Policy based routing using a fast filter processor
View Patent ↗A network device for processing packets. The network device includes applying specific fields from a packet to an associated memory device and comparing means for comparing input to the memory device with entries in the memory device. The network device also includes enabling means for enabling selection of bits, by the memory device, that are required to match exactly with bits from the input to the memory device. The network device further includes outputting means for outputting an address for a matched entry by the memory device and applying means for applying a match from the memory device to an associated entry in a table for applying actions from the table that are associated with the match to the packet.
1. A network device for routing packets, the network device comprising:
a processor comprising a plurality of slices for classifying a received packet and for performing at least one action based on a classification of the received packet, wherein each of the plurality of slices comprises:
a field selector configured to select at least one field from the received packet, and to apply the at least one field to the input of a ternary content addressable memory (TCAM);
a rules table, implemented as a plurality of entries in the TCAM, wherein the TCAM is configured to compare the input to each entry and to output the address of a matching entry, and wherein each entry in the TCAM includes an input port bit map that identifies the ports on the network device to which the entry applies; and
a policy table comprising a plurality of entries, wherein each entry in the policy table is indexed by the address of an associated entry in the TCAM, and includes at least one action to be performed by the network device.
2. The network device according to claim 1 , wherein the field selector is configured to select an IP address associated with the received packet and a port identifier associated with a port on which the packet was received.
3. The network device according to claim 2 , wherein the TCAM is configured to mask the IP address to obtain predefined bits from the IP address, wherein the predefined bits are determined based on a type of routing that is to be performed.
4. The network device according to claim 2 , wherein the processor is configured to use the IP address and the port identifier to search the TCAM for a matching entry.
5. The network device according to claim 4 , wherein the processor is configured to use information from the matching entry to obtain an action from an associated entry in the policy table, wherein the action is a layer 3 switch action.
6. The network device according to claim 1 , wherein the policy table is configured to provide a next hop index, wherein the next hop index is used to obtain routing information for the packet.
7. The network device according to claim 1 , wherein the policy table comprises storing means for storing actions associated with the match.
8. A method for processing packets, the method comprising:
parsing at least one field from a received packet and applying the at least one field to an input of a ternary content addressable memory (TCAM) device, wherein each entry in the TCAM includes an input port bit map that identifies the ports on a network device to which the entry applies;
using a mask to select bits from the at least one parsed field that are required to match exactly with bits from an entry in the TCAM;
outputting an address for an entry in the TCAM when the selected bits from the at least one parsed field match exactly with the bits from the entry in the TCAM; and
using the output address to obtain an action from an action table and performing the action.
9. The method according to claim 8 , wherein parsing at least one field from the received packet comprises parsing an IP address associated with the packet and a port identifier associated with a port on which the packet was received.
10. The method according to claim 9 , wherein using a mask to select bits from the at least one field comprises using a mask to obtain predefined bits from the IP address, wherein the predefined bits are determined based on a type of routing that is to be performed.
11. The method according to claim 9 , wherein the IP address and the port identifier are used to obtain the match from the TCAM memory device.
12. The method according to claim 11 , wherein the action obtained from the action table is a layer 3 switch action.
13. The method according to claim 8 , wherein the action obtained from the action table is a next hop index used to obtain routing information for the packet.