Service processing switch
    22.
    发明授权
    Service processing switch 有权
    服务处理开关

    公开(公告)号:US08064462B2

    公开(公告)日:2011-11-22

    申请号:US12781808

    申请日:2010-05-17

    Abstract: Methods and systems for providing IP services in an integrated fashion are provided. According to one embodiment, a system includes a switch fabric and a line interface/network module, multiple virtual routing engines (VREs) and a virtual services engine (VSE) coupled with the switch fabric. The line interface/network module receives packets, steers ingress packets to a selected VRE and transmits egress packets according to their relative priority. VREs determines if a packet associated with a packet flow requires processing by the VSE by performing flow-based packet classification on the packet and evaluating forwarding state information associated with previously stored flow learning results. The VSE includes a central processing unit configured to perform firewall processing, Uniform Resource Locator (URL) filtering and anti-virus processing. If the packet is determined to require processing by the VSE, then the packet is steered to the VSE for firewall, URL filtering and/or anti-virus processing.

    Abstract translation: 提供了以集成方式提供IP服务的方法和系统。 根据一个实施例,系统包括交换结构和线路接口/网络模块,多个虚拟路由引擎(VRE)和与交换结构耦合的虚拟服务引擎(VSE)。 线路接口/网络模块接收分组,将入口分组引导到所选择的VRE,并根据其相对优先级发送出口分组。 VRE确定与分组流相关联的分组是否需要通过在分组上执行基于流的分组分类并且评估与先前存储的流学习结果相关联的转发状态信息来由VSE进行处理。 VSE包括配置为执行防火墙处理,统一资源定位符(URL)过滤和防病毒处理的中央处理单元。 如果分组被确定为需要由VSE进行处理,则该分组被引导到用于防火墙,URL过滤和/或防病毒处理的VSE。

    Hierarchical metering in a virtual router-based network switch
    23.
    发明授权
    Hierarchical metering in a virtual router-based network switch 有权
    基于虚拟路由器的网络交换机中的分层计费

    公开(公告)号:US07668087B2

    公开(公告)日:2010-02-23

    申请号:US11621102

    申请日:2007-01-08

    Abstract: Methods and systems are provided for applying metering and rate-limiting in a virtual router environment and supporting a hierarchy of metering/rate-limiting contexts per packet flow. According to one embodiment, multiple first level metering options and multiple second level metering options associated with a hierarchy of metering levels are provided. A virtual routing engine receives packets associated with a first packet flow and packets associated with a second packet flow. The virtual routing engine performs a first type of metering of the first level metering options on the packets associated with the first packet flow using a first metering control block (MCB) and performs a second type of metering of the second level metering options on the packets associated with the first packet flow and the packets associated with the second flow using a second MCB.

    Abstract translation: 提供了方法和系统,用于在虚拟路由器环境中应用计量和速率限制,并支持每个数据包流的计量/速率限制上下文的层次。 根据一个实施例,提供与测量级别的层级相关联的多个第一级计量选项和多个第二级计量选项。 虚拟路由引擎接收与第一分组流相关联的分组以及与第二分组流相关联的分组。 虚拟路由引擎使用第一计量控制块(MCB)执行与第一分组流相关联的分组上的第一级计量选项的第一类型的测量,并且对分组执行第二级计量选项的第二类型的测量 使用第二MCB与第一分组流和与第二流相关联的分组相关联。

    Routing traffic through a virtual router-based network switch
    24.
    发明授权
    Routing traffic through a virtual router-based network switch 有权
    通过基于虚拟路由器的网络交换机路由流量

    公开(公告)号:US07522604B2

    公开(公告)日:2009-04-21

    申请号:US11671462

    申请日:2007-02-05

    Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a method for routing packets in a router includes establishing a flow data structure, which identifies a packet flow through a virtual router in the router. When a packet is received, a comparison is performed between a subset of at least one packet header associated with the packet and a subset of the flow data structure. If the subset of the packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet may be either dropped or forwarded to a general purpose processor for processing.

    Abstract translation: 提供了方法和系统,用于通过基于虚拟路由器的网络交换机路由流量。 根据一个实施例,用于在路由器中路由分组的方法包括建立流数据结构,其识别路由器中的虚拟路由器的分组流。 当接收到分组时,在与分组相关联的至少一个分组报头的子集与流数据结构的子集之间执行比较。 如果分组报头的子集与流数据结构的子集匹配,则该分组可以被硬件加速到网络接口。 否则,可以将分组丢弃或转发到通用处理器进行处理。

    ROUTING TRAFFIC THROUGH A VIRTUAL ROUTER-BASED NETWORK SWITCH
    25.
    发明申请
    ROUTING TRAFFIC THROUGH A VIRTUAL ROUTER-BASED NETWORK SWITCH 有权
    通过虚拟路由器的网络交换机路由交通

    公开(公告)号:US20090073977A1

    公开(公告)日:2009-03-19

    申请号:US12260524

    申请日:2008-10-29

    Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a flow data structure is established that identifies current packet flows associated with multiple virtual routers in the virtual router-based network device. When an incoming packet is received by the virtual router-based network device, it is then determined whether the incoming packet is associated with a current packet flow by accessing the flow data structure based on a header associated with the incoming packet. If it is determined that the incoming packet is associated with the current packet flow, then the incoming packet is hardware forwarded via a network interface of the virtual router-based network device without intervention by a processor of the virtual router-based network device, otherwise the incoming packet is forwarded to software on the processor for flow learning.

    Abstract translation: 提供了方法和系统,用于通过基于虚拟路由器的网络交换机路由流量。 根据一个实施例,建立流数据结构,其识别与基于虚拟路由器的网络设备中的多个虚拟路由器相关联的当前分组流。 当基于虚拟路由器的网络设备接收到传入分组时,通过基于与输入分组相关联的报头访问流数据结构来确定输入分组是否与当前分组流相关联。 如果确定进入的分组与当前分组流相关联,则进入的分组是经由基于虚拟路由器的网络设备的网络接口的硬件转发的,而不是由基于虚拟路由器的网络设备的处理器进行干预 传入的分组被转发到处理器上的软件用于流学习。

    NETWORK PACKET STEERING VIA CONFIGURABLE ASSOCIATION OF PROCESSING RESOURCES AND NETMODS OR LINE INTERFACE PORTS
    26.
    发明申请
    NETWORK PACKET STEERING VIA CONFIGURABLE ASSOCIATION OF PROCESSING RESOURCES AND NETMODS OR LINE INTERFACE PORTS 有权
    网络分组转向通过可配置的处理资源和网络或线路接口协会

    公开(公告)号:US20070147368A1

    公开(公告)日:2007-06-28

    申请号:US11684614

    申请日:2007-03-10

    Abstract: Methods and systems are provided for steering network packets. According to one embodiment, a mapping associates a processing resource with a network interface module (netmod) and/or a number of line interface ports included within the netmod. In one embodiment, the mapping is configurable within the processing resource and pushed to the netmod. The netmod uses the mapping to steer network packets to the processing resource when the packets conform to the mapping. The mapping may be additionally used to identify a specific process that is to be performed against the packets once the processing resource receives the steered packets from the netmod.

    Abstract translation: 提供了用于转向网络数据包的方法和系统。 根据一个实施例,映射将处理资源与网络接口模块(netmod)和/或包括在netmod内的多个线路接口端口相关联。 在一个实施例中,映射可在处理资源内配置并被推送到netmod。 当数据包符合映射时,netmod使用映射来将网络数据包引导到处理资源。 一旦处理资源接收到来自netmod的转向分组,该映射可以另外用于标识将针对分组执行的特定进程。

    Network packet steering
    27.
    发明授权
    Network packet steering 有权
    网络包转向

    公开(公告)号:US07203192B2

    公开(公告)日:2007-04-10

    申请号:US10163261

    申请日:2002-06-04

    Abstract: Methods and Systems are provided for steering network packets and bridging media channels to a single processing resource. A mapping associates a processing resource with a network interface module (Netmod) or a number of line interface ports included within the Netmod. In one embodiment, the mapping is configurable within the processing resource and pushed to the Netmod. The Netmod uses the mapping to steer network packets to the processing resource when the packets conform to the mapping. Moreover, the mapping can be used to identify a specific process that is to be performed against the packets once the processing resource receives the steered packets from the Netmod.

    Abstract translation: 提供方法和系统用于将网络分组和桥接媒体信道转向单个处理资源。 映射将处理资源与网络接口模块(Netmod)或Netmod中包含的多个线路接口端口相关联。 在一个实施例中,映射可在处理资源内配置并被推送到Netmod。 当数据包符合映射时,Netmod会使用映射来将网络数据包引导到处理资源。 此外,一旦处理资源从Netmod接收到转向的分组,该映射可用于识别针对分组执行的特定进程。

    IDENTIFYING NODES IN A RING NETWORK
    28.
    发明申请
    IDENTIFYING NODES IN A RING NETWORK 有权
    识别环网中的节点

    公开(公告)号:US20070058648A1

    公开(公告)日:2007-03-15

    申请号:US11556159

    申请日:2006-11-02

    Applicant: Tim Millet

    Inventor: Tim Millet

    CPC classification number: H04L41/12 H04L12/42 H04L12/433 H04L47/286

    Abstract: A master node in a packet ring network periodically sends packet containing a discovery marker into the packet ring network. As each node in turn receives the packet, each adds its own discovery marker, which contains its topology information, to the packer, saves the topology information of others, and resends the packet to the next node in the ring. Eventually, the master node receives the packer containing a chain of discovery markers for all active nodes terminated by the master's own discovery marker, so the master node then removes its own discovery marker and resends the packer in to the ring network. Each node in turn then removes its own discovery marker. In this way, all nodes in the ring see topology information for every other active node.

    Abstract translation: 分组环网中的主节点周期性地将包含发现标记的分组发送到分组环网络中。 随着每个节点依次接收到分组,每个节点都将自己的发现标记(包含其拓扑信息)添加到打包机,保存其他的拓扑信息,并将该分组重新发送到环中的下一个节点。 最终,主节点接收包含由主人自己的发现标记终止的所有活动节点的发现标记链的封隔器,因此主节点然后移除其自己的发现标记并将封装器重新发送到环形网络。 每个节点依次又移除自己的发现标记。 这样,环中的所有节点就会看到每个其他主动节点的拓扑信息。

    Network packet steering via configurable association of packet processing resources and network interfaces
    29.
    发明授权
    Network packet steering via configurable association of packet processing resources and network interfaces 有权
    网络分组转向通过分组处理资源和网络接口的可配置关联

    公开(公告)号:US08638802B2

    公开(公告)日:2014-01-28

    申请号:US13305804

    申请日:2011-11-29

    Abstract: Methods and systems are provided for steering network packets. According to one embodiment, a dynamically configurable steering table is stored within a memory of each network interface of a networking routing/switching device. The steering table represents a mapping that logically assigns each of the network interfaces to one of multiple packet processing resources of the network routing/switching device. The steering table has contained therein information indicative of a unique identifier/address of the assigned packet processing resource. Responsive to receiving a packet on a network interface, the network interface performs Layer 1 or Layer 2 steering of the received packet to the assigned packet processing resource by retrieving the information indicative of the unique identifier/address of the assigned packet processing resource from the steering table based on a channel identifier associated with the received packet and the received packet is processed by the assigned packet processing resource.

    Abstract translation: 提供了用于转向网络数据包的方法和系统。 根据一个实施例,可动态配置的转向表被存储在网络路由/交换设备的每个网络接口的存储器内。 转向表表示将每个网络接口逻辑地分配给网络路由/交换设备的多个分组处理资源之一的映射。 转向表中包含指示所分配的分组处理资源的唯一标识符/地址的信息。 响应于在网络接口上接收分组,网络接口通过从转向器中检索指示所分配的分组处理资源的唯一标识符/地址的信息来执行所接收分组的层1或层2转向所分配的分组处理资源 基于与接收到的分组相关联的信道标识符和接收到的分组的表由分配的分组处理资源处理。

    Network packet steering via configurable association of processing resources and netmods or line interface ports
    30.
    发明授权
    Network packet steering via configurable association of processing resources and netmods or line interface ports 有权
    通过处理资源和netmods或线路接口端口的可配置关联来进行网络分组转向

    公开(公告)号:US08068503B2

    公开(公告)日:2011-11-29

    申请号:US11684614

    申请日:2007-03-10

    Abstract: Methods and systems are provided for steering network packets. According to one embodiment, a mapping associates a processing resource with a network interface module (netmod) and/or a number of line interface ports included within the netmod. In one embodiment, the mapping is configurable within the processing resource and pushed to the netmod. The netmod uses the mapping to steer network packets to the processing resource when the packets conform to the mapping. The mapping may be additionally used to identify a specific process that is to be performed against the packets once the processing resource receives the steered packets from the netmod.

    Abstract translation: 提供了用于转向网络数据包的方法和系统。 根据一个实施例,映射将处理资源与网络接口模块(netmod)和/或包括在netmod内的多个线路接口端口相关联。 在一个实施例中,映射可在处理资源内配置并被推送到netmod。 当数据包符合映射时,netmod使用映射来将网络数据包引导到处理资源。 一旦处理资源接收到来自netmod的转向分组,该映射可以另外用于标识将针对分组执行的特定进程。

Patent Agency Ranking