Granted Patent B2

US 7,450,507 · App. 10/369,432 · Granted Nov 11, 2008

Abstract

Claims (29)

1. A method for rate-limiting a traffic stream using a rate-limit hierarchy at a network node comprising:

subjecting a packet to a first rate-limit check, said first rate-limit check corresponding to a first-level traffic classification;

subjecting said packet to a second rate-limit check and an infinity rate-limit check, said second rate-limit check and said infinity rate-limit check corresponding to a second-level traffic classification;

granting an automatic pass to said packet from said infinity rate-limit check regardless of whether or not said packet passes said second rate-limit check; and

granting an overall pass of said rate-limit hierarchy if said packet passes said first rate-limit check, even if said packet fails said second rate-limit check.

2. The method of claim 1 further comprising granting an overall fail of said rate-limit hierarchy if said packet does not pass said first rate-limit check.

3. The method of claim 1 wherein said first rate-limit check, said second rate-limit check, and said infinity rate-limit check are implemented in hardware.

4. The method of claim 3 wherein said first rate-limit check, said second rate-limit check, and said infinity rate-limit check are implemented in parallel.

5. The method of claim 1 wherein said subjecting said packet to said first rate-limit check and said subjecting said packet to said second rate-limit check and said infinity rate-limit check are performed in parallel.

6. The method of claim 1 wherein granting an overall pass of said rate-limit hierarchy includes allowing available bandwidth to be borrowed from said first-level traffic classification.

7. The method of claim 1 wherein said first-level traffic classification includes traffic of said second level traffic classification.

8. The method of claim 7 wherein said first-level traffic classification is a parent classification of said second-level traffic classification.

9. The method of claim 7 wherein said first-level traffic classification is a parent classification of said second-level traffic classification and said second-level traffic classification is a child classification of said first-level traffic classification.

10. The method of claim 1 further comprising assigning rate-limiting priority information to said packet at each rate-limit check that said packet passes and using said rate-limiting priority information to prioritize handling of said packet.

11. The method of claim 10 wherein said rate-limiting priority information is a function of passed rate-limit checks.

12. The method of claim 11 wherein said rate-limiting priority information is related to a most specific traffic classification.

13. A system for rate-limiting a traffic stream using a rate-limit hierarchy at a network node comprising:

a classification engine configured to identify a traffic classification of a packet;

a rule selection engine configured to identify rules that apply to said traffic classification identified by said classification engine;

first level-specific rule logic configured to subject said packet to a first rate-limit rule, said first rate-limit rule selected by said rule selection engine, said first rate-limit rule corresponding to a first-level traffic classification, and wherein said first level-specific rule logic determines an intermediate result for said packet at said first-level traffic classification in response to results of said first rate-limit;

second level-specific rule logic configured to subject said packet to a second rate-limit rule, said second rate limit rule selected by said rule selection engine, said second rate-limit rule corresponding to a second-level traffic classification, wherein said second level-specific rule logic further comprises an infinity rate-limit rule logic, said infinity rate-limit rule logic granting an automatic pass to said packet in said second-level traffic classification regardless of whether or not said packet passes said second rate-limit rule, and wherein said second level-specific rule logic determines an intermediate result for said packet at said second-level traffic classification in response to results of said second rate-limit rule and results of said infinity rate-limit rule logic; and

hierarchal rule logic configured to determine an overall result of said rate-limit hierarchy in response to intermediate results determined by said first and second level-specific rule logic.

14. The system of claim 13 wherein said level-specific rule logic further comprises a logic for each rule pertaining to said traffic classification and a processor that is generic to said traffic classification.

15. The system of claim 13 wherein said hierarchal rule logic grants an overall pass of said rate-limit hierarchy if said intermediate result at said first level-specific rule logic is a pass.

16. The system of claim 13 wherein said hierarchal rule logic grants an overall fail of said rate-limit hierarchy if said intermediate result at said first level-specific rule logic is a fail.

17. The system of claim 13 wherein said classification engine, said rule selection engine, said first level-specific rule logic, said second level-specific rule logic, and said hierarchal rule logic are embodied in hardware circuits.

18. The system of claim 13 wherein said first level-specific rule logic and said second level-specific rule logic are configured for parallel operation.

19. The system of claim 13 wherein said first level-specific rule logic relates to a classification level that is a parent of a classification level that is related to said second level-specific rule logic.

20. The system of claim 13 wherein said first level-specific rule logic and said second level-specific rule logic assign rate-limiting priority information to packets as part of said intermediate result.

Assignments (12)