专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08886827B2 Flow cache mechanism for performing packet flow lookups in a network device 有权
标题翻译：用于在网络设备中执行分组流查找的流缓存机制
公开(公告)号：US08886827B2
公开(公告)日：2014-11-11
申请号：US13372014
申请日：2012-02-13
申请人： Deepak Goel , John Keen , Venkatasubramanian Swaminathan
发明人： Deepak Goel , John Keen , Venkatasubramanian Swaminathan
IPC分类号： G06F15/173
CPC分类号： H04L45/748 , H04L45/742 , H04L45/7453
摘要： An example network device includes a network interface configured to receive a packet of a packet flow, wherein the packet flow is one of a plurality of packet flows processed by the network device, a flow cache configured to receive a lookup key associated with the packet flow, and a Bloom filter configured to process the lookup key. The flow cache is further configured to store information about a portion of the plurality of packet flows processed by the network device, and determine whether to store information about the packet flow by at least applying a selection criterion to processing of the lookup key by the Bloom filter. The flow cache is configured to determine whether the lookup key is stored in the flow cache, and, when the lookup key is stored in the flow cache, retrieve a stored result associated with the lookup key and output the stored result.
摘要翻译：示例性网络设备包括被配置为接收分组流的分组的网络接口，其中所述分组流是由所述网络设备处理的多个分组流之一，被配置为接收与所述分组流相关联的查找密钥的流缓存以及布隆过滤器，其被配置为处理查找密钥。流缓存还被配置为存储关于由网络设备处理的多个分组流的一部分的信息，并且通过至少应用选择标准来应用Bloom的处理查找密钥来确定是否存储关于分组流的信息过滤。流缓存被配置为确定查找密钥是否存储在流缓存中，并且当查找密钥存储在流缓存中时，检索与查找密钥相关联的存储结果并输出存储的结果。

2. 发明授权

US08800021B1 Hardware implementation of complex firewalls using chaining technique 有权
标题翻译：使用链接技术的复杂防火墙的硬件实现
公开(公告)号：US08800021B1
公开(公告)日：2014-08-05
申请号：US13172621
申请日：2011-06-29
申请人： Venkatasubramanian Swaminathan , Deepak Goel , Jianhui Huang , John Keen , Jean-Marc Frailong , Srinivasan Jagannadhan , Srilakshmi Adusumalli
发明人： Venkatasubramanian Swaminathan , Deepak Goel , Jianhui Huang , John Keen , Jean-Marc Frailong , Srinivasan Jagannadhan , Srilakshmi Adusumalli
IPC分类号： G06F17/00
CPC分类号： H04L63/0263 , H04L63/02 , H04L63/0209
摘要： A firewall device may include a forwarding component that includes a filter block. The filter block may obtain a first hardware-implemented filter, where a hardware implementation limits the first hardware-implemented filter to a maximum quantity of rules; determine whether a last rule associated with the accessed hardware-implemented filter includes a split-filter action, where the split-filter action identifies a second hardware-implemented filter; and link the second hardware-implemented filter to the first hardware-implemented filter to make the second hardware-implemented filter a logical continuation of the first hardware-implemented filter, in response to determining that the last rule includes the split-filter action. The filter block may further determine whether a particular rule of the first hardware-implemented filter includes a next-filter action, where the next filter action identifies a third hardware-implemented filter; and process the third hardware-implemented filter independently of the sequence of hardware attachment points.
摘要翻译：防火墙设备可以包括包括过滤器块的转发组件。滤波器块可以获得第一硬件实现的滤波器，其中硬件实现将第一硬件实现的滤波器限制为最大数量的规则; 确定与所访问的硬件实现的过滤器相关联的最后规则是否包括拆分过滤器动作，其中分割过滤器动作标识第二硬件实现的过滤器; 以及响应于确定所述最后一个规则包括所述分割过滤器动作，将所述第二硬件实现的过滤器链接到所述第一硬件实现的过滤器，以使得所述第二硬件实现的过滤器是所述第一硬件实现的过滤器的逻辑延续。滤波器块还可以确定第一硬件实现的滤波器的特定规则是否包括下一个滤波器动作，其中下一个滤波器动作识别第三硬件实现的滤波器; 并且独立于硬件连接点的顺序处理第三个硬件实现的过滤器。

3. 发明申请

US20130212296A1 FLOW CACHE MECHANISM FOR PERFORMING PACKET FLOW LOOKUPS IN A NETWORK DEVICE 有权
标题翻译：用于在网络设备中执行分组流量查询的流速缓存机制
公开(公告)号：US20130212296A1
公开(公告)日：2013-08-15
申请号：US13372014
申请日：2012-02-13
申请人： Deepak Goel , John Keen , Venkatasubramanian Swaminathan
发明人： Deepak Goel , John Keen , Venkatasubramanian Swaminathan
IPC分类号： G06F15/173
CPC分类号： H04L45/748 , H04L45/742 , H04L45/7453
摘要： An example network device includes a network interface configured to receive a packet of a packet flow, wherein the packet flow is one of a plurality of packet flows processed by the network device, a flow cache configured to receive a lookup key associated with the packet flow, and a Bloom filter configured to process the lookup key. The flow cache is further configured to store information about a portion of the plurality of packet flows processed by the network device, and determine whether to store information about the packet flow by at least applying a selection criterion to processing of the lookup key by the Bloom filter. The flow cache is configured to determine whether the lookup key is stored in the flow cache, and, when the lookup key is stored in the flow cache, retrieve a stored result associated with the lookup key and output the stored result.
摘要翻译：示例性网络设备包括被配置为接收分组流的分组的网络接口，其中所述分组流是由所述网络设备处理的多个分组流之一，被配置为接收与所述分组流相关联的查找密钥的流缓存以及布隆过滤器，其被配置为处理查找密钥。流缓存还被配置为存储关于由网络设备处理的多个分组流的一部分的信息，并且通过至少应用选择标准来应用Bloom的处理查找密钥来确定是否存储关于分组流的信息过滤。流缓存被配置为确定查找密钥是否存储在流缓存中，并且当查找密钥存储在流缓存中时，检索与查找密钥相关联的存储结果并输出存储的结果。

4. 发明授权

US08630294B1 Dynamic bypass mechanism to alleviate bloom filter bank contention 有权
标题翻译：动态旁路机制，以减轻爆发滤波器组争用
公开(公告)号：US08630294B1
公开(公告)日：2014-01-14
申请号：US13239915
申请日：2011-09-22
申请人： John Keen , Jianhui Huang , Deepak Goel , David R. Skinner , Venkatasubramanian Swaminathan
发明人： John Keen , Jianhui Huang , Deepak Goel , David R. Skinner , Venkatasubramanian Swaminathan
IPC分类号： H04L12/28
CPC分类号： H04L45/7453
摘要： An example computing device includes a prefix lookup module, and a Bloom filter that includes a set of queues. The prefix lookup module is configured to receive policy configuration information, examine a state of a queue of the set of queues, and determine whether to bypass the first Bloom filter based on the policy configuration information and the state of the queue. In one example, the prefix lookup module may be configured to, using the policy configuration information, determine to bypass the Bloom filter when the queue is full. In another example, the prefix lookup module may be configured to, using the policy configuration information, determine not to bypass the Bloom filter and send a lookup request to the Bloom filter upon determining that the queue is no longer full.
摘要翻译：示例性计算设备包括前缀查找模块和包括一组队列的布隆过滤器。前缀查找模块被配置为接收策略配置信息，检查队列的队列的状态，并且基于策略配置信息和队列的状态来确定是否绕过第一布隆过滤器。在一个示例中，前缀查找模块可以被配置为，当队列已满时，使用策略配置信息来确定绕过布隆过滤器。在另一个示例中，前缀查找模块可以被配置为：使用策略配置信息确定不绕过布隆过滤器并且在确定队列不再满的情况下向Bloom过滤器发送查找请求。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式