access device controller (124) that programs the programmable access device (40a, 40b) in response to service controller processing. It is advantageous for the external processor (42) to include primary (120a) and secondary service controllers (120b) for a particular service so that, if the primary service controller (120a) fails, the secondary service controller (120b) can provide the particular service for message received from the programmable access device (40a, 40b). In preferred embodiments, the service controller further includes a reporting processor (126) that provides an interface through which reporting messages received from the programmable access device (40a, 40b) can be communicated to the service controller (120a, 120b) and a signaling controller (128a, 128b) that transmits signals to configure network hardware to establish requested network connections. The external processor (42) preferably further supports a service policy interface (56) through which the service controller (120a, 120b) can request policy decisions from a possibly remote policy server.
Abstract:
Un dispositivo de acceso programable para usarlo en un sistema de acceso a una red incluye primera y segunda interfases de red (32, 58 red de Acceso) a traves de las cuales se comunican paquetes con una red, una tabla de envio (86) utilizada para rutear paquetes de comunicacion entre la primera y segunda interfases de red, y un filtro de encabezado de paquete (80, 90). El filtro de encabezado de paquete (80, 90) identifica los mensajes recibidos en una de la primera y segunda interfases de red en la cual se van a implementar servicios basados en politicas y pasa los mensajes identificados via una interfase de mensajes (100) a un procesador externo (42) para su procesamiento. En las modalidades preferidas el filtro de encabezados de paquetes (80, 90) es capaz de filtrar paquetes para el procesamiento de servicios basandose en informacion del protocolo referente a las capas del protocolo superiores a la capa 3. En las modalidades preferidas, el dispositivo de acceso programable tambien puede incluir un monitor de uso que reporta eventos, tales como niveles de actividad de sesion, al procesador externo (42), un supervisor (82) que supervisa paquetes mediante referencia a los parametros de trafico programado, y un programador que programa (96) la transmision de los paquetes salientes para soportar multiples clases de calidad de servicio.