Sharing of network security and services processing resources
View Patent ↗Systems and methods are disclosed of routing traffic in a network that include classifying incoming data packets using the content of the incoming data packets that remains relatively consistent during a network session. These systems and methods also include ordering the incoming traffic according to at least one internet protocol address comprised within the incoming traffic, hashing the at least one internet protocol address and the destination port within the incoming traffic, and determining a destination service module for the incoming traffic. Through these systems and methods, data can be routed without the need for complete flow tables.
1. A method of routing traffic in a network, the method comprising:
classifying incoming data packets, wherein the classification is based on the content of the incoming data packets that remains consistent during a network session;
ordering the data packets according to at least one internet protocol address comprised within the incoming data packets;
hashing the at least one internet protocol address and the destination port within the incoming data packets;
determining a destination service module for the incoming data packets using the hash created by the at least one internet protocol address and the destination port within the incoming data packets; and
routing the incoming traffic.
2. The method of claim 1 , wherein ordering the incoming data packets further comprises using a precedence table.
3. The method of claim 2 , further comprising determining if a session is present.
4. The method of claim 3 , wherein if a session is present routing the incoming traffic according to the existing session.
5. The method of claim 1 , wherein the data packets are routed to one of a plurality of service modules.
6. The method of claim 1 , wherein the data packets are routed from one of the plurality of service modules to an egress network processing unit.
7. A system, comprising:
an ingress network processing unit;
a plurality of service modules connected to the ingress network unit;
an egress network processing unit connected to the plurality of service modules, wherein the ingress network processing module classifies incoming data packets, wherein the classification is based on the content of the incoming data packets that remains consistent during a network session, orders the data packets according to at least one internet protocol address comprised within the incoming data packets, hashes the destination information of the at least one incoming data packet, examines the destination information of at least one incoming data packet and routes the at least one incoming data packet to one of the plurality of service modules based upon static destination information of the at least one incoming data packet, and the at least one of the plurality of service modules processes the at least one incoming data packet and transmits the at least one data packet to the egress network processing unit.
8. The system of claim 7 , wherein the ingress module routes the at least one incoming data packet by determining the priority of the destination information of the at least one incoming data packet.
9. The system of claim 7 , wherein the ingress module determines if a session is in progress prior to routing the data.
10. The system of claim 7 , wherein the ingress module comprises a precedence table.
11. The system of claim 7 , wherein the ingress module comprises a hash table.
12. The system of claim 11 , wherein the hash table is used to route the at least one incoming data packet.
13. A method of routing traffic in a network, the method comprising:
selecting destination data parameters that remain consistent throughout a network traffic session;
classifying incoming network traffic based upon the selected destination data parameters;
ordering the incoming traffic according to at least one destination data parameter comprised within the incoming network traffic using a precedence table;
determining a destination service module for the incoming network traffic;
routing the incoming network traffic.
14. The method of claim 13 , further comprising hashing the destination data.
15. The method of claim 13 , wherein the incoming network traffic is routed to one of a plurality of service modules.
16. The method of claim 15 , wherein the data packets are routed from the one of the plurality of service modules to an egress network processing unit.
17. The method of claim 15 , wherein the incoming network traffic is load balanced amount the plurality of service modules.
18. The method of claim 15 , wherein the precedence table comprises information related to services and destination information.
19. The method of claim 15 , wherein the destination data parameters comprise the destination address of a packet.
20. The method of claim 15 , wherein the destination data parameters comprise the destination port of a packet.