Hardware-accelerated packet multicasting in a virtual routing system
    1.
    发明授权
    Hardware-accelerated packet multicasting in a virtual routing system 有权
    虚拟路由系统中的硬件加速分组多播

    公开(公告)号:US07933269B2

    公开(公告)日:2011-04-26

    申请号:US11849352

    申请日:2007-09-03

    Abstract: Methods and systems are provided for hardware-accelerated packet multicasting in a virtual routing system. According to one embodiment, a multicast packet is received at an ingress system of a packet-forwarding engine (PFE). The ingress system identifies flow classification indices for the multicast packet. Then, for each instance of multicasting, the ingress system sends a single copy of the multicast packet and the flow classification indices to an egress system of the PFE. The single copy of the multicast packet is buffered in a memory accessible by the egress system. The egress system prepares the multicast packet for transmission by for each flow classification index, identifying corresponding transform control instructions based on the flow classification index, reading the single copy of the multicast packet from the memory, causing the multicast packet to be transformed in accordance with the identified transform control instructions and outputting the transformed multicast packet.

    Abstract translation: 为虚拟路由系统中的硬件加速分组多播提供了方法和系统。 根据一个实施例,在分组转发引擎(PFE)的入口系统处接收组播分组。 入口系统识别组播数据包的流分类索引。 然后,对于每个组播实例,入口系统向组播的出口系统发送组播数据包的单个副本和流分类索引。 组播数据包的单个副本被缓存在出口系统可访问的存储器中。 出口系统通过每个流分类索引准备传输的组播数据包,根据流分类索引识别相应的变换控制指令,从存储器读取组播数据包的单一副本,使组播数据包根据 所识别的变换控制指令并输出转换的多播分组。

    HARDWARE-ACCELERATED PACKET MULTICASTING IN A VIRTUAL ROUTING SYSTEM
    3.
    发明申请
    HARDWARE-ACCELERATED PACKET MULTICASTING IN A VIRTUAL ROUTING SYSTEM 有权
    虚拟路由系统中的硬件加速分组多路复用

    公开(公告)号:US20070291755A1

    公开(公告)日:2007-12-20

    申请号:US11849352

    申请日:2007-09-03

    Abstract: Methods and systems are provided for hardware-accelerated packet multicasting in a virtual routing system. According to one embodiment, a multicast packet is received at an ingress system of a packet-forwarding engine (PFE). The ingress system identifies flow classification indices for the multicast packet. Then, for each instance of multicasting, the ingress system sends a single copy of the multicast packet and the flow classification indices to an egress system of the PFE. The single copy of the multicast packet is buffered in a memory accessible by the egress system. The egress system prepares the multicast packet for transmission by for each flow classification index, identifying corresponding transform control instructions based on the flow classification index, reading the single copy of the multicast packet from the memory, causing the multicast packet to be transformed in accordance with the identified transform control instructions and outputting the transformed multicast packet.

    Abstract translation: 为虚拟路由系统中的硬件加速分组多播提供了方法和系统。 根据一个实施例,在分组转发引擎(PFE)的入口系统处接收组播分组。 入口系统识别组播数据包的流分类索引。 然后,对于每个组播实例,入口系统向组播的出口系统发送组播数据包的单个副本和流分类索引。 组播数据包的单个副本被缓存在出口系统可访问的存储器中。 出口系统通过每个流分类索引准备传输的组播数据包,根据流分类索引识别相应的变换控制指令,从存储器读取组播数据包的单一副本,使组播数据包根据 所识别的变换控制指令并输出转换的多播分组。

    ROUTING TRAFFIC THROUGH A VIRTUAL ROUTER-BASED NETWORK SWITCH
    4.
    发明申请
    ROUTING TRAFFIC THROUGH A VIRTUAL ROUTER-BASED NETWORK SWITCH 有权
    通过虚拟路由器的网络交换机路由交通

    公开(公告)号:US20070127382A1

    公开(公告)日:2007-06-07

    申请号:US11671462

    申请日:2007-02-05

    Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a method for routing packets in a router includes establishing a flow data structure, which identifies a packet flow through a virtual router in the router. When a packet is received, a comparison is performed between a subset of at least one packet header associated with the packet and a subset of the flow data structure. If the subset of the packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet may be either dropped or forwarded to a general purpose processor for processing.

    Abstract translation: 提供了方法和系统,用于通过基于虚拟路由器的网络交换机路由流量。 根据一个实施例,用于在路由器中路由分组的方法包括建立流数据结构,其识别路由器中的虚拟路由器的分组流。 当接收到分组时,在与分组相关联的至少一个分组报头的子集与流数据结构的子集之间执行比较。 如果分组报头的子集与流数据结构的子集匹配,则该分组可以被硬件加速到网络接口。 否则,可以将分组丢弃或转发到通用处理器进行处理。

    System and method for hierarchical metering in a virtual router based network switch
    5.
    发明授权
    System and method for hierarchical metering in a virtual router based network switch 有权
    基于虚拟路由器的网络交换机中的分层计费系统和方法

    公开(公告)号:US07161904B2

    公开(公告)日:2007-01-09

    申请号:US10163162

    申请日:2002-06-04

    Abstract: A virtual routing platform includes a line interface a plurality of virtual routing engines (VREs) to identify packets of different packet flows and perform a hierarchy of metering including at least first and second levels of metering on the packet flows. A first level of metering may be performed on packets of a first packet flow using a first metering control block (MCB). The first level of metering may be one level of metering in a hierarchy of metering levels. A second level of metering on the packets of the first packet flow and packets of a second flow using a second MCB. The second level of metering may be another level of metering in the hierarchy. A cache-lock may be placed on the appropriate MCB prior to performing the level of metering. The first and second MCBs may be data structures stored in a shared memory of the virtual routing platform. The cache-lock may be released after performing the level of metering using the MCB. The cache-lock may comprise setting a lock-bit of a cache line index in a cache tag store, which may identify a MCB in the cache memory. The virtual routing platform may be a multiprocessor system utilizing a shared memory having a first and second processors to perform levels of metering in parallel. In one embodiment, a virtual routing engine may be shared by a plurality of virtual router contexts running in a memory system of a CPU of the virtual routing engine. In this embodiment, the first packet flow may be associated with one virtual router context and the second packet flow is associated with a second virtual router context. The first and second routing contexts may be of a plurality of virtual router contexts resident in the virtual routing engine.

    Abstract translation: 虚拟路由平台包括线路接口,多个虚拟路由引擎(VRE),用于识别不同分组流的分组,并且执行测量层次,其包括在分组流上的至少第一和第二计量级别。 可以使用第一计量控制块(MCB)对第一分组流的分组执行第一级测量。 计量的第一级可以是计量级别的一个层次中的一个计量级别。 使用第二MCB对第一分组流的分组和第二流的分组进行第二级计量。 第二级计量可能是层次结构中的另一个计量级别。 在执行测量级别之前,可以将缓存锁定放置在适当的MCB上。 第一和第二MCB可以是存储在虚拟路由平台的共享存储器中的数据结构。 使用MCB执行测光程序后,缓存锁可能会被释放。 高速缓存锁定可以包括在高速缓存标签存储器中设置高速缓存行索引的锁定位,高速缓存标签存储器可以标识高速缓冲存储器中的MCB。 虚拟路由平台可以是利用具有第一和第二处理器的共享存储器并行地执行计量水平的多处理器系统。 在一个实施例中,虚拟路由引擎可以由在虚拟路由引擎的CPU的存储器系统中运行的多个虚拟路由器上下文共享。 在该实施例中,第一分组流可以与一个虚拟路由器上下文相关联,并且第二分组流与第二虚拟路由器上下文相关联。 第一和第二路由上下文可以是驻留在虚拟路由引擎中的多个虚拟路由器上下文。

    Network packet steering via configurable association of packet processing resources and network interfaces
    6.
    发明授权
    Network packet steering via configurable association of packet processing resources and network interfaces 有权
    网络分组转向通过分组处理资源和网络接口的可配置关联

    公开(公告)号:US08638802B2

    公开(公告)日:2014-01-28

    申请号:US13305804

    申请日:2011-11-29

    Abstract: Methods and systems are provided for steering network packets. According to one embodiment, a dynamically configurable steering table is stored within a memory of each network interface of a networking routing/switching device. The steering table represents a mapping that logically assigns each of the network interfaces to one of multiple packet processing resources of the network routing/switching device. The steering table has contained therein information indicative of a unique identifier/address of the assigned packet processing resource. Responsive to receiving a packet on a network interface, the network interface performs Layer 1 or Layer 2 steering of the received packet to the assigned packet processing resource by retrieving the information indicative of the unique identifier/address of the assigned packet processing resource from the steering table based on a channel identifier associated with the received packet and the received packet is processed by the assigned packet processing resource.

    Abstract translation: 提供了用于转向网络数据包的方法和系统。 根据一个实施例,可动态配置的转向表被存储在网络路由/交换设备的每个网络接口的存储器内。 转向表表示将每个网络接口逻辑地分配给网络路由/交换设备的多个分组处理资源之一的映射。 转向表中包含指示所分配的分组处理资源的唯一标识符/地址的信息。 响应于在网络接口上接收分组,网络接口通过从转向器中检索指示所分配的分组处理资源的唯一标识符/地址的信息来执行所接收分组的层1或层2转向所分配的分组处理资源 基于与接收到的分组相关联的信道标识符和接收到的分组的表由分配的分组处理资源处理。

    Network packet steering via configurable association of processing resources and netmods or line interface ports
    7.
    发明授权
    Network packet steering via configurable association of processing resources and netmods or line interface ports 有权
    通过处理资源和netmods或线路接口端口的可配置关联来进行网络分组转向

    公开(公告)号:US08068503B2

    公开(公告)日:2011-11-29

    申请号:US11684614

    申请日:2007-03-10

    Abstract: Methods and systems are provided for steering network packets. According to one embodiment, a mapping associates a processing resource with a network interface module (netmod) and/or a number of line interface ports included within the netmod. In one embodiment, the mapping is configurable within the processing resource and pushed to the netmod. The netmod uses the mapping to steer network packets to the processing resource when the packets conform to the mapping. The mapping may be additionally used to identify a specific process that is to be performed against the packets once the processing resource receives the steered packets from the netmod.

    Abstract translation: 提供了用于转向网络数据包的方法和系统。 根据一个实施例,映射将处理资源与网络接口模块(netmod)和/或包括在netmod内的多个线路接口端口相关联。 在一个实施例中,映射可在处理资源内配置并被推送到netmod。 当数据包符合映射时,netmod使用映射来将网络数据包引导到处理资源。 一旦处理资源接收到来自netmod的转向分组,该映射可以另外用于标识将针对分组执行的特定进程。

    HARDWARE-ACCELERATED PACKET MULTICASTING IN A VIRTUAL ROUTING SYSTEM
    8.
    发明申请
    HARDWARE-ACCELERATED PACKET MULTICASTING IN A VIRTUAL ROUTING SYSTEM 有权
    虚拟路由系统中的硬件加速分组多路复用

    公开(公告)号:US20110200044A1

    公开(公告)日:2011-08-18

    申请号:US13092962

    申请日:2011-04-24

    Abstract: Methods and systems are provided for hardware-accelerated packet multicasting in a virtual routing system. According to one embodiment, a virtual routing engine (VRE) including virtual routing processors and corresponding memory systems are provided. The VRE implements virtual routers (VRs) operable on the virtual routing processors and associated routing contexts utilizing potentially overlapping multicast address spaces resident in the memory systems. Multicasting of multicast flows originated by subscribers of a service provider is simultaneously performed on behalf of the subscribers. A VR is selected to handle multicast packets associated with a multicast flow. A routing context of the VRE is switched to one associated with the VR. A packet of the multicast flow is forwarded to multiple destinations by reading a portion of the packet from a common buffer for each instance of multicasting and applying transform control instructions to the packet for each instance of multicasting.

    Abstract translation: 为虚拟路由系统中的硬件加速分组多播提供了方法和系统。 根据一个实施例,提供了包括虚拟路由处理器和对应的存储器系统的虚拟路由引擎(VRE)。 VRE实现可在虚拟路由处理器上运行的虚拟路由器(VR),并且利用驻留在存储器系统中的可能重叠的多播地址空间来使用相关联的路由上下文。 代表用户同时进行由服务提供商的用户发起的组播流的组播。 选择VR来处理与组播流相关联的组播分组。 VRE的路由上下文切换到与VR相关的路由上下文。 通过从组播的每个实例的公共缓冲器读取分组的一部分,将组播流的分组转发到多个目的地,并且对于每个多播的实例,将变换控制指令应用于分组。

    Service processing switch
    10.
    发明授权
    Service processing switch 有权
    服务处理开关

    公开(公告)号:US08542595B2

    公开(公告)日:2013-09-24

    申请号:US13295077

    申请日:2011-11-13

    Abstract: Methods and systems for providing IP services in an integrated fashion are provided. According to one embodiment, a load associated with multiple virtual routing processing resources of an IP service generator of a virtual router (VR) based switch is monitored. Packets are load balanced among the virtual routing processing resources. A packet flow cache is maintained with packet flow entries containing information indicative of packet processing actions for established packet flows. Deep packet classification is performed to determine whether a packet is associated with an established packet flow. If so, the packet is directed to one of multiple virtual services processing resources representing application-tailored engines configured to provide network-based IP services including one or more of virtual private network (VPN) processing, firewall processing, Uniform Resource Locator (URL) filtering and anti-virus processing. If the packet is allowed, it is returned to the source virtual routing processing resource for forwarding.

    Abstract translation: 提供了以集成方式提供IP服务的方法和系统。 根据一个实施例,监视与基于虚拟路由器(VR)的交换机的IP服务发生器的多个虚拟路由处理资源相关联的负载。 数据包在虚拟路由处理资源之间进行负载平衡。 使用包含指示用于建立的分组流的分组处理动作的信息的分组流条目维护分组流缓存。 执行深度分组分类以确定分组是否与建立的分组流相关联。 如果是,则将分组指向多个虚拟服务中的一个处理资源,其代表应用定制引擎,其被配置为提供基于网络的IP服务,包括虚拟专用网(VPN)处理,防火墙处理,统一资源定位符(URL) 过滤和防病毒处理。 如果允许报文,则返回到源虚拟路由处理资源进行转发。

Patent Agency Ranking