Network system having an extensible forwarding plane
View Patent ↗A platform for seamlessly hosts a plurality of disparate types of packet processing applications. One or more applications are loaded onto a service card on the platform. A programmable path structure is included that maps a logical path for processing of the packets through one or more of the plurality of service cards according to characteristics of the packets. Multiple path structures may be programmed into the platform to offer different service paths for different types of packets.
1. A method for processing a packet in a forwarding plane of a network platform, the method comprising:
receiving a packet;
executing a plurality of service applications, each configured to perform a specific segment of processing on the packet, wherein the plurality of service applications are executed by the network platform; and
linking, through a user-defined programmable service path structure, completion of processing of one specific segment of processing associated with one of the service applications to a start of processing of another specific segment of another of the service applications such that each portion of processing of the packet can be performed in a specific order and by any of the plurality of service applications specified by the user-defined programmable service path structure.
2. The method as recited in claim 1 , further comprising determining a next-hop or destination for the packet.
3. The method as recited in claim 1 , further comprising determining a next-hop or destination of the packet, wherein the determination of the next-hop or destination of the packet is decoupled from the execution of the plurality of service applications.
4. The method as recited in claim 1 , wherein the linking of completion of processing of one specific segment of processing associated with one of the service applications to a start of processing of another specific segment of another of the service applications through the user-defined programmable service path structure is accomplished by use of at least one logical primitive: an “AND” operator—causing flow replication—or an “OR” operator—causing flow distribution.
5. The method as recited in claim 1 , wherein at least one of the plurality service applications are embedded as processor-executable code in a computer-readable media on a service card of the platform.
6. The method as recited in claim 1 , wherein executing the plurality of service applications includes executing applications associated with network security comprising at least one of a firewall process, a Deep Packet Inspection process, a virus detection process, and a denial of service detection process.
7. The method as recited in claim 1 , wherein executing the plurality of service applications includes executing applications associated with traffic accounting/monitoring.
8. The method as recited in claim 1 , wherein the method is performed by a network platform.
9. A method, comprising:
processing a packet through a forwarding plane of a network platform including:
receiving a packet;
determining a characteristic associated with the packet;
selecting a particular one out of a plurality of programmable service path structures for processing the packet, the selection based on the determined characteristic of the packet, wherein each programmable service path structure includes one or more service applications, each configured to perform a specific segment of processing on the packet associated with network security, transcoding, or traffic analysis, wherein the one or more service applications are executed by the network platform;
processing the packet, using the network platform, through the one or more service applications in accordance with the programmable service path structure; and forwarding the packet from the network platform.
10. The method as recited in claim 9 , wherein at least one of the plurality service applications are embedded as processor-executable code in a computer-readable media on a service card of the platform.
11. The method as recited in claim 9 , wherein at least one of the plurality of service applications comprises a virus detection system.
12. The method of claim 9 , wherein at least one of the plurality of service applications comprises a firewall system.
13. The method as recited in claim 9 , wherein at least one of the plurality of service applications comprises a denial of service detection system.
14. A system for processing a packet in a forwarding plane of a network platform, the system comprising:
means for receiving a packet;
means for executing a plurality of service applications, each service application configured to perform a specific segment of processing on the packet; and
means for linking, through a user-defined programmable service path structure, completion of processing of one specific segment of processing associated with one of the service applications to a start of processing of another specific segment of another of the service applications such that each portion of processing of the packet can be performed in a specific order and by any of the plurality of service applications specified by the user-defined programmable service path structure.
15. The system as recited in claim 14 , further comprising means for determining a next-hop or destination for the packet.
16. The system as recited in claim 14 , wherein the means for executing the plurality of service application includes at least one service card.
17. The system as recited in claim 14 , wherein the means for linking includes at least one logical primitive: an “AND” operator—causing flow replication—or an “OR” operator—causing flow distribution.
18. The system as recited in claim 14 , wherein at least one of the plurality service applications is embedded as processor-executable code in a computer-readable media.