Community separation enforcement
Embodiments of the present invention provide an Infiniband device having an input port for receiving a data packet. The input port is operable to extract a partition membership identifier from the packet; and to compare the extracted partition membership identifier to a partition membership table of the port to determine whether the packet breaches a partition group membership requirement. In some embodiments, the partition membership table is implemented as a content addressable memory storing a plurality of programmable bit masks.
1. An Infiniband device having an input port, wherein the input port:
receives a data packet;
extracts an InfiniBand partition membership identifier from the packet;
compares the InfiniBand partition membership identifier's value to a set of InfiniBand partition membership identifier values stored in a table for the port to determine whether the packet violates an InfiniBand partition membership requirement, wherein at least one InfiniBand partition membership identifier value in the set of InfiniBand partition membership identifier values stored in the table for the port represents at least two InfiniBand partitions, and wherein the at least one InfiniBand partition membership identifier value contains at least one don't care element.
2. The device of claim 1 , further comprising a programmable bit mask, wherein the don't care element is provided by applying the bit mask to the extracted InfiniBand partition membership identifier not having a don't care element.
3. The device of claim 2 , wherein the at least one InfiniBand partition membership identifier value is stored in a logic device which can store 3 data states, and wherein the don't care element is provided by a third data state storage area of the logic device.
4. The device of claim 2 , wherein the determination of whether the packet breaches an InfiniBand partition membership requirement is based on a comparison of the extracted InfiniBand partition membership identifier value to the set of InfiniBand partition membership identifier values stored in a table for the port, representing an InfiniBand partition membership characteristic of the port.
5. The packet of claim 1 , wherein a breached InfiniBand partition membership requirement is determined if the extracted InfiniBand partition membership identifier value is different from an entry in the InfiniBand partition membership table.
6. The device of claim 1 , wherein the port is further operable to truncate the packet to remove a data payload from the packet if the packet violates the InfiniBand partition membership requirement.
7. The device of claim 1 , wherein the port is operable to delete the packet in the case of a determined breached InfiniBand partition membership requirement.
8. The device of claim 1 , wherein the device is a switch.
9. The device of claim 1 , wherein the device is a router.