Service processing switch
    1.
    发明授权
    Service processing switch 有权
    服务处理开关

    公开(公告)号:US08542595B2

    公开(公告)日:2013-09-24

    申请号:US13295077

    申请日:2011-11-13

    Abstract: Methods and systems for providing IP services in an integrated fashion are provided. According to one embodiment, a load associated with multiple virtual routing processing resources of an IP service generator of a virtual router (VR) based switch is monitored. Packets are load balanced among the virtual routing processing resources. A packet flow cache is maintained with packet flow entries containing information indicative of packet processing actions for established packet flows. Deep packet classification is performed to determine whether a packet is associated with an established packet flow. If so, the packet is directed to one of multiple virtual services processing resources representing application-tailored engines configured to provide network-based IP services including one or more of virtual private network (VPN) processing, firewall processing, Uniform Resource Locator (URL) filtering and anti-virus processing. If the packet is allowed, it is returned to the source virtual routing processing resource for forwarding.

    Abstract translation: 提供了以集成方式提供IP服务的方法和系统。 根据一个实施例,监视与基于虚拟路由器(VR)的交换机的IP服务发生器的多个虚拟路由处理资源相关联的负载。 数据包在虚拟路由处理资源之间进行负载平衡。 使用包含指示用于建立的分组流的分组处理动作的信息的分组流条目维护分组流缓存。 执行深度分组分类以确定分组是否与建立的分组流相关联。 如果是,则将分组指向多个虚拟服务中的一个处理资源,其代表应用定制引擎,其被配置为提供基于网络的IP服务,包括虚拟专用网(VPN)处理,防火墙处理,统一资源定位符(URL) 过滤和防病毒处理。 如果允许报文,则返回到源虚拟路由处理资源进行转发。

    NETWORK PACKET STEERING VIA CONFIGURABLE ASSOCIATION OF PACKET PROCESSING RESOURCES AND NETWORK INTERFACES
    3.
    发明申请
    NETWORK PACKET STEERING VIA CONFIGURABLE ASSOCIATION OF PACKET PROCESSING RESOURCES AND NETWORK INTERFACES 有权
    分组处理资源和网络接口的可配置协议的网络分组转向

    公开(公告)号:US20120069850A1

    公开(公告)日:2012-03-22

    申请号:US13305804

    申请日:2011-11-29

    Abstract: Methods and systems are provided for steering network packets. According to one embodiment, a dynamically configurable steering table is stored within a memory of each network interface of a networking routing/switching device. The steering table represents a mapping that logically assigns each of the network interfaces to one of multiple packet processing resources of the network routing/switching device. The steering table has contained therein information indicative of a unique identifier/address of the assigned packet processing resource. Responsive to receiving a packet on a network interface, the network interface performs Layer 1 or Layer 2 steering of the received packet to the assigned packet processing resource by retrieving the information indicative of the unique identifier/address of the assigned packet processing resource from the steering table based on a channel identifier associated with the received packet and the received packet is processed by the assigned packet processing resource.

    Abstract translation: 提供了用于转向网络数据包的方法和系统。 根据一个实施例,可动态配置的转向表被存储在网络路由/交换设备的每个网络接口的存储器内。 转向表表示将每个网络接口逻辑地分配给网络路由/交换设备的多个分组处理资源之一的映射。 转向表中包含指示所分配的分组处理资源的唯一标识符/地址的信息。 响应于在网络接口上接收分组,网络接口通过从转向器中检索指示所分配的分组处理资源的唯一标识符/地址的信息来执行所接收分组的层1或层2转向所分配的分组处理资源 基于与接收到的分组相关联的信道标识符和接收到的分组的表由分配的分组处理资源处理。

    SERVICE PROCESSING SWITCH
    4.
    发明申请
    SERVICE PROCESSING SWITCH 有权
    服务处理开关

    公开(公告)号:US20120057460A1

    公开(公告)日:2012-03-08

    申请号:US13295077

    申请日:2011-11-13

    Abstract: Methods and systems for providing IP services in an integrated fashion are provided. According to one embodiment, a load associated with multiple virtual routing processing resources of an IP service generator of a virtual router (VR) based switch is monitored. Packets are load balanced among the virtual routing processing resources. A packet flow cache is maintained with packet flow entries containing information indicative of packet processing actions for established packet flows. Deep packet classification is performed to determine whether a packet is associated with an established packet flow. If so, the packet is directed to one of multiple virtual services processing resources representing application-tailored engines configured to provide network-based IP services including one or more of virtual private network (VPN) processing, firewall processing, Uniform Resource Locator (URL) filtering and anti-virus processing. If the packet is allowed, it is returned to the source virtual routing processing resource for forwarding.

    Abstract translation: 提供了以集成方式提供IP服务的方法和系统。 根据一个实施例,监视与基于虚拟路由器(VR)的交换机的IP服务发生器的多个虚拟路由处理资源相关联的负载。 数据包在虚拟路由处理资源之间进行负载平衡。 使用包含指示用于建立的分组流的分组处理动作的信息的分组流条目维护分组流缓存。 执行深度分组分类以确定分组是否与建立的分组流相关联。 如果是,则将分组指向多个虚拟服务中的一个处理资源,其代表应用定制引擎,其被配置为提供基于网络的IP服务,包括虚拟专用网(VPN)处理,防火墙处理,统一资源定位符(URL) 过滤和防病毒处理。 如果允许报文,则返回到源虚拟路由处理资源进行转发。

    Routing traffic through a virtual router-based network switch
    5.
    发明授权
    Routing traffic through a virtual router-based network switch 有权
    通过基于虚拟路由器的网络交换机路由流量

    公开(公告)号:US08111690B2

    公开(公告)日:2012-02-07

    申请号:US12260524

    申请日:2008-10-29

    Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a flow data structure is established that identifies current packet flows associated with multiple virtual routers in the virtual router-based network device. When an incoming packet is received by the virtual router-based network device, it is then determined whether the incoming packet is associated with a current packet flow by accessing the flow data structure based on a header associated with the incoming packet. If it is determined that the incoming packet is associated with the current packet flow, then the incoming packet is hardware forwarded via a network interface of the virtual router-based network device without intervention by a processor of the virtual router-based network device, otherwise the incoming packet is forwarded to software on the processor for flow learning.

    Abstract translation: 提供了方法和系统,用于通过基于虚拟路由器的网络交换机路由流量。 根据一个实施例,建立流数据结构,其识别与基于虚拟路由器的网络设备中的多个虚拟路由器相关联的当前分组流。 当基于虚拟路由器的网络设备接收到传入分组时,通过基于与输入分组相关联的报头访问流数据结构来确定输入分组是否与当前分组流相关联。 如果确定进入的分组与当前分组流相关联,则进入的分组是经由基于虚拟路由器的网络设备的网络接口的硬件转发的,而不是由基于虚拟路由器的网络设备的处理器进行干预 传入的分组被转发到处理器上的软件用于流学习。

    Identifying nodes in a ring network
    6.
    发明授权
    Identifying nodes in a ring network 有权
    识别环网中的节点

    公开(公告)号:US07890663B2

    公开(公告)日:2011-02-15

    申请号:US11460977

    申请日:2006-07-29

    Applicant: Tim Millet

    Inventor: Tim Millet

    CPC classification number: H04L41/12 H04L12/42 H04L12/433 H04L47/286

    Abstract: Methods are provided for determining a master node on a ring network. According to one embodiment, a first node on the ring network initiates circulation of an arbitration token by (i) determining an arbitration token timeout period has elapsed and (ii) transmitting the arbitration token to a neighboring node. Upon receipt of the arbitration token by a node, it determines its relative priority by comparing its ID to an ID field of the arbitration token, initialized by the first node. If the node is determined to be higher priority, then it overwrites the ID field and retransmits the arbitration token onto the ring network. If the node is determined to be lower priority, then the node retransmits the arbitration token without overwriting the ID field. If the node is determined to be of equal priority and the node is the first node, then it assumes the master node role.

    Abstract translation: 提供了用于确定环形网络上的主节点的方法。 根据一个实施例,环网上的第一节点通过以下方式启动仲裁令牌的循环:(i)确定已经过去了仲裁令牌超时周期,以及(ii)将仲裁令牌发送到相邻节点。 在由节点接收到仲裁令时,通过将其ID与由第一节点初始化的仲裁令牌的ID字段进行比较来确定其相对优先级。 如果节点被确定为较高优先级,则覆盖该ID字段并将该仲裁令牌重传到该环网。 如果节点被确定为较低优先级,则节点重传仲裁令牌而不覆盖ID字段。 如果确定节点具有相同的优先级,并且节点是第一个节点,则它假定主节点角色。

    IDENTIFYING NODES IN A RING NETWORK
    7.
    发明申请
    IDENTIFYING NODES IN A RING NETWORK 有权
    识别环网中的节点

    公开(公告)号:US20100189016A1

    公开(公告)日:2010-07-29

    申请号:US12762362

    申请日:2010-04-18

    Applicant: Tim Millet

    Inventor: Tim Millet

    CPC classification number: H04L41/12 H04L12/42 H04L12/433 H04L47/286

    Abstract: Methods, systems and data structure for facilitating identification of nodes in a ring network are provided. According to one embodiment, a data structure is stored on a computer-readable storage media of a node (e.g., a blade) participating in a ring network, within a multi-blade system, for example. The data structure includes a packet-ring master field, a control-node master field, a node characteristics field, a connection state field, a node identification field and a marker field. The packet-ring master field indicates whether the node is a current packet-ring master. The control-node master field indicates whether the node is a control-node master. The node characteristics field specifies per-node characteristics. The connection state field indicates a current connection state of the node. The node identification field specifies the node. The marker field indicates whether the data structure is a node discovery marker.

    Abstract translation: 提供了用于促进环网中节点识别的方法,系统和数据结构。 根据一个实施例,数据结构存储在例如多刀片系统内的参与环网的节点(例如,刀片)的计算机可读存储介质上。 数据结构包括分组环主站,控制节点主站,节点特征域,连接状态域,节点标识域和标记区。 分组环主机字段指示节点是否为当前分组环主节点。 控制节点主站字段指示节点是否是控制节点主节点。 节点特性字段指定每节点特性。 连接状态字段表示节点的当前连接状态。 节点标识字段指定节点。 标记字段指示数据结构是否是节点发现标记。

    Identifying nodes in a ring network
    8.
    发明授权
    Identifying nodes in a ring network 有权
    识别环网中的节点

    公开(公告)号:US07580373B2

    公开(公告)日:2009-08-25

    申请号:US11556159

    申请日:2006-11-02

    Applicant: Tim Millet

    Inventor: Tim Millet

    CPC classification number: H04L41/12 H04L12/42 H04L12/433 H04L47/286

    Abstract: Methods are provided for discovering nodes participating in a ring network. According to one embodiment, a ring controller receives a packet containing an arbitration token. If the arbitration token does not arrive within a preselected network timeout period, then the ring controller generates an arbitration token. If the packet contains an arbitration token, then the ring controller checks to see if it was modified by a higher priority node and if not, sets itself as the master node. For each discovery marker in the packet, the ring controller saves topology information associated with the discovery marker. The ring controller adds to the packet a first discovery marker when the packet does not contain a first discovery maker, wherein the first discovery marker includes topology information associated with the node. Finally, the ring controller sends the packet to a next node in the network.

    Abstract translation: 提供了用于发现参与环网的节点的方法。 根据一个实施例,环控制器接收包含仲裁令牌的分组。 如果仲裁令牌没有到达预选的网络超时期限内,则环控制器产生仲裁令牌。 如果分组包含仲裁令牌,则环路控制器检查是否被较高优先级节点修改,否则将其自身设置为主节点。 对于分组中的每个发现标记,环控制器保存与发现标记相关联的拓扑信息。 当所述分组不包含第一发现制造商时,所述环控制器将所述分组添加到所述分组第一发现标记,其中所述第一发现标记包括与所述节点相关联的拓扑信息。 最后,环控制器将数据包发送到网络中的下一个节点。

    System and method for hardware accelerated packet multicast in a virtual routing system
    10.
    发明授权
    System and method for hardware accelerated packet multicast in a virtual routing system 有权
    在虚拟路由系统中硬件加速分组多播的系统和方法

    公开(公告)号:US07266120B2

    公开(公告)日:2007-09-04

    申请号:US10298815

    申请日:2002-11-18

    Abstract: A packet-forwarding engine (PFE) of a multiprocessor system uses an array of flow classification block (FCB) indices to multicast a packet. Packets are received and buffered in external memory. In one embodiment, when a multicast packet is identified, a bit is set in a packet descriptor and an FCB index is generated and sent with a null-packet to the egress processors which generate multiple descriptors with different indices for each instance of multicasting. All the descriptors may point to the same buffer in the external memory, which stores the multicast packet. A DMA engine reads from the same buffer multiple times and egress processors may access an appropriate transform control block (TCB) index so that the proper headers may be installed on the outgoing packet. The buffer may be released after the last time the packet is read by setting a particular bit of the FCB index.

    Abstract translation: 多处理器系统的分组转发引擎(PFE)使用流分类块(FCB)索引的数组来组播数据包。 数据包被接收并缓存在外部存储器中。 在一个实施例中,当识别出多播分组时,在分组描述符中设置比特,并且生成FCB索引并且向出口处理器发送带有零分组的消息,所述出口处理器为每个多播的实例生成具有不同索引的多个描述符。 所有描述符都可以指向存储多播数据包的外部存储器中的相同缓冲区。 DMA引擎从同一缓冲区读取多次,出口处理器可以访问适当的变换控制块(TCB)索引,以便可以在输出数据包上安装合适的报头。 通过设置FCB索引的特定位,可以在最后一次读取数据包之后释放缓冲区。

Patent Agency Ranking