Abstract:
A programmable access device for use in a network access system includes first and second network interfaces (32, 58 Access network) through which packets are communicated with a network, a forwarding table (86) utilized to route packets communication between the first and second network interfaces, and a packet header filter (80, 90). The packet header filter (80, 90) identifies messages received at one of the first and second network interface on which policy-based services are to be implemented and passes identified messages via a message interface (100) to an external processor (42) for processing. In preferred embodiments, the packet header filter (80, 90) is capable of filetering packets for service processing based upon protocol information pertaining to protocol layers higher than layer 3. In preferred embodiments, the programmable access device may also include a usage monitor that reports events, such as session activity levels, to the external processor (42), a policer (82) that polices packets by reference to programmed traffic parameters, and a scheduler that schedules (96) the transmission of outgoing packets to support multiple quality of service classes.
Abstract:
An external processor for a network access system having a programmable access device includes a service controller that provides at least one service for network traffic, a message processor that processes network messages for service processing by the service controller, and a programmable access device controller that programs the programmable access device in response to service controller processing. It is advantageous for the external processor to include primary and secondary service controllers for a particular service so that, if the primary service controller fails, the secondary service controller can provide the particular service for message received from the programmable access device. In preferred embodiments, the service controller further includes a reporting processor that provides an interface through which reporting messages received from the programmable access device can be communicated to the service controller and a signaling controller that transmits signals to configure network hardware to establish requested network connections. The external processor preferably further supports a service policy interface through which the service controller can request policy decisions from a possibly remote policy server.
Abstract:
A distributed network access system (30) in accordance with the present invention includes at least an external processor (42) and a programmable access device (40). The programmable access device has a message interface coupled to the external processor and first and second network interfaces through which packets are communicated with a network. The programmable access device includes a packet header filter and a forwarding table (50) that is utilized to route packets communicated between the first and second network interfaces. In response to receipt of a series of packets, the packet header filter in the programmable access device identifies messages in the series of messages upon which policy-based services are to be implemented and passes identified messages via the message interface to the external processor for processing. In response to receipt of a message, the external processor invokes service control on the message and may also invoke policy control (48) on the message.
Abstract:
In one embodiment of the invention, a network system includes a boundary router, a second router, and an upstream link of the second router coupled between to the output port of the boundary router and an input port of the second router. The second router includes an admission control function and a data plane. In response to a request to reserve resources for a flow through the second router, the admission control function performs admission control for both the upstream link and its downstream link. In a preferred embodimen t, the second router performs admission control for the upstream link only if t he second router is a receiving edge router for the flow. Because the second router performs admission control for its upstream link, the boundary router transmits the request toward an upstream router without performing admission control for the link.
Abstract:
A programmable access device for use in a network access system includes first and second network interfaces (32, 58 Access network) through which packets are communicated with a network, a forwarding table (86) utilized to route packets communication between the first and second network interfaces, and a packet header filter (80, 90). The packet header filter (80, 90) identifies messages received at one of the first and second network interface on which policy-based services are to be implemented and passes identified messages via a message interface (100) to an external processor (42) for processing. In preferred embodiments, the packet header filter (80, 90) is capable of filetering packets for service processing based upon protocol information pertaining to protocol layers higher than layer 3. In preferred embodiments, the programmable access device may also include a usage monitor that reports events, such as session activity levels, to the external processor (42), a policer (82) that polices packets by reference to programmed traffic parameters, and a scheduler that schedules (96) the transmission of outgoing packets to support multiple quality of service classes.
Abstract:
In one embodiment, a network system of the present invention includes at least a first router and a second router coupled to an upstream link to permit data flow from the first router to the second router across the upstream link. The second router includes a control plane and a data plane having an input port coupled to the upstream link and an output port connectable to a downstream link. The control plane includes a virtual pool having a capacity corresponding to a resource capacity of the first router and an admission control function. In response to a request to reserve resources for a flow through the data plane from the input port to the output port, the admission control function performs admission control for the upstream link by reference to resource availability within the virtual pool. In one embodiment, the request is a request to reserve resources for an Integrated Services flow, and the capacity of the virtual pool corresponds to a resource capacity of a Integrated Services service class supported by the first router.
Abstract:
In a network access system including an external processor and a programmable access device, the external processor transmits a control message to the programmable access device to establish a configuration of the programmable access device. The programmable access device then communicates messages to the external processor for service processing in accordance with the configuration. For example, the control message may be a filter control message that establishes a configuration of a packet header filter in the programmable access device. The packet header filter then communicates network messages filtered from a packet flow in accordance with the configuration established by the control message. To limit the communication of network messages from the programmable access device to the external processor, the external processor can send a message setting message interface flags in the programmable access device. The external processor may also transmit a monitor control message to the programmable access device to establish a configuration of a monitor in the programmable access device. The programmable access device then communicates reporting messages to the external processor in response to the configuration of the monitor.
Abstract:
A programmable access device for use in a network access system includes first and second network interfaces through which packets are communicated with a network, a forwarding table utilized to route packets communicated between the first and second network interfaces, and a packet header filter. The packet header filter identifies messages received at one of the first and second network interfaces on which policy-based services are to be implemented and passes identified messages via a message interface to an external processor for processing. In preferred embodiments, the packet header filter is capable of filtering packets for service processing based upon protocol information pertaining to protocol layers higher than layer 3. In preferred embodiments, the programmable access device may also include a usage monitor that reports events, such as session activity levels, to the external processor, a policer that polices packets by reference to programmed traffic parameters, and a scheduler that schedules the transmission of outgoing packets to support multiple quality of service classes.
Abstract:
A distributed network access system (30) in accordance with the present invention includes at least an external processor (42) and a programmable access device (40). The programmable access device has a message interface coupled to the external processor and first and second network interfaces through which packets are communicated with a network. The programmable access device includes a packet header filter and a forwarding table (50) that is utilized to route packets communicated between the first and second network interfaces. In response to receipt of a series of packets, the packet header filter in the programmable access device identifies messages in the series of messages upon which policy-based services are to be implemented and passes identified messages via the message interface to the external processor for processing. In response to receipt of a message, the external processor invokes service control on the message and may also invoke policy control (48) on the message.