专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08938469B1 Dynamically adjusting hash table capacity 有权
标题翻译：动态调整哈希表容量
公开(公告)号：US08938469B1
公开(公告)日：2015-01-20
申请号：US13239774
申请日：2011-09-22
申请人： John Keen , Jean-Marc Frailong , Deepak Goel
发明人： John Keen , Jean-Marc Frailong , Deepak Goel
IPC分类号： G06F17/30
CPC分类号： H04L45/7453
摘要： An example hashing unit includes a plurality of hardware-based hash tables, wherein each of the hash tables comprises a plurality of buckets, and wherein the plurality of hash tables comprise a set of zero or more active hash tables and a set of one or more inactive hash tables. An example hashing unit controller is configured to receive a key value to be stored in the hashing unit, determine that one of the inactive hash tables should be activated, and, based on the determination, activate the one of the set of inactive hash tables as a recently activated hash table, determine one of the buckets of the recently activated hash table to which a hash function associated with the recently activated hash table maps the received key value, and store the key value in the determined one of the buckets of the recently activated hash table.
摘要翻译：示例性散列单元包括多个基于硬件的散列表，其中每个散列表包括多个桶，并且其中所述多个散列表包括一组零个或多个活动散列表和一组一个或多个不活动的哈希表。示例性散列单元控制器被配置为接收要存储在散列单元中的密钥值，确定应激活其中一个非活动散列表，并且基于该确定，将该非活动散列表中的一个激活为最近激活的散列表确定最近激活的散列表的一个桶，其中与最近激活的散列表相关联的散列函数映射到接收到的密钥值，并将密钥值存储在最近确定的一个桶中激活哈希表。

2. 发明授权

US08799507B2 Longest prefix match searches with variable numbers of prefixes 有权
标题翻译：最长的前缀匹配用可变数量的前缀进行搜索
公开(公告)号：US08799507B2
公开(公告)日：2014-08-05
申请号：US13418907
申请日：2012-03-13
申请人： John Keen , Jean-Marc Frailong , Deepak Goel , Srinivasan Jagannadhan , Srilakshmi Adusumalli
发明人： John Keen , Jean-Marc Frailong , Deepak Goel , Srinivasan Jagannadhan , Srilakshmi Adusumalli
IPC分类号： G06F15/173
CPC分类号： H04L45/748 , H04L45/7453
摘要： An example network device includes a control plane and a filter lookup module that includes a Bloom filter that supports parallel lookup of a maximum number of different prefix lengths. The filter lookup module accesses the Bloom filter to determine a longest length prefix that matches an entry in a set of prefixes. The control plane receives prefix lengths that include more than the maximum number of different prefix lengths supported by the Bloom filter, wherein the set of prefix lengths is associated with one application, generates, based on the received set of prefix lengths, two or more groups of different prefix lengths, wherein each of the two or more groups of different prefix lengths includes no more than the maximum number of different prefix lengths, and programs the filter lookup module with the two or more groups of different prefix lengths associated with the one application.
摘要翻译：示例性网络设备包括控制平面和过滤器查找模块，其包括支持最大数量的不同前缀长度的并行查找的布隆过滤器。过滤器查找模块访问Bloom过滤器以确定与一组前缀中的条目匹配的最长长度前缀。控制平面接收包括大于由Bloom过滤器支持的不同前缀长度的最大数量的前缀长度，其中前缀长度集合与一个应用相关联，基于所接收的一组前缀长度生成两个或多个组其中不同前缀长度的两个或多个组中的每一个包括不超过不同前缀长度的最大数目，并且将过滤器查找模块与与一个应用程序相关联的两个或更多个不同前缀长度的组编程。

3. 发明授权

US08800021B1 Hardware implementation of complex firewalls using chaining technique 有权
标题翻译：使用链接技术的复杂防火墙的硬件实现
公开(公告)号：US08800021B1
公开(公告)日：2014-08-05
申请号：US13172621
申请日：2011-06-29
申请人： Venkatasubramanian Swaminathan , Deepak Goel , Jianhui Huang , John Keen , Jean-Marc Frailong , Srinivasan Jagannadhan , Srilakshmi Adusumalli
发明人： Venkatasubramanian Swaminathan , Deepak Goel , Jianhui Huang , John Keen , Jean-Marc Frailong , Srinivasan Jagannadhan , Srilakshmi Adusumalli
IPC分类号： G06F17/00
CPC分类号： H04L63/0263 , H04L63/02 , H04L63/0209
摘要： A firewall device may include a forwarding component that includes a filter block. The filter block may obtain a first hardware-implemented filter, where a hardware implementation limits the first hardware-implemented filter to a maximum quantity of rules; determine whether a last rule associated with the accessed hardware-implemented filter includes a split-filter action, where the split-filter action identifies a second hardware-implemented filter; and link the second hardware-implemented filter to the first hardware-implemented filter to make the second hardware-implemented filter a logical continuation of the first hardware-implemented filter, in response to determining that the last rule includes the split-filter action. The filter block may further determine whether a particular rule of the first hardware-implemented filter includes a next-filter action, where the next filter action identifies a third hardware-implemented filter; and process the third hardware-implemented filter independently of the sequence of hardware attachment points.
摘要翻译：防火墙设备可以包括包括过滤器块的转发组件。滤波器块可以获得第一硬件实现的滤波器，其中硬件实现将第一硬件实现的滤波器限制为最大数量的规则; 确定与所访问的硬件实现的过滤器相关联的最后规则是否包括拆分过滤器动作，其中分割过滤器动作标识第二硬件实现的过滤器; 以及响应于确定所述最后一个规则包括所述分割过滤器动作，将所述第二硬件实现的过滤器链接到所述第一硬件实现的过滤器，以使得所述第二硬件实现的过滤器是所述第一硬件实现的过滤器的逻辑延续。滤波器块还可以确定第一硬件实现的滤波器的特定规则是否包括下一个滤波器动作，其中下一个滤波器动作识别第三硬件实现的滤波器; 并且独立于硬件连接点的顺序处理第三个硬件实现的过滤器。

4. 发明申请

US20130246651A1 LONGEST PREFIX MATCH SEARCHES WITH VARIABLE NUMBERS OF PREFIXES 有权
标题翻译：最新的前缀匹配搜索与可变数字的前缀
公开(公告)号：US20130246651A1
公开(公告)日：2013-09-19
申请号：US13418907
申请日：2012-03-13
申请人： John Keen , Jean-Marc Frailong , Deepak Goel , Srinivasan Jagannadhan , Srilakshmi Adusumalli
发明人： John Keen , Jean-Marc Frailong , Deepak Goel , Srinivasan Jagannadhan , Srilakshmi Adusumalli
IPC分类号： G06F15/173
CPC分类号： H04L45/748 , H04L45/7453
摘要： An example network device includes a control plane and a filter lookup module that includes a Bloom filter that supports parallel lookup of a maximum number of different prefix lengths. The filter lookup module accesses the Bloom filter to determine a longest length prefix that matches an entry in a set of prefixes. The control plane receives prefix lengths that include more than the maximum number of different prefix lengths supported by the Bloom filter, wherein the set of prefix lengths is associated with one application, generates, based on the received set of prefix lengths, two or more groups of different prefix lengths, wherein each of the two or more groups of different prefix lengths includes no more than the maximum number of different prefix lengths, and programs the filter lookup module with the two or more groups of different prefix lengths associated with the one application.
摘要翻译：示例性网络设备包括控制平面和过滤器查找模块，其包括支持最大数量的不同前缀长度的并行查找的布隆过滤器。过滤器查找模块访问Bloom过滤器以确定与一组前缀中的条目匹配的最长长度前缀。控制平面接收包括大于由Bloom过滤器支持的不同前缀长度的最大数量的前缀长度，其中前缀长度集合与一个应用相关联，基于所接收的一组前缀长度生成两个或多个组其中不同前缀长度的两个或多个组中的每一个包括不超过不同前缀长度的最大数目，并且将过滤器查找模块与与一个应用程序相关联的两个或更多个不同前缀长度的组编程。

5. 发明申请

US20110200038A1 METHODS AND APPARATUS RELATED TO PACKET CLASSIFICATION ASSOCIATED WITH A MULTI-STAGE SWITCH 有权
标题翻译：与多级开关相关的分组分类相关的方法和装置
公开(公告)号：US20110200038A1
公开(公告)日：2011-08-18
申请号：US13097770
申请日：2011-04-29
申请人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
发明人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
IPC分类号： H04L12/50 , H04L12/56
CPC分类号： H04L45/00 , H04L45/12 , H04L49/1515 , H04L49/503
摘要： In one embodiment, an apparatus can include a policy vector module configured to retrieve a compressed policy vector based on a portion of a data packet received at a multi-stage switch. The apparatus can also include a decompression module configured to receive the compressed policy vector and configured to define a decompressed policy vector based on the compressed policy vector. The decompressed policy vector can define a combination of bit values associated with a policy.
摘要翻译：在一个实施例中，装置可以包括策略向量模块，其被配置为基于在多级交换机处接收到的数据分组的一部分来检索压缩策略向量。该装置还可以包括解压缩模块，其被配置为接收压缩的策略向量并且被配置为基于压缩的策略向量来定义解压缩的策略向量。解压缩的策略向量可以定义与策略相关联的比特值的组合。

6. 发明授权

US07961734B2 Methods and apparatus related to packet classification associated with a multi-stage switch 有权
标题翻译：与多级开关相关的分组分类相关的方法和装置
公开(公告)号：US07961734B2
公开(公告)日：2011-06-14
申请号：US12242168
申请日：2008-09-30
申请人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
发明人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
IPC分类号： H04L12/28
CPC分类号： H04L45/00 , H04L45/12 , H04L49/1515 , H04L49/503
摘要： In one embodiment, an apparatus can include a policy vector module configured to retrieve a compressed policy vector based on a portion of a data packet received at a multi-stage switch. The apparatus can also include a decompression module configured to receive the compressed policy vector and configured to define a decompressed policy vector based on the compressed policy vector. The decompressed policy vector can define a combination of bit values associated with a policy.
摘要翻译：在一个实施例中，装置可以包括策略向量模块，其被配置为基于在多级交换机处接收到的数据分组的一部分来检索压缩策略向量。该装置还可以包括解压缩模块，其被配置为接收压缩的策略向量并且被配置为基于压缩的策略向量来定义解压缩的策略向量。解压缩的策略向量可以定义与策略相关联的比特值的组合。

7. 发明申请

US20100083345A1 METHODS AND APPARATUS RELATED TO PACKET CLASSIFICATION ASSOCIATED WITH A MULTI-STAGE SWITCH 有权
标题翻译：与多级开关相关的分组分类相关的方法和装置
公开(公告)号：US20100083345A1
公开(公告)日：2010-04-01
申请号：US12242168
申请日：2008-09-30
申请人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
发明人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
IPC分类号： H04L9/00 , H04L12/56
CPC分类号： H04L45/00 , H04L45/12 , H04L49/1515 , H04L49/503
摘要： In one embodiment, an apparatus can include a policy vector module configured to retrieve a compressed policy vector based on a portion of a data packet received at a multi-stage switch. The apparatus can also include a decompression module configured to receive the compressed policy vector and configured to define a decompressed policy vector based on the compressed policy vector. The decompressed policy vector can define a combination of bit values associated with a policy.
摘要翻译：在一个实施例中，装置可以包括策略向量模块，其被配置为基于在多级交换机处接收到的数据分组的一部分来检索压缩策略向量。该装置还可以包括解压缩模块，其被配置为接收压缩的策略向量并且被配置为基于压缩的策略向量来定义解压缩的策略向量。解压缩的策略向量可以定义与策略相关联的比特值的组合。

8. 发明申请

US20100080224A1 METHODS AND APPARATUS FOR PACKET CLASSIFICATION BASED ON POLICY VECTORS 有权
标题翻译：基于政策向量的分组分类的方法和装置
公开(公告)号：US20100080224A1
公开(公告)日：2010-04-01
申请号：US12242172
申请日：2008-09-30
申请人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
发明人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
IPC分类号： H04L12/56
CPC分类号： H04L45/745 , H04L49/1515 , H04L49/503 , H04L69/22
摘要： In one embodiment, a method, comprising producing a first policy vector based on a first portion of a data packet received at a multi-stage switch. The method also includes producing a second policy vector based on a second portion of the data packet different than the first portion of the data packet. A third policy vector is produced based on a combination of at least the first policy vector and at least the second policy vector. The third policy vector including a combination of bit values configured to trigger an element at the multi-stage switch to process the data packet.
摘要翻译：在一个实施例中，一种方法，包括基于在多级交换机处接收到的数据分组的第一部分产生第一策略向量。该方法还包括基于不同于数据分组的第一部分的数据分组的第二部分产生第二策略向量。基于至少第一策略向量和至少第二策略向量的组合来生成第三策略向量。第三策略向量包括被配置为触发多级切换处的元素以处理数据分组的比特值的组合。

9. 发明授权

US08571034B2 Methods and apparatus related to packet classification associated with a multi-stage switch 有权
标题翻译：与多级开关相关的分组分类相关的方法和装置
公开(公告)号：US08571034B2
公开(公告)日：2013-10-29
申请号：US13097770
申请日：2011-04-29
申请人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
发明人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
IPC分类号： H04L12/28
CPC分类号： H04L45/00 , H04L45/12 , H04L49/1515 , H04L49/503
摘要： In one embodiment, an apparatus can include a policy vector module configured to retrieve a compressed policy vector based on a portion of a data packet received at a multi-stage switch. The apparatus can also include a decompression module configured to receive the compressed policy vector and configured to define a decompressed policy vector based on the compressed policy vector. The decompressed policy vector can define a combination of bit values associated with a policy.
摘要翻译：在一个实施例中，装置可以包括策略向量模块，其被配置为基于在多级交换机处接收到的数据分组的一部分来检索压缩策略向量。该装置还可以包括解压缩模块，其被配置为接收压缩的策略向量并且被配置为基于压缩的策略向量来定义解压缩的策略向量。解压缩的策略向量可以定义与策略相关联的比特值的组合。

10. 发明授权

US07835357B2 Methods and apparatus for packet classification based on policy vectors 有权
标题翻译：基于策略向量的分组分类方法和装置
公开(公告)号：US07835357B2
公开(公告)日：2010-11-16
申请号：US12242172
申请日：2008-09-30
申请人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
发明人： Ramesh Panwar , Deepak Goel , Srinivasan Jagannadhan , Jean-Marc Frailong
IPC分类号： H04L12/28
CPC分类号： H04L45/745 , H04L49/1515 , H04L49/503 , H04L69/22
摘要： In one embodiment, a method, comprising producing a first policy vector based on a first portion of a data packet received at a multi-stage switch. The method also includes producing a second policy vector based on a second portion of the data packet different than the first portion of the data packet. A third policy vector is produced based on a combination of at least the first policy vector and at least the second policy vector. The third policy vector including a combination of bit values configured to trigger an element at the multi-stage switch to process the data packet.
摘要翻译：在一个实施例中，一种方法，包括基于在多级交换机处接收到的数据分组的第一部分产生第一策略向量。该方法还包括基于不同于数据分组的第一部分的数据分组的第二部分产生第二策略向量。基于至少第一策略向量和至少第二策略向量的组合来生成第三策略向量。第三策略向量包括被配置为触发多级切换处的元素以处理数据分组的比特值的组合。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式