Apparatus and method for layer-2 to layer-7 search engine for high speed network application
View Patent ↗High-speed networking application equipments with a layer-2 to layer-7 hardware search engine and method are with flexibility and performance improvement. The multi-layer switches/routers, network address translation (NAT) gateway, firewall/VPN router and network attached storage (NAS) may use the search engine for fast and efficient search requirement.
1. An apparatus for layer-2 to layer-7 search engine for high-speed network application, comprising:
a media access controller (MAC) connecting a computer network and receiving a plurality of data packets;
a packet parser electrically coupled to the media access controller to parse the data packets;
a plurality of protocol search engines electrically coupled to the packet parser and searching a plurality of matched fields from the data packets according to at least a protocol matching rule table;
a search resolution engine electrically coupled to the protocol search engines and choosing a plurality of target fields from the matched fields with a highest priority;
a packet modifier electrically coupled to the search resolution engine and modifying the packet headers; and
a Direct Memory Access (DMA) engine receiving the data packets from the packet modifier.
2. The apparatus for layer-2 to layer-7 search engine for high-speed network application according to claim 1 , wherein the computer network is a gigabit Ethernet.
3. The apparatus for layer-2 to layer-7 search engine for high-speed network application according to claim 1 , further comprising a buffer electrically coupled to the media access controller and the packet parser to store the data packets.
4. The apparatus for layer-2 to layer-7 search engine for high-speed network application according to claim 1 , wherein the packet parser extracts a plurality of fields in each of the data packets.
5. The apparatus for layer-2 to layer-7 search engine for high-speed network application according to claim 4 , wherein the fields are selected from layer-2 header fields, layer-3 headers fields, layer-4 bytes and layer-7 bytes.
6. The apparatus for layer-2 to layer-7 search engine for high-speed network application according to claim 5 , wherein the layer-2 header fields are Media Access Control (MAC) DA/SA address, Virtual Local Area Network-ID (VLAN-ID), Ethernet Type fields, Point-to-Point Protocol over Ethernet (PPPoE) session ID.
7. The apparatus for layer-2 to layer-7 search engine for high-speed network application according to claim 5 , wherein the layer-3 headers fields are IPv4 or IPv6 source/destination IP address, Type of Service (TOS) field or flow label.
8. The apparatus for layer-2 to layer-7 search engine for high-speed network application according to claim 5 , wherein the layer-4 bytes are TCP source/destination port number, UDP source/destination port number, IPSec (IP Security) field.
9. The apparatus for layer-2 to layer-7 search engine for high-speed network application according to claim 5 , wherein the layer-7 bytes are application specified fields.
10. The apparatus for layer-2 to layer-7 search engine for high-speed network application according to claim 1 , further comprising a plurality of queues storing the data packets from the Direct Memory Access (DMA) engine.