Method and apparatus for intelligent sorting and process determination of data packets destined to a central processing unit of a router or server on a data packet network
In a network node having one or more packet processors and at least one CPU required to process specific types of packets, a system for managing the specific types of packets for CPU processing has one or more packet processors enabled to sort the specific types of packets into two or more categories of different priority for processing; and a queue set for queuing the sorted packets according to priority ahead of the CPU. The system is characterized in that the CPU processes the queued packets according to priority. In a special case the queues are a part of network access controller (NAC). Also in some cases a software component is provided for configuring the hardware.
1. A system for managing packets on a data network comprising;
a network node having one or more packet processors enabled to sort specific types of packets into categories for processing;
a network access controller (NAC) operating in the node;
a queue set for receiving processed packets from the NAC; and
a CPU for pulling packets for processing from the queue set;
wherein the packet processors provide enhanced security in the network by categorizing incoming packets destined for the CPU into three or more categories, being at least one category for packets received from known, trusted sources, one category for suspect sources, and one category for packets received from unsure sources and forwards the categorized packets to the queue set and the CPU pulls packets for processing from the queue set according to a priority listing of the categories.
2. The system of claim 1 wherein the priories set for the categories are highest, lowest and intermediate, respectively.
3. The system of claim 1 , wherein the network is the Internet network.
4. The system of claim 1 , wherein the network node is one of a packet router, a computer, or an information server.
5. The system of claim 1 , wherein the network is the Internet network.
6. A method for processing CPU-destined data packets in a network node, comprising the steps of;
(a) providing a CPU in the node for receiving and processing incoming packets from the network;
(b) providing a network access controller (NAC) in the node;
(c) processing incoming packets destined for the CPU into three or more categories, the categories consisting of known, trusted sources; suspect sources and unsure sources, thereby providing enhanced security in the network;
(d) queuing the categorized packets into a queue set; and
(e) pulling the packets from the queue set by the CPU for processing according to a priority listing of the categories.
7. The method of 6 wherein the priories set forte categories in step (c) are highest, lowest and intermediate, respectively.
8. The method of claim 7 , wherein the CPU always processes the highest level of priority regardless of CPU load.
9. The method of claim 6 , wherein the network is the Internet network.
10. The method of claim 6 , wherein the network node is one of a packet router, a computer, or an information server.
11. The method of claim 10 , wherein the network is the Internet network.